Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/65e89037-1a2d-42f4-9706-514374558f79.roa
File:                     65e89037-1a2d-42f4-9706-514374558f79.roa (raw, json)
Hash identifier:          nc9mZooi+ttN6ue6qKtqXmJzZI9zgzeEJnbW1R0RE9g=
Subject key identifier:   CE:2C:DA:33:90:AC:FF:C7:47:0A:7B:32:09:EA:A8:B9:B7:4C:AF:6E
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       235DE6A40174F4262EDA97FBB74C101B07C57459
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/65e89037-1a2d-42f4-9706-514374558f79.roa
Signing time:             Sat 10 Aug 2024 00:00:00 +0000
ROA not before:           Sat 10 Aug 2024 00:00:00 +0000
ROA not after:            Sat 14 Sep 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5d:e6:a4:01:74:f4:26:2e:da:97:fb:b7:4c:10:1b:07:c5:74:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 10 00:00:00 2024 GMT
            Not After : Sep 14 23:59:59 2024 GMT
        Subject: serialNumber=c532e7525dff648c37a2ad75bd0866cadc172d02338f1bacf5c966e696f4d1d1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:a4:35:dd:5f:e6:4f:ee:e4:ee:b7:58:0d:
                    ed:45:91:aa:f7:57:84:22:9e:a9:92:13:47:d7:4c:
                    84:4e:fe:80:55:fb:1c:fe:8e:45:d4:ff:b8:e0:40:
                    3e:50:bd:3a:d2:9f:5b:69:74:92:6f:15:12:8c:ef:
                    36:a0:e3:94:c4:62:61:36:51:a8:f9:35:8d:05:43:
                    70:87:06:0a:7e:ed:97:6d:d0:fb:0b:35:a3:f8:a3:
                    14:67:f5:2c:94:e8:06:92:b1:81:b1:3c:16:67:51:
                    a6:55:99:71:35:1e:5b:b5:a8:3e:bf:8f:d6:a7:52:
                    18:73:5f:21:12:64:c9:67:3c:96:27:62:3e:ec:74:
                    07:c0:ca:d5:f4:0e:2e:4e:56:a3:30:63:f7:20:23:
                    94:ac:c3:2e:43:a5:4d:26:4e:74:21:68:45:9d:a1:
                    c7:99:ba:08:f5:b7:93:20:20:97:d7:14:54:58:3c:
                    3c:95:a3:2b:b9:bc:63:48:2f:51:0c:0c:ac:42:22:
                    b4:55:02:df:36:40:0f:d5:a4:3d:53:0e:cc:db:77:
                    08:8a:c5:26:20:c3:18:e2:20:53:90:44:4c:a3:51:
                    cc:75:7c:a0:b2:4f:db:5e:42:b5:f0:52:8c:95:d2:
                    87:e8:b3:4f:08:87:2a:89:86:d8:0a:90:0b:54:4d:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2C:DA:33:90:AC:FF:C7:47:0A:7B:32:09:EA:A8:B9:B7:4C:AF:6E
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/65e89037-1a2d-42f4-9706-514374558f79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:51:2e:82:fd:c2:21:f1:0b:dd:30:a1:80:19:1d:3e:15:bc:
         55:53:4e:7b:65:d4:9a:6b:b6:73:87:a7:54:ac:e2:a3:18:4e:
         83:4b:44:75:9d:c4:91:40:9f:db:fd:cb:ef:30:ff:02:63:69:
         c6:c2:dd:3f:88:03:ab:02:0b:d4:6d:63:7b:fd:61:58:5b:e6:
         c3:7b:87:d6:c0:80:6a:a2:95:3a:68:77:58:85:e4:71:7e:96:
         f6:d7:ee:8b:87:85:64:42:bd:0a:49:9a:5d:ab:1f:f7:73:94:
         69:d9:be:81:79:03:f1:57:0c:28:a7:06:33:36:67:e6:fd:c9:
         af:c7:09:39:ed:14:f0:2d:c2:b5:bb:7d:6f:f4:f8:2a:74:cd:
         2d:76:a8:12:9e:18:16:c8:3d:d2:62:3e:b5:38:5d:b5:74:da:
         29:8b:9e:e9:59:56:f6:92:1e:a2:f0:76:e3:94:25:47:fc:24:
         77:d1:c2:b2:5b:c2:4a:8a:5a:f1:2d:23:c2:98:78:02:42:b2:
         54:79:d1:9b:7a:ab:eb:c7:40:7d:09:7b:e3:b2:6a:c6:f8:c9:
         e7:f5:b5:d0:7d:0a:86:ce:50:a2:49:aa:eb:19:fb:32:be:2a:
         30:70:c9:a0:39:9e:f4:11:9a:6f:44:f2:5d:2d:6e:8b:89:1c:
         ba:27:f7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----