Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aa674717-e0c0-432a-b823-b0b17a931e6a.roa
File:                     aa674717-e0c0-432a-b823-b0b17a931e6a.roa (raw, json)
Hash identifier:          i/gSzj7yr/Hb+9Pza97jEGMxIVNyvvp3EGnrX2Ih+s0=
Subject key identifier:   FB:13:91:36:A2:F7:C7:39:97:1B:AD:6F:F4:1E:7F:0B:C5:1C:C4:83
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       626D4C747EF1048218B4BD73C092C1544C9215E3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aa674717-e0c0-432a-b823-b0b17a931e6a.roa
Signing time:             Fri 24 Jan 2025 00:00:00 +0000
ROA not before:           Fri 24 Jan 2025 00:00:00 +0000
ROA not after:            Fri 28 Feb 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6d:4c:74:7e:f1:04:82:18:b4:bd:73:c0:92:c1:54:4c:92:15:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan 24 00:00:00 2025 GMT
            Not After : Feb 28 23:59:59 2025 GMT
        Subject: serialNumber=96ba9b831aa3a30de180c8127c1f53813bc68ac229529af2ddacc7fbad20ed86, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:50:8c:c5:14:ef:29:28:61:00:d0:ba:1c:
                    cc:09:31:62:23:39:1c:4c:90:93:09:f3:26:a1:43:
                    53:bb:d6:95:24:2a:db:aa:1d:c9:b5:f0:9a:70:ea:
                    25:1f:5a:74:e5:2f:90:66:8f:83:d5:26:de:82:77:
                    a6:d4:79:9a:d1:d5:09:fe:25:1a:62:f1:59:cf:bb:
                    85:91:5c:68:f8:5f:7e:51:90:f2:e4:64:4f:23:ab:
                    aa:38:76:5f:30:d1:3d:d9:c4:cd:b8:f7:76:c0:b7:
                    b9:df:62:a3:78:51:34:c1:e0:e6:68:02:91:b4:89:
                    b0:42:e7:0f:af:0d:f8:ca:bd:a1:32:3e:0d:c8:7f:
                    1e:63:d4:bb:60:ea:93:f6:3c:e4:2f:0a:a3:15:39:
                    d4:75:70:4b:d2:eb:92:02:01:a9:d0:4d:c0:a5:30:
                    61:50:05:fa:2c:a4:80:1a:5d:b9:1e:4b:92:79:80:
                    d3:e6:34:d3:05:e1:f9:e6:63:e4:c5:80:9c:ed:1c:
                    29:73:92:6b:ed:8f:d4:5a:91:56:4f:7f:82:0c:19:
                    78:9b:99:1d:e8:62:8d:d4:4b:d9:6b:e7:f7:e6:c1:
                    ab:d1:db:9e:22:11:b5:95:49:ed:28:e1:16:c7:84:
                    a1:82:e1:7a:7e:ce:13:64:01:3a:ec:6c:94:96:8e:
                    26:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:13:91:36:A2:F7:C7:39:97:1B:AD:6F:F4:1E:7F:0B:C5:1C:C4:83
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aa674717-e0c0-432a-b823-b0b17a931e6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:d0:3a:26:98:d4:7a:ee:d3:8d:64:b4:ec:63:5a:2d:49:55:
         d2:c1:9e:3c:3f:fb:13:fa:96:7d:ea:47:e7:0c:31:3e:59:ad:
         47:11:38:d0:8b:5b:40:e9:93:51:90:82:54:9d:a4:a5:37:7f:
         3a:1b:95:ef:3b:5a:3e:a1:44:78:07:44:b3:65:92:19:b0:af:
         34:8d:c1:fe:b1:a9:cf:3b:2e:a4:cf:ed:9a:ba:ff:f6:68:d3:
         fd:fc:2d:93:f7:68:67:15:dd:dc:d7:05:9a:ef:55:08:e2:2c:
         18:1e:d9:63:63:22:79:9a:5b:fd:25:85:6b:94:ad:93:f5:35:
         ec:1a:e9:ed:1e:d2:e1:99:23:2c:33:00:56:b4:0e:4a:ac:9f:
         30:03:1b:b8:43:7d:0d:01:a0:ce:13:f6:e4:98:7c:5b:c6:03:
         a9:98:16:13:e4:ba:0b:c7:50:74:53:33:19:f3:e5:70:a3:41:
         57:db:c5:cb:a3:cb:e4:3f:35:83:c1:34:0c:8e:59:20:48:24:
         02:a1:1f:d8:f0:96:87:59:3c:44:13:88:a8:d8:07:c2:9d:43:
         82:a4:db:de:e9:22:de:0f:12:1d:22:e3:21:2d:d1:e9:c7:4d:
         49:69:72:68:23:04:0e:76:e5:32:74:ea:b5:b3:d5:26:0c:d9:
         d3:4c:ae:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----