Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/46c8b918-cc34-4787-a251-5609ecc6373a.roa
File:                     46c8b918-cc34-4787-a251-5609ecc6373a.roa (raw, json)
Hash identifier:          f0+BZLVUw3ir9GdLqRCzbtaPYy1GRnzQ/Kg0opNQ67k=
Subject key identifier:   8E:59:9C:65:33:96:5E:09:3C:EC:31:05:CC:4E:71:51:74:3E:A4:AF
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7ECE0DA338A4B19D9642B72E895E7EF395E4452B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/46c8b918-cc34-4787-a251-5609ecc6373a.roa
Signing time:             Sun 19 Jan 2025 00:00:00 +0000
ROA not before:           Sun 19 Jan 2025 00:00:00 +0000
ROA not after:            Sun 23 Feb 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ce:0d:a3:38:a4:b1:9d:96:42:b7:2e:89:5e:7e:f3:95:e4:45:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan 19 00:00:00 2025 GMT
            Not After : Feb 23 23:59:59 2025 GMT
        Subject: serialNumber=21c1844ebca702719888d6361208c0bc3af4ac594ce44a28d125085085a68f17, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a6:fb:96:e5:34:ad:51:1c:58:a0:96:0a:02:
                    79:25:d5:83:db:9b:c2:c5:0a:7b:1a:50:7b:da:cb:
                    a5:a9:92:dc:c7:93:dc:01:35:dd:8c:f8:03:8a:e8:
                    40:97:86:54:0a:39:a6:37:9b:fb:a2:09:40:8d:41:
                    74:90:a1:9f:07:68:6b:7e:3e:3f:be:bf:c9:cb:c7:
                    cf:1e:85:29:c0:52:3e:58:72:a0:2d:2c:3e:9c:b1:
                    36:2f:d3:a2:70:d4:9b:c4:d2:0c:f2:94:2a:17:12:
                    13:c6:82:e3:ba:16:3e:08:dc:59:0b:77:1a:51:61:
                    3f:59:b7:91:c1:b8:22:b5:38:f2:d2:91:cf:69:58:
                    2d:ba:4d:4f:8d:82:bc:98:1d:d2:16:c7:d4:de:9c:
                    68:2e:b1:d5:bc:fb:ed:bb:53:05:e5:df:81:27:98:
                    09:09:b9:62:bc:91:79:68:b0:bc:c4:3c:38:dd:fa:
                    5b:18:d8:a4:d3:28:14:93:f5:e4:f6:43:f9:80:ec:
                    74:25:af:53:12:e5:2c:97:62:fb:02:3d:85:77:ed:
                    4d:e8:1c:25:75:75:93:6c:06:77:f9:59:3b:a3:08:
                    3f:36:2c:74:62:a3:55:a2:da:11:41:fa:6e:0a:f6:
                    94:b8:96:25:57:e3:a4:d0:47:c3:24:52:9a:d0:36:
                    89:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:59:9C:65:33:96:5E:09:3C:EC:31:05:CC:4E:71:51:74:3E:A4:AF
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/46c8b918-cc34-4787-a251-5609ecc6373a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:3b:28:7d:59:8d:3f:f6:46:47:44:98:64:5a:d6:5c:07:f0:
         ad:4d:5f:fe:99:53:dc:dc:a1:8b:1a:97:53:88:fa:5b:b8:f0:
         10:69:21:60:30:79:16:c7:b7:9d:fe:2e:e3:13:77:0c:60:75:
         e2:00:5d:cc:f3:2f:b3:fb:1e:a5:2c:a8:86:32:5d:1e:b7:87:
         8b:cd:66:e8:26:1c:42:79:80:86:8f:2e:92:66:52:42:90:14:
         23:bd:b5:65:ce:45:b0:42:d8:de:9d:55:42:97:21:1e:89:3d:
         ca:43:84:b6:81:ab:ba:67:6e:85:d8:56:e8:96:28:48:a2:18:
         7c:f9:1d:0f:c4:13:05:71:4c:c1:f5:b5:83:28:6a:73:2d:36:
         8e:9d:db:62:e9:a5:fc:04:ef:98:9c:8b:ae:97:a1:e6:be:5e:
         ea:63:99:38:ea:c7:0d:a6:5b:0b:bd:ab:05:83:ae:b7:5e:8a:
         89:68:2c:69:a7:63:23:3e:12:36:17:7c:a8:20:5a:50:13:54:
         f1:f7:b4:db:83:72:8e:11:e1:ad:34:04:84:d1:ab:6e:bb:d3:
         19:88:87:69:2c:d0:9d:2c:80:63:a1:38:02:ab:05:51:9b:1d:
         2f:35:27:f3:1c:f5:f4:3a:b9:0b:54:f1:3f:86:aa:8e:48:c9:
         45:fb:95:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----