Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9f829969-debf-4d83-9dc2-12dd8cee9af9.roa
File:                     9f829969-debf-4d83-9dc2-12dd8cee9af9.roa (raw, json)
Hash identifier:          f1Nj5h2mH3ykJV0RULD1jv0qLmxdDjxcuMgpgiNltZI=
Subject key identifier:   42:87:12:9F:C6:9F:9E:BF:1E:0F:4D:A2:44:91:A3:DE:0E:51:E1:F6
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       123B566A077D4016291D6F040142A81E418A79BA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9f829969-debf-4d83-9dc2-12dd8cee9af9.roa
Signing time:             Sun 31 Mar 2024 00:00:00 +0000
ROA not before:           Sun 31 Mar 2024 00:00:00 +0000
ROA not after:            Sun 05 May 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3b:56:6a:07:7d:40:16:29:1d:6f:04:01:42:a8:1e:41:8a:79:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 31 00:00:00 2024 GMT
            Not After : May  5 23:59:59 2024 GMT
        Subject: serialNumber=a671aa1dacdac787a88cb2955847639e9a4721a574a513c3aa8a49b11d564fd1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b0:82:d6:c4:30:de:a2:a0:60:68:c7:10:b6:
                    43:b0:ec:bd:16:0b:d7:18:c5:43:e9:e6:42:84:8e:
                    fa:be:4b:d8:ee:cc:a9:31:9f:c6:bf:79:bd:0f:0b:
                    f4:7a:d4:19:f7:ce:89:dc:0e:a2:c9:d8:c2:af:9c:
                    ec:73:44:89:a6:c4:82:76:4b:c0:4b:34:ed:ff:24:
                    a4:ea:42:60:14:39:a3:0d:1e:40:e5:53:ff:21:7b:
                    03:7a:aa:4c:e0:c1:8b:35:e4:f1:d4:5b:4d:23:11:
                    6f:7e:64:ae:2d:1f:1c:f2:45:77:3a:24:23:ff:57:
                    97:25:bf:69:72:49:7a:97:c8:f9:2b:37:0d:d5:48:
                    d3:e4:30:92:24:21:94:f8:25:5f:99:04:7d:b6:62:
                    e0:3b:f7:4e:a3:48:48:b3:d7:5b:77:29:5a:1c:89:
                    ce:a9:a5:64:a7:93:32:9b:bb:dd:ed:63:9b:51:9d:
                    a2:fb:3d:ae:ec:a6:13:55:23:94:21:22:e3:a3:4a:
                    e1:9f:ef:ef:f2:5d:15:3c:1d:f2:77:f8:4d:2d:ab:
                    fa:81:08:6c:20:fb:e3:16:78:ea:23:b7:ca:2b:29:
                    ce:d9:13:77:c1:4a:0a:ee:16:c2:61:6b:5f:ae:73:
                    3a:25:0d:2d:96:fa:15:94:33:13:e5:d4:99:f3:8d:
                    c4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:87:12:9F:C6:9F:9E:BF:1E:0F:4D:A2:44:91:A3:DE:0E:51:E1:F6
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9f829969-debf-4d83-9dc2-12dd8cee9af9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:44:93:9b:54:7f:aa:e4:21:e4:02:15:2b:51:59:59:57:b6:
         a4:6b:ba:5d:9c:d6:51:75:43:d6:f6:b2:1e:80:a2:54:bd:b5:
         3f:e8:52:c5:72:de:86:14:bf:29:3f:d5:71:50:82:11:c9:d3:
         b3:63:e9:4b:5c:0f:a4:04:a8:19:47:cd:23:55:77:11:12:d4:
         45:0c:11:b9:39:18:e5:01:55:05:8e:29:5f:50:e2:27:b4:dd:
         13:76:52:3f:27:72:cc:66:55:80:41:dc:76:75:f3:e0:91:07:
         af:59:2c:ba:6d:3d:58:7a:a0:ef:c2:d6:35:8f:52:47:7e:f0:
         27:d9:9e:ed:9b:10:92:2c:98:fa:0a:41:50:9a:54:b9:f8:25:
         0b:87:74:a0:25:23:2e:38:e1:35:7b:8c:c5:7d:28:f8:23:ba:
         e0:d9:7c:fc:a3:74:96:24:54:f7:60:7a:70:84:a5:ec:04:a6:
         4a:47:36:2f:71:1d:b2:45:09:23:91:62:e6:26:03:c8:f7:0f:
         58:7c:97:de:c4:25:4f:b0:b4:8c:80:0e:00:15:64:c3:ca:6d:
         f0:89:b7:6d:7c:b0:80:7f:58:b7:a6:42:41:c5:17:64:d4:19:
         00:48:e9:89:63:bc:86:01:eb:17:24:1f:c3:70:4f:fe:28:67:
         b6:38:1e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----