Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c11b1136-4faa-481f-9934-2f4f9853eb61.roa
File:                     c11b1136-4faa-481f-9934-2f4f9853eb61.roa (raw, json)
Hash identifier:          gIS8gItgYhaKoVD8NENVbtpQ/HHQDFquhTSrcWMA5b8=
Subject key identifier:   B4:54:D3:36:E2:A9:94:D3:B9:4A:54:14:77:BA:40:22:2C:17:27:7C
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       58E6C9A9540D634819041699965733320D3575FE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c11b1136-4faa-481f-9934-2f4f9853eb61.roa
Signing time:             Tue 18 Jun 2024 00:00:00 +0000
ROA not before:           Tue 18 Jun 2024 00:00:00 +0000
ROA not after:            Tue 23 Jul 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e6:c9:a9:54:0d:63:48:19:04:16:99:96:57:33:32:0d:35:75:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 18 00:00:00 2024 GMT
            Not After : Jul 23 23:59:59 2024 GMT
        Subject: serialNumber=89a5d2ab8a12404dcd231516aa53d2ddd32146eedae498ff8eaf56bc6d0f36a8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:7f:32:5a:3d:20:ee:48:42:2d:b1:33:45:
                    3e:36:3e:e8:f2:91:a1:4a:3f:d8:de:07:d4:35:80:
                    76:05:e0:37:be:96:95:34:30:a1:bb:09:66:4a:6b:
                    22:e1:1c:b7:5d:66:ae:1c:ed:66:28:28:79:ec:06:
                    61:8e:b9:da:52:0a:d6:31:54:db:36:9c:04:40:43:
                    f2:0c:05:9c:3a:47:0b:ed:30:51:8a:33:22:2c:50:
                    e1:c5:1a:e8:2f:5d:ae:e5:c4:11:f1:82:4f:ed:f6:
                    36:b9:17:6a:ee:01:b7:f8:4d:07:34:29:46:aa:5d:
                    46:be:51:94:08:c6:e7:e5:95:c7:84:82:7b:05:a8:
                    12:dc:ef:c4:0a:6b:93:e7:80:a8:b9:96:05:9d:b0:
                    ab:5e:fe:cb:ca:4c:df:60:c3:d0:c0:7f:cd:82:d6:
                    35:51:cd:eb:82:53:55:8c:93:b5:84:b5:79:a4:9b:
                    c7:f5:45:b4:a6:3a:5f:e2:ed:ed:62:27:f5:36:3b:
                    fd:d3:4b:7b:b7:4b:46:cc:09:b6:85:cf:f7:f3:74:
                    7f:45:7a:57:fa:e4:24:23:ba:bf:2f:0d:53:51:9a:
                    ef:c2:ff:ef:68:c6:12:f3:af:df:89:26:4c:59:47:
                    57:d3:f5:67:84:e6:41:bd:b4:fa:a6:12:20:5c:60:
                    01:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:54:D3:36:E2:A9:94:D3:B9:4A:54:14:77:BA:40:22:2C:17:27:7C
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c11b1136-4faa-481f-9934-2f4f9853eb61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:d2:6e:b3:3b:54:1c:94:06:dc:0b:1c:ff:61:66:bc:25:d0:
         f3:48:1c:fd:3c:d1:af:dc:2b:72:2b:84:ed:9b:01:26:96:af:
         20:db:85:0c:3b:d6:35:65:ad:92:82:81:2a:84:7a:d0:69:3a:
         ce:93:e9:3f:f4:c3:f7:52:e4:f9:1b:17:87:42:7a:5b:96:d3:
         92:4c:2d:49:e7:22:6d:10:11:b7:0b:b3:7c:c7:fa:f5:ce:e6:
         55:28:91:42:76:4b:cf:21:d0:7b:db:2e:33:a6:29:d7:1c:5a:
         66:78:39:6d:39:6f:14:13:f1:46:dd:e5:03:f9:48:5a:d8:95:
         7e:1d:2c:37:cc:48:fb:c8:8b:0c:e9:bb:a7:6d:cf:58:89:57:
         e3:59:cc:fa:d2:a7:fa:8d:7c:8d:3e:90:c2:41:d9:b5:2e:a4:
         85:67:82:36:0c:c9:54:b8:01:88:c6:f8:aa:cb:6b:9b:98:2b:
         98:8b:4e:43:52:f2:3f:84:0f:5a:41:ec:83:00:26:e6:6c:ee:
         15:9b:14:24:38:35:bb:03:47:dd:95:49:f7:d8:26:a4:97:a4:
         2b:1b:34:13:54:ac:cc:21:d1:14:c6:10:2b:ff:e5:b9:48:26:
         c9:35:d1:fb:9a:cf:d1:75:fe:20:82:ad:79:9e:5d:27:00:8a:
         0b:2b:46:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----