Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ac80f31c-345f-4c3e-bfbe-6ccc99c7940c.roa
File:                     ac80f31c-345f-4c3e-bfbe-6ccc99c7940c.roa (raw, json)
Hash identifier:          2+vAWCfTOBw0rMbCY/x0166gx3jiadBREUpFaosx2Lk=
Subject key identifier:   FF:96:2F:D4:BF:D9:CD:60:AA:32:09:39:CE:4E:9B:5E:CE:E2:85:AF
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       45F76059553392A9ED90E13C2B16AE79404D7152
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ac80f31c-345f-4c3e-bfbe-6ccc99c7940c.roa
Signing time:             Sun 14 Jul 2024 00:00:00 +0000
ROA not before:           Sun 14 Jul 2024 00:00:00 +0000
ROA not after:            Sun 18 Aug 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f7:60:59:55:33:92:a9:ed:90:e1:3c:2b:16:ae:79:40:4d:71:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 14 00:00:00 2024 GMT
            Not After : Aug 18 23:59:59 2024 GMT
        Subject: serialNumber=94c09e7ec6e84cce8babbf7230ba7fa4ee0c892b06b149fb892a8f2332f7868c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ec:ca:3c:a8:25:2b:37:e4:43:9c:f7:77:84:
                    80:ff:d2:21:b0:8d:49:58:18:88:52:9e:e8:c0:81:
                    54:34:15:d5:4b:ca:9e:90:7f:8f:40:50:19:d4:a6:
                    9e:11:42:7b:7a:e3:87:92:44:43:d5:ab:5f:4b:3c:
                    60:f8:38:da:a3:f3:fa:55:d1:24:28:ee:1f:4c:9e:
                    c7:4b:71:59:88:70:f9:d6:87:70:5e:00:45:64:60:
                    a9:5e:c7:bc:a4:e5:ea:6d:9e:91:c2:54:12:36:d7:
                    4f:22:6d:51:57:91:62:de:d8:12:67:de:cd:d4:43:
                    bb:08:2c:35:06:48:e1:2b:fb:9c:7e:4a:54:4d:14:
                    e0:ba:18:e1:ae:c4:65:78:46:19:35:d6:26:ae:c0:
                    b1:30:53:aa:8e:22:df:bd:4c:a0:c9:23:4c:77:b0:
                    91:53:77:b6:85:19:cf:81:5f:c1:e8:94:00:5f:16:
                    bb:5c:ef:f3:00:d3:85:ef:e2:57:15:cc:66:2f:e5:
                    e0:1d:82:04:b1:26:97:e3:30:ee:67:1b:4c:26:3f:
                    d0:4f:d9:23:17:14:4c:3e:b7:2e:d5:37:80:32:5f:
                    2f:9c:3a:a8:c7:c6:88:c4:9e:0a:8f:54:27:a6:d6:
                    1c:87:ff:d5:d8:b8:1b:cb:fa:c2:80:b7:29:c2:70:
                    4b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:96:2F:D4:BF:D9:CD:60:AA:32:09:39:CE:4E:9B:5E:CE:E2:85:AF
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ac80f31c-345f-4c3e-bfbe-6ccc99c7940c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:84:76:c3:c0:dc:3e:60:49:8b:f8:8f:72:eb:fb:b9:75:f1:
         33:a8:04:bf:43:cf:3e:a2:6d:94:d7:f8:35:13:ae:e5:e1:07:
         e1:67:aa:3d:cc:16:6a:4a:97:b9:5e:84:26:a8:10:7d:73:ae:
         95:fb:be:a1:7a:d4:c1:62:b2:ec:6b:20:5c:48:53:e6:75:84:
         70:6f:e3:d6:43:61:4f:c3:71:05:48:64:1e:8a:33:30:75:ea:
         0a:6d:af:19:cb:e6:d0:fa:53:76:74:53:54:ed:66:a7:68:5a:
         d7:f4:cf:3b:14:c2:05:36:c8:fc:d8:04:db:27:84:df:0b:1d:
         ce:83:bf:1c:e5:15:a0:ff:6c:77:41:ff:e6:48:7b:75:06:d2:
         17:d9:fc:ce:98:7a:c8:13:e0:53:d1:55:92:d4:ee:be:06:8c:
         19:9b:2e:55:2c:2a:9b:05:62:c7:da:89:41:76:c3:bf:a9:46:
         44:75:88:81:2a:e3:26:ab:36:30:bd:ee:6e:53:67:42:e8:e1:
         d5:96:96:85:66:f2:f2:9a:5f:22:ad:ab:f8:ff:c6:19:a4:d1:
         76:5b:0f:d5:05:d7:43:48:02:99:71:ef:58:81:d3:18:bd:6a:
         ee:56:e1:96:ab:6b:5c:cd:7b:f7:6a:ee:79:eb:ac:a8:e6:ca:
         42:d1:0b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----