Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/09dffde2-40d7-404f-8f86-d490d4e30971.roa
File:                     09dffde2-40d7-404f-8f86-d490d4e30971.roa (raw, json)
Hash identifier:          0rkGwxFgcEZI9p6WWUNtJRYTBo+e1mJcis0CfROJYzI=
Subject key identifier:   9A:EA:95:B4:CD:CF:7A:9D:A7:70:E6:EF:C0:C1:E0:23:16:3E:15:D3
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       04B13628136CB8E55C9C8183F342220C1F77FB5F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/09dffde2-40d7-404f-8f86-d490d4e30971.roa
Signing time:             Tue 11 Mar 2025 18:08:20 +0000
ROA not before:           Tue 11 Mar 2025 18:08:20 +0000
ROA not after:            Tue 15 Apr 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b1:36:28:13:6c:b8:e5:5c:9c:81:83:f3:42:22:0c:1f:77:fb:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 11 18:08:20 2025 GMT
            Not After : Apr 15 23:59:59 2025 GMT
        Subject: serialNumber=dfe3938c18b3cdc931227a7fe6e23f4821c6929a16b752bef2ed2fc507dfd6c3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:89:5d:3e:7b:2b:b2:63:af:30:e7:89:b5:
                    22:09:39:c0:e4:6c:20:d5:9b:e2:9d:67:b4:a0:c6:
                    03:77:52:e6:b1:d8:11:26:66:b4:ad:a4:4a:94:43:
                    7f:16:77:97:dc:6f:91:c3:98:ac:8d:7b:5e:fa:e5:
                    d9:d3:76:d1:79:f4:9e:75:25:ef:b7:07:d5:8a:19:
                    fd:e3:d3:9f:1f:05:10:c8:7e:21:30:d4:3b:98:f9:
                    93:ff:f0:39:f1:07:35:4a:81:13:5f:43:1b:4b:9d:
                    89:b6:19:3f:8e:05:b1:44:62:94:da:39:26:7d:7f:
                    77:c9:4a:ff:2f:ff:1c:c5:81:13:3a:7b:83:ac:19:
                    bd:5b:05:52:44:6c:32:2d:73:b2:71:44:54:c1:ae:
                    33:56:91:ef:94:cd:fd:aa:ac:43:5d:5e:9d:c0:3c:
                    8b:60:54:40:6b:c3:44:6e:ef:a0:30:ed:85:6a:c6:
                    81:0f:07:03:37:20:6b:e1:83:85:6d:e3:bc:c8:53:
                    0f:6e:08:e1:07:38:c2:54:ba:67:2f:f7:cd:69:20:
                    7a:e0:ac:78:ab:9f:ac:60:36:63:81:e4:7c:79:5c:
                    1b:85:17:a0:16:32:71:3f:44:d2:93:d6:dc:e9:2a:
                    da:50:33:af:72:4d:ba:4f:72:f2:c6:87:68:cf:88:
                    d0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EA:95:B4:CD:CF:7A:9D:A7:70:E6:EF:C0:C1:E0:23:16:3E:15:D3
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/09dffde2-40d7-404f-8f86-d490d4e30971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:cd:93:27:91:36:1d:99:81:dc:5a:30:a8:2e:12:3a:e1:35:
         36:3d:65:d9:fa:63:5b:8c:28:b6:87:e4:bd:19:33:e8:de:9c:
         47:2e:8a:1a:fc:be:96:fa:69:29:f4:12:0e:5c:d0:eb:88:d9:
         18:6e:88:ad:58:a5:f5:02:11:eb:99:25:06:76:53:fe:70:3a:
         ed:f3:40:14:e2:e8:c9:f9:30:ce:d3:72:b1:62:69:ea:32:d8:
         aa:a1:47:38:3d:22:60:a5:0b:0d:5f:1f:ef:8c:f4:22:ad:3a:
         64:cf:58:aa:cd:da:c5:1f:b5:0a:07:89:36:e6:a1:8d:83:aa:
         31:b9:51:3c:a7:1c:9b:6a:47:c2:ef:f3:c7:a6:35:e4:d0:29:
         5d:69:22:d8:e9:b4:7a:66:d0:9d:c7:d9:0e:67:9c:38:cf:60:
         49:36:18:9f:b6:16:63:57:f1:c9:b8:a4:5f:63:26:25:35:60:
         aa:56:f1:74:b2:a3:d9:44:56:27:72:12:cc:1b:49:c3:50:b6:
         04:93:79:ea:95:cc:f4:08:92:ae:5b:97:6a:17:e6:5c:b6:45:
         4f:bc:cb:58:d2:01:df:2c:81:60:25:87:93:2c:e7:f0:bc:d3:
         68:e9:02:b2:85:60:6a:7a:30:ef:d5:65:85:d8:15:7c:45:e8:
         f2:11:31:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----