Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fb9427e5-7e83-41b9-840d-9af4a79ac35b.roa
File:                     fb9427e5-7e83-41b9-840d-9af4a79ac35b.roa (raw, json)
Hash identifier:          gK3xa+GLruF2GTAp76ERr81pq5/x3c257opDua4VY2o=
Subject key identifier:   A8:3E:03:95:07:91:66:F2:A8:24:B3:F0:4B:2B:9A:15:84:97:BD:EB
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6D417CC744535F522C5D6FC429EAF53EFF493543
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fb9427e5-7e83-41b9-840d-9af4a79ac35b.roa
Signing time:             Sat 21 Dec 2024 00:00:00 +0000
ROA not before:           Sat 21 Dec 2024 00:00:00 +0000
ROA not after:            Sat 25 Jan 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:41:7c:c7:44:53:5f:52:2c:5d:6f:c4:29:ea:f5:3e:ff:49:35:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 21 00:00:00 2024 GMT
            Not After : Jan 25 23:59:59 2025 GMT
        Subject: serialNumber=fa9f78b2c17a1f628e97237c9695061dfe9af832a8e4f900127d204a682e7156, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:af:85:d2:e8:0d:27:0c:2c:cf:7d:19:62:76:
                    99:50:32:77:ee:12:d1:a1:51:dd:da:fe:46:9d:5d:
                    ac:ca:4d:a7:9c:4c:18:e0:aa:fb:11:82:38:5b:3c:
                    55:c8:80:10:2c:06:9b:d6:c1:01:d7:07:0d:db:21:
                    0b:1e:82:da:8f:3f:7d:f8:56:3c:d0:cd:c9:eb:81:
                    f5:ed:f6:5e:c7:d0:34:72:dc:d6:7d:0e:63:b6:17:
                    c6:84:05:35:f8:1f:fc:79:f9:5b:f6:4c:dc:32:e2:
                    9f:dc:59:e5:e9:9f:ec:df:cf:7d:1b:f0:ee:6a:34:
                    df:5f:26:39:9d:5f:3a:f1:31:a2:1a:e4:a5:31:ea:
                    5d:4b:b6:c4:53:eb:f6:ef:01:f8:c4:3a:2a:36:2b:
                    93:13:b2:4b:fd:77:38:42:ea:89:e1:0d:b0:cc:73:
                    ea:eb:1d:c1:40:10:19:88:94:da:6e:cc:35:dc:43:
                    90:3d:fe:b4:71:a7:46:08:83:6f:01:a7:fa:21:85:
                    c4:77:1a:e3:22:1d:13:7c:81:6b:96:44:72:97:ef:
                    ee:9e:18:75:b6:1b:04:a9:0c:7f:e8:14:1a:a7:29:
                    f9:6f:60:5f:37:65:8d:18:1a:5e:19:62:6b:fe:cd:
                    28:8d:40:07:49:51:b1:e2:01:78:8e:67:1b:e1:8f:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3E:03:95:07:91:66:F2:A8:24:B3:F0:4B:2B:9A:15:84:97:BD:EB
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fb9427e5-7e83-41b9-840d-9af4a79ac35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:96:e6:20:d3:60:39:a3:9a:c2:90:77:3c:a4:86:a7:23:4d:
         f0:70:b7:52:cb:e3:5c:50:27:9f:89:47:f6:63:b3:4f:32:94:
         9f:ef:65:50:bc:76:19:4d:d7:de:39:b1:42:63:86:25:c1:c8:
         54:ce:9e:c8:08:ad:14:d1:3f:0b:31:bb:b1:9f:f9:7d:2f:b2:
         c0:f7:ad:bb:62:e7:ce:d1:6d:f3:de:4a:cb:d7:fd:38:dc:61:
         7a:89:cf:8e:53:ff:a3:4c:e2:4f:ee:cf:7f:f2:08:e5:b2:ed:
         e2:7d:b5:3f:19:88:e0:91:ff:24:5f:fe:b6:fa:38:34:db:13:
         d6:d4:86:7d:6e:ce:91:dc:63:10:8d:f4:94:bc:79:51:f7:c4:
         21:3f:71:03:5f:88:3a:32:7c:84:63:a4:f9:99:3d:d5:d9:97:
         4e:4b:19:66:83:92:80:9a:ea:a3:11:1b:41:d8:3e:5d:c0:8a:
         5d:d1:75:42:f6:82:7a:2b:a6:a1:29:9c:68:96:50:9f:d8:14:
         a3:1d:b1:e2:68:2b:87:1b:67:1f:61:2b:9f:5b:2a:95:80:98:
         e4:85:c7:a1:3e:c1:47:a9:2d:8b:5e:7f:2e:d1:34:2a:3e:c0:
         05:57:af:cb:3b:44:86:b5:aa:19:eb:8d:b3:15:40:ba:41:73:
         db:d3:0c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----