Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a8cfd72b-d8c9-43c3-9659-90925f09f90e.roa
File:                     a8cfd72b-d8c9-43c3-9659-90925f09f90e.roa (raw, json)
Hash identifier:          FSK6wTPKrzvVkgkrZRrNLG5sV5opdm26U6VXXDsLwtw=
Subject key identifier:   E8:73:49:2F:14:06:CC:0E:E1:5B:90:02:66:91:EE:9C:DC:AE:13:3F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       555A29EEF5983C499B0729C80913F0310E1B5FAF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a8cfd72b-d8c9-43c3-9659-90925f09f90e.roa
Signing time:             Sun 20 Oct 2024 00:00:00 +0000
ROA not before:           Sun 20 Oct 2024 00:00:00 +0000
ROA not after:            Sun 24 Nov 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5a:29:ee:f5:98:3c:49:9b:07:29:c8:09:13:f0:31:0e:1b:5f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 20 00:00:00 2024 GMT
            Not After : Nov 24 23:59:59 2024 GMT
        Subject: serialNumber=aba1159cc71b7edc3679c646d6c34c32117a210a8c82621754b28242c41e7b19, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:eb:c3:7d:cb:02:20:2f:f1:81:94:d1:70:
                    2c:50:c0:86:4e:42:67:35:e1:51:7c:9f:cf:ef:32:
                    b8:f1:df:96:61:5b:3c:cd:f7:00:13:77:d7:30:a2:
                    35:8f:d9:82:2f:3e:33:2e:7e:c8:cf:b4:f8:9e:ba:
                    c2:f6:77:bc:7b:83:63:82:98:46:8c:49:22:6e:aa:
                    d5:bf:e8:14:a5:16:20:65:df:3c:6d:5a:09:59:26:
                    4c:a4:1f:5e:6a:d1:74:35:8d:dc:34:90:e1:a9:ee:
                    9b:35:46:d1:3a:5a:5c:4e:82:58:81:49:e1:e6:c9:
                    48:6e:14:a4:6e:7d:42:53:4d:4b:85:2e:c8:f6:7e:
                    f1:c7:0e:a9:e0:f2:82:e8:67:96:35:53:2a:01:0c:
                    49:35:c8:7c:09:32:e7:59:a1:13:25:60:a0:81:54:
                    96:93:59:5e:30:b6:ea:59:fc:2d:06:4b:b8:9b:5d:
                    52:bf:c6:b6:94:94:5d:69:65:87:66:6c:98:27:c5:
                    16:9c:87:18:bd:a2:43:af:7b:ef:6a:63:c5:02:9f:
                    fc:89:b1:74:82:56:14:8f:74:f3:69:2c:93:f8:5e:
                    f6:85:c2:5f:9a:e2:aa:85:09:8b:38:84:16:a3:4a:
                    3f:5e:45:ea:e4:d2:71:29:dc:19:ae:b3:d2:b9:ab:
                    69:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:73:49:2F:14:06:CC:0E:E1:5B:90:02:66:91:EE:9C:DC:AE:13:3F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a8cfd72b-d8c9-43c3-9659-90925f09f90e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:c3:27:bb:35:b8:a7:af:7a:cf:69:6f:97:48:59:0a:c8:57:
         22:06:63:bb:bf:b0:31:69:30:c0:5b:fd:95:e7:4d:d5:14:fe:
         9a:09:00:66:32:1d:0b:59:9f:5a:bd:11:7e:2d:22:37:63:ba:
         ff:60:7f:a4:9c:3a:5f:68:ff:fc:ae:1e:80:62:bc:13:eb:1c:
         0d:dc:10:39:32:94:0b:60:1e:a1:52:20:3e:e8:96:cf:d9:a0:
         a6:bc:94:5d:52:59:59:bd:80:98:98:ce:6b:fe:93:0a:91:b5:
         0d:36:65:d4:5b:b0:ab:57:e1:c0:aa:38:1a:5d:5a:dc:ce:f9:
         e0:3d:83:ca:e0:cf:de:3f:e5:a1:fe:00:1c:e4:82:d1:3b:f2:
         69:80:d8:aa:28:fc:25:10:73:fe:34:e7:a5:60:80:85:29:bd:
         6b:bd:88:8b:3f:1b:10:70:98:96:e9:ed:f3:01:30:93:90:a2:
         53:8c:41:ce:a3:1d:3c:af:65:63:2c:19:49:d8:ef:fe:7d:6b:
         46:2e:6f:64:ef:39:0a:08:60:12:90:d1:69:59:3d:0c:ee:a1:
         26:03:fa:1f:2f:24:79:7b:85:c7:89:4c:ef:ab:30:93:85:6e:
         1b:ae:f8:5e:c7:4f:2d:ab:e0:2a:89:a8:98:70:bb:0d:e2:e0:
         42:94:37:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----