Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d058b756-babb-483f-8fd4-d3422dd8df98.roa
File:                     d058b756-babb-483f-8fd4-d3422dd8df98.roa (raw, json)
Hash identifier:          DQxapQefPfRSPEUxhf1i99JeRjiY0ZdpMguoy5U4s8c=
Subject key identifier:   01:9A:42:D5:A3:97:3C:16:87:40:69:5B:3E:93:AE:C4:B9:F5:6D:C6
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       530963C34F3F7B1DF3793CCDB3F1594EFDBA82E0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d058b756-babb-483f-8fd4-d3422dd8df98.roa
Signing time:             Mon 07 Apr 2025 02:03:18 +0000
ROA not before:           Mon 07 Apr 2025 02:03:18 +0000
ROA not after:            Mon 12 May 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:09:63:c3:4f:3f:7b:1d:f3:79:3c:cd:b3:f1:59:4e:fd:ba:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr  7 02:03:18 2025 GMT
            Not After : May 12 23:59:59 2025 GMT
        Subject: serialNumber=9aedd7fd1b48822b57656dbb25446404379cf4bb463e5e91f086b73ee82b5319, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4f:3e:5b:55:ba:23:f5:46:53:e5:74:89:6f:
                    de:b9:a1:b0:5c:17:d1:ac:08:3e:a8:b5:92:56:8c:
                    97:47:2e:3f:3e:cc:ae:8a:59:7b:ab:4f:0a:1e:b4:
                    a9:0c:0b:30:8f:c7:b4:3b:f4:5c:97:b1:e0:90:f2:
                    b7:e5:82:c0:18:e6:2a:1e:7d:1d:76:46:11:ca:da:
                    bb:6b:be:b0:e7:5e:a4:68:e8:02:ac:8d:28:ed:aa:
                    af:a1:e4:ad:5b:ec:6d:6f:50:7c:e5:5b:65:16:16:
                    95:f4:5b:4a:9c:a6:c0:27:95:81:c1:fa:09:17:45:
                    53:51:a2:e6:c6:8b:76:dd:ff:b3:15:8d:b4:6e:6e:
                    a3:be:2f:c3:76:49:c9:81:1c:90:6a:f3:22:a5:d4:
                    f5:3f:14:9c:dc:3e:92:54:6e:2d:c6:54:72:cc:ca:
                    fd:d8:c8:ab:fe:21:c8:58:05:34:08:4b:64:5c:54:
                    b5:c1:f3:e8:19:20:a6:5d:be:e1:76:0d:d1:3c:96:
                    bf:16:09:f0:0e:4f:f1:a2:ce:87:1b:ec:bc:9b:10:
                    84:1e:31:5b:5b:0c:2e:57:70:6b:81:cd:a1:c1:34:
                    84:1f:5d:f8:0c:ae:52:c0:45:ed:43:52:e2:ea:8a:
                    46:f6:b8:f3:77:06:ac:ed:57:1c:3e:42:33:e3:66:
                    2e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9A:42:D5:A3:97:3C:16:87:40:69:5B:3E:93:AE:C4:B9:F5:6D:C6
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d058b756-babb-483f-8fd4-d3422dd8df98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:1e:51:ff:44:f7:b3:60:be:c1:3c:85:27:db:dd:94:2d:ad:
         0c:34:3c:20:97:5b:1b:b3:5b:6f:52:8d:e0:e7:bf:b3:ff:68:
         ef:35:48:27:fd:bf:ed:1b:3e:48:0e:ec:b7:92:40:45:8f:a1:
         92:0b:2d:0f:1c:0f:f3:a9:c5:5e:58:4f:78:1a:12:f7:60:3a:
         67:a7:56:68:5a:f4:55:bf:33:90:31:21:f5:e7:77:ca:fc:c7:
         81:a0:3c:50:48:c8:92:51:2f:67:62:8e:29:57:57:2c:6e:d5:
         0b:fb:7b:ae:0a:f2:e0:3e:70:c3:10:11:e8:de:9f:50:1d:1e:
         73:f5:07:0d:fd:5d:8c:22:06:85:c3:bc:7b:31:d4:7e:3f:2c:
         2a:7a:b0:17:55:1a:eb:09:4f:f5:f5:5f:43:9f:d8:22:e6:08:
         a0:6b:a5:1f:2f:e9:01:7e:27:21:fc:d5:d9:ba:87:df:a8:31:
         3d:0f:b1:43:76:44:7a:6c:cd:42:aa:0e:6d:f3:2a:9b:85:fc:
         1a:09:25:b8:f7:e8:0c:4b:19:4c:0d:3a:47:42:77:b9:a6:77:
         75:74:6f:31:9b:21:19:ca:dc:6f:0a:d6:5e:be:b6:75:4e:9b:
         6f:34:49:a9:76:4a:0f:dc:39:4b:54:b5:e9:87:26:4c:b2:f5:
         46:00:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----