Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5349bc2-5216-4416-88b7-c0a72810ecfc.roa
File:                     b5349bc2-5216-4416-88b7-c0a72810ecfc.roa (raw, json)
Hash identifier:          33nsj7eC5400W76CZ5OTj2p7c9Y5/qw162W370nfMCA=
Subject key identifier:   BD:96:4A:0C:8B:88:E9:8C:35:E0:03:DE:38:A2:38:D6:24:5F:1A:60
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       06E97AAD5EFE770B83B56471CDA2B8987ADB04D5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5349bc2-5216-4416-88b7-c0a72810ecfc.roa
Signing time:             Thu 12 Sep 2024 00:00:00 +0000
ROA not before:           Thu 12 Sep 2024 00:00:00 +0000
ROA not after:            Thu 17 Oct 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e9:7a:ad:5e:fe:77:0b:83:b5:64:71:cd:a2:b8:98:7a:db:04:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 12 00:00:00 2024 GMT
            Not After : Oct 17 23:59:59 2024 GMT
        Subject: serialNumber=c474e77fe7f772aed9def9f132b9836285076f4bfa4281c3c9b99725c6a10f43, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ba:9f:c3:51:b3:4c:70:f0:46:24:04:ed:81:
                    ec:ac:69:ee:7b:9e:13:bd:67:0b:86:ca:a3:e6:99:
                    31:34:4f:12:00:e6:48:69:65:36:5d:4e:7f:a9:5c:
                    97:8e:17:e8:5d:c2:65:0f:84:c2:d2:09:c2:91:1d:
                    d5:ae:85:52:c2:c8:0d:8f:be:45:0c:23:15:2d:51:
                    f9:93:c9:44:92:0f:23:cb:6c:5d:a3:fd:ab:23:c7:
                    4d:78:86:04:44:e2:18:65:80:3a:23:6e:9e:b8:53:
                    24:ed:d9:6f:4e:28:ff:07:45:2a:36:be:9d:f4:18:
                    67:71:82:9f:82:62:fa:33:78:d4:1f:e0:df:55:0c:
                    72:fe:86:0d:c3:52:7b:9a:79:f3:28:7b:32:20:0e:
                    01:bf:2b:c6:b8:4d:5c:1f:3d:ab:74:80:cf:6c:fd:
                    d5:2e:7b:fe:c4:a0:f5:db:2d:90:6e:56:15:59:0a:
                    39:6e:c2:f7:3a:60:e9:7c:ce:d1:cd:d6:80:b0:a6:
                    60:2b:97:ec:fc:7e:6d:55:3a:69:bd:a5:47:8a:80:
                    7e:19:67:19:93:a7:9e:e8:9d:9b:56:37:59:c9:25:
                    ff:35:8c:e1:1a:05:aa:7f:58:56:7a:ce:9f:29:2c:
                    72:6d:57:b0:36:14:be:ae:c5:dd:d3:e5:86:82:bf:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:96:4A:0C:8B:88:E9:8C:35:E0:03:DE:38:A2:38:D6:24:5F:1A:60
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5349bc2-5216-4416-88b7-c0a72810ecfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:ab:94:0a:3d:db:0d:9e:8b:9b:fb:60:da:60:4e:80:f2:dd:
         db:e4:71:a0:37:d6:df:02:62:43:bf:e8:68:fb:26:70:02:01:
         df:42:eb:4d:98:e3:08:67:d1:2a:76:aa:48:c6:0c:1f:6f:83:
         a1:92:8b:fc:cb:f1:f8:36:9a:8b:8e:52:72:88:b3:28:59:df:
         d4:b6:c0:cb:54:43:db:ba:41:c5:35:19:3e:d5:15:d9:55:ab:
         73:31:9d:fb:b9:c4:a2:76:4a:2f:b5:ca:0f:23:01:44:33:9c:
         11:f8:c3:db:63:e9:df:6a:c3:72:cc:d0:7b:83:97:0e:53:da:
         d1:33:39:20:3e:25:11:e8:10:fe:09:68:fc:26:de:a2:de:35:
         76:e8:6a:14:d7:b0:62:03:65:2b:1a:21:5d:05:62:6b:de:0e:
         aa:c8:a3:79:63:4d:51:8f:39:ae:56:17:41:99:f8:69:5b:13:
         84:f7:5f:56:87:d4:ea:0e:9f:69:a1:34:89:dc:47:53:47:ba:
         7a:b6:27:fb:93:39:70:49:63:6c:11:9a:59:21:20:1f:03:a9:
         f6:b1:97:84:e8:02:ee:7e:9a:c8:ee:4f:1b:d4:0b:61:b9:fc:
         d3:1a:5b:b7:5e:17:ef:af:bf:ad:4d:0a:b4:87:0b:e2:c7:e5:
         24:8f:5a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----