Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/876daaf0-c851-4c81-84bd-79039b55ec96.roa
File:                     876daaf0-c851-4c81-84bd-79039b55ec96.roa (raw, json)
Hash identifier:          2U75kSsiLiNkR+XjLHahEiNjcWYezY5C+w170+O0Vb4=
Subject key identifier:   34:2A:95:9E:40:C9:AB:EC:DD:C4:E4:0E:71:85:D5:DD:CC:0A:1A:A1
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       55634CED61B433F4DECF1D2FFB3B3C71D53DFCBD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/876daaf0-c851-4c81-84bd-79039b55ec96.roa
Signing time:             Fri 24 May 2024 00:00:00 +0000
ROA not before:           Fri 24 May 2024 00:00:00 +0000
ROA not after:            Fri 28 Jun 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:63:4c:ed:61:b4:33:f4:de:cf:1d:2f:fb:3b:3c:71:d5:3d:fc:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May 24 00:00:00 2024 GMT
            Not After : Jun 28 23:59:59 2024 GMT
        Subject: serialNumber=934560dbd10648bffb292622b8d8c829cb17ae437c330f268ac6921b4705e831, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:ef:2b:ae:d9:47:4e:e0:8a:77:ca:8f:47:
                    bd:d7:3f:4f:e1:c6:c3:75:37:2b:1c:a3:89:42:6f:
                    45:4f:6d:27:c7:cc:9f:45:6f:b9:5b:96:22:8b:59:
                    c9:c7:3f:44:f0:78:4c:c6:e1:ac:54:1b:c9:a0:54:
                    f4:59:29:da:c3:04:16:47:1f:f5:1c:09:96:3a:e6:
                    49:eb:10:70:09:77:a2:13:dc:a8:bc:06:95:2c:a6:
                    2a:a3:ed:48:5c:13:05:22:62:75:25:c1:86:db:8f:
                    3f:da:e4:08:f6:ff:0d:a4:3b:c6:a5:b3:d9:3c:fc:
                    b1:13:c4:1b:6f:49:a8:9b:81:57:fc:9e:25:14:a0:
                    85:22:ce:42:3c:fe:33:49:79:f5:9d:97:3e:65:af:
                    20:b7:ec:5e:21:78:13:3e:28:c2:d4:90:8d:75:35:
                    ac:ea:85:9a:96:77:39:a9:33:a3:6a:04:84:da:0c:
                    5f:5d:eb:0a:72:8c:1f:17:11:8e:5d:cb:57:28:16:
                    e3:09:eb:43:04:6f:25:12:f8:64:2a:82:ff:74:f2:
                    ce:fb:13:72:2b:8a:3b:28:ee:19:12:98:f0:35:aa:
                    85:92:d5:2c:fb:ff:41:02:29:28:cc:96:91:db:e5:
                    1c:e0:86:74:49:60:c5:8b:13:e8:47:66:a3:19:74:
                    b2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2A:95:9E:40:C9:AB:EC:DD:C4:E4:0E:71:85:D5:DD:CC:0A:1A:A1
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/876daaf0-c851-4c81-84bd-79039b55ec96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:92:27:63:2c:e3:20:1d:7f:5c:b8:50:d7:84:38:5b:dd:bc:
         bf:03:4c:23:fa:27:b6:e6:bd:cc:87:51:9a:56:13:46:3f:5d:
         f4:10:d8:8d:5c:92:45:bf:d3:f8:c4:20:df:e8:03:6e:5b:e7:
         75:8f:7e:4b:2e:00:a0:e4:50:55:a9:3a:64:2a:ca:0d:94:5e:
         53:26:ee:f7:92:19:92:7c:07:9c:56:9f:b5:29:45:58:bd:6c:
         fa:a2:06:b9:35:e6:11:ee:51:92:9b:0e:2f:a7:55:49:03:5f:
         83:fa:be:ec:a3:23:cd:83:fb:df:90:b1:44:7c:41:67:39:a3:
         8c:4e:11:da:76:8c:fe:4d:d4:5d:bc:30:f1:54:ac:89:2b:3f:
         77:4b:33:de:61:19:2c:2e:60:63:32:d2:f6:32:40:0a:8a:67:
         14:dd:3c:d8:38:57:e5:88:6a:34:61:50:df:47:de:f1:28:8d:
         37:12:66:9e:b2:a8:9d:81:f9:36:3a:a1:13:3d:51:f4:93:3b:
         f2:ca:5a:c3:39:65:1a:39:79:71:35:5d:d1:28:36:7f:13:4c:
         89:97:e6:0a:ae:48:ba:6c:4a:af:26:9b:a0:92:e1:39:34:e8:
         63:af:16:f6:07:c0:f6:70:52:cc:e5:33:24:e3:c3:e0:95:a8:
         92:c6:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----