Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/190524c0-35de-428f-9973-1b456357b8af.roa
File:                     190524c0-35de-428f-9973-1b456357b8af.roa (raw, json)
Hash identifier:          YEuDRUPDOS42ehwqr31FbMaom8DPpr/nOFYkZqDgHpg=
Subject key identifier:   D7:6E:D9:9E:84:64:A6:55:1F:D0:4C:6A:24:F8:5F:4F:9E:D9:0F:90
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6D1FB63BAA1E43FD66ED7CFFD5A1D78F8C6DA08E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/190524c0-35de-428f-9973-1b456357b8af.roa
Signing time:             Thu 23 Jan 2025 00:00:00 +0000
ROA not before:           Thu 23 Jan 2025 00:00:00 +0000
ROA not after:            Thu 27 Feb 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1f:b6:3b:aa:1e:43:fd:66:ed:7c:ff:d5:a1:d7:8f:8c:6d:a0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan 23 00:00:00 2025 GMT
            Not After : Feb 27 23:59:59 2025 GMT
        Subject: serialNumber=29200605bfbbd37dd40ec6531f3a5a749330530fd4a194dfd43f160bfe8e21c4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:26:f3:5f:37:07:84:51:14:fa:90:ee:81:7f:
                    93:04:00:b3:8e:e7:fe:ba:33:bc:19:97:9a:ed:ca:
                    19:02:4f:13:26:bf:42:aa:a7:ba:89:98:3a:ad:e9:
                    1a:8c:da:7a:08:16:ff:f2:f4:17:a3:40:9f:14:bf:
                    3b:54:cd:90:b5:6b:20:50:8a:3d:b8:ef:f2:6e:93:
                    64:9b:2f:e0:53:5f:46:ed:97:cf:a8:34:93:c9:ad:
                    f7:15:1b:94:35:7b:4b:05:ac:71:ef:b7:8c:f3:28:
                    ea:d3:1f:7c:d8:16:26:92:a5:d4:0f:e6:bf:a9:dd:
                    56:27:7e:5e:cc:7a:c0:07:9c:d3:3d:b6:0e:03:96:
                    74:92:1c:29:72:7a:21:47:ae:a1:ed:33:2c:ad:5e:
                    2a:bc:31:1a:01:fb:b0:bc:65:77:bf:37:da:43:75:
                    ce:bd:11:81:f1:e8:c2:a8:c4:81:6b:39:d0:81:65:
                    09:a5:99:7f:c9:e0:6c:01:4b:4b:25:e8:bc:d5:07:
                    b1:a0:f8:db:de:14:4e:dc:3e:58:c9:db:10:99:94:
                    fe:df:df:0f:3a:ed:ff:f9:dd:81:33:fb:d1:14:32:
                    c3:a0:9b:11:83:ca:4a:dd:08:98:d7:7e:5c:a8:f5:
                    44:a1:5e:ec:a0:2b:2e:ef:67:fa:f7:c5:0d:66:e2:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6E:D9:9E:84:64:A6:55:1F:D0:4C:6A:24:F8:5F:4F:9E:D9:0F:90
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/190524c0-35de-428f-9973-1b456357b8af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:bf:bf:a8:f2:06:09:fb:38:14:d5:b5:ae:70:44:00:9b:bb:
         60:8d:65:4c:d0:a8:41:8f:49:f2:72:24:3e:ac:4a:c3:28:7b:
         a3:ac:d0:b2:ff:b9:f4:61:c2:4e:b2:98:9e:1c:ef:95:1b:85:
         d4:9a:cf:16:86:df:c3:af:b1:2e:0d:4d:96:f8:d7:c5:08:1b:
         0d:d1:23:42:76:dd:83:18:92:7f:8d:87:1d:9f:7f:f8:d0:4f:
         c6:ce:38:d5:15:44:3d:3a:5a:91:22:d5:94:b0:5f:fd:95:ea:
         50:3a:ab:05:60:89:5c:62:fa:4b:92:dd:4f:24:0c:67:98:78:
         b5:89:39:a1:c6:c4:00:4d:af:d9:ad:18:6a:ac:67:fa:8c:a2:
         b9:b9:0e:0d:d6:90:c5:2b:e9:3f:09:34:ea:59:1e:c5:57:c3:
         30:be:e8:e3:c9:76:02:17:fa:16:f7:15:05:b7:e9:30:ae:b7:
         5a:25:0a:1f:7f:63:0a:a7:71:34:ad:e7:12:e9:e7:f7:50:33:
         8c:91:a4:67:a1:ba:4b:0b:d0:89:43:a2:3b:d2:2a:44:66:73:
         ac:d8:2c:0f:da:72:bc:9e:69:92:ae:d7:55:58:67:af:8f:b5:
         6f:15:b8:f0:eb:3b:16:67:5e:68:ea:df:b5:91:94:a6:27:26:
         d8:4b:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----