Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/196ab39a-f8af-41eb-9561-6f91630bdc45.roa
File:                     196ab39a-f8af-41eb-9561-6f91630bdc45.roa (raw, json)
Hash identifier:          tUTCuuEmzWFYOhaNUESDPXRa30tOTf50OQAV7uKguFE=
Subject key identifier:   BC:CC:3F:62:FC:9D:1E:F6:12:04:9E:F7:D5:33:B0:9B:93:12:E4:B3
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7D015A748A4388A4F2A142DA2C2DE224C0B82B80
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/196ab39a-f8af-41eb-9561-6f91630bdc45.roa
Signing time:             Thu 05 Sep 2024 00:00:00 +0000
ROA not before:           Thu 05 Sep 2024 00:00:00 +0000
ROA not after:            Thu 10 Oct 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:01:5a:74:8a:43:88:a4:f2:a1:42:da:2c:2d:e2:24:c0:b8:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep  5 00:00:00 2024 GMT
            Not After : Oct 10 23:59:59 2024 GMT
        Subject: serialNumber=62f1230e659211c3beb593ed19b3ced80d5d99cf51a0ac71ffea5329a04c9909, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:1b:c3:49:c2:35:7c:b5:3d:4e:90:e6:d0:
                    b9:cc:6d:2c:f4:ae:74:fb:75:d1:fd:13:c6:e4:58:
                    9f:e0:69:34:eb:d8:d6:81:ed:7e:67:91:a2:d5:c8:
                    b1:8c:88:85:5a:8c:64:41:f0:2c:28:e7:39:c7:55:
                    49:ec:30:03:b8:49:ce:a7:7f:4e:00:a4:e4:1c:49:
                    97:3a:65:48:3d:58:95:c1:8a:0c:5a:b3:f9:b9:79:
                    62:83:8f:13:1b:9a:4a:de:5e:c6:12:4d:85:35:be:
                    1b:7e:3a:11:ff:d4:53:3a:99:82:08:e7:37:2b:9b:
                    15:e1:0c:f5:a3:c0:36:1f:68:de:43:b6:9a:65:eb:
                    c0:1c:ad:1c:a8:53:55:04:ab:d4:7e:e5:c8:f1:81:
                    76:73:e5:90:1d:cc:f7:34:77:06:30:3e:47:33:3e:
                    92:ad:03:ee:03:54:a4:e3:3b:ff:17:70:17:f2:4a:
                    d6:7e:68:3a:5a:58:ed:40:53:de:6d:e4:d3:48:b3:
                    31:eb:46:a0:46:3f:6c:d6:9e:46:21:3d:0c:73:cf:
                    78:6c:68:57:bd:d4:76:a1:2f:6f:26:ae:7d:e0:6d:
                    d7:4c:61:b4:a1:c4:e8:12:c7:5d:ea:18:23:2b:6d:
                    c7:3f:9b:8c:a1:9a:74:62:64:79:90:e0:0e:30:66:
                    69:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CC:3F:62:FC:9D:1E:F6:12:04:9E:F7:D5:33:B0:9B:93:12:E4:B3
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/196ab39a-f8af-41eb-9561-6f91630bdc45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:9f:e6:8f:e5:5a:2a:bd:ba:f9:51:a8:6e:82:9e:91:3d:18:
         46:97:80:51:15:fe:09:03:d5:9c:e1:d0:a7:43:7d:ae:f7:d6:
         9c:98:87:37:59:b8:4c:81:69:5a:bc:d1:da:02:20:05:87:1a:
         74:f0:33:f7:48:d5:eb:d3:94:31:7c:17:2b:38:28:f2:7b:fa:
         8f:95:b2:8c:aa:33:6f:81:ac:26:18:e0:f9:54:ec:6c:36:6a:
         79:07:e3:ce:4c:89:86:c9:84:16:4f:24:34:46:45:fe:cd:1b:
         9c:96:87:1c:7f:94:ba:f0:25:60:88:0b:a2:7c:fb:f8:be:9e:
         73:f1:b0:e4:d8:64:df:c9:a0:8d:c4:1a:b9:ae:68:a6:a7:13:
         f3:35:25:cd:52:20:2e:45:35:09:cb:1b:7b:9c:6c:c4:40:33:
         20:10:c2:90:4a:33:88:23:c3:85:b1:a5:b6:bb:22:91:0f:d9:
         1e:81:6e:b4:10:4a:1e:f4:f4:8b:a1:e5:7f:01:95:65:6f:58:
         10:96:19:70:0f:17:a1:f9:10:42:81:db:1b:5d:84:82:b2:b6:
         1d:26:43:79:65:3a:7b:8d:31:af:ca:26:2e:14:1a:2b:a4:a7:
         15:c5:ca:33:3b:dc:79:26:96:7b:bc:9e:bc:8a:8f:9c:17:e8:
         8a:de:c9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----