Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7b63ee9-b655-4b69-b794-b6be543910fc.roa
File:                     a7b63ee9-b655-4b69-b794-b6be543910fc.roa (raw, json)
Hash identifier:          EzjIvUZUGdj7K3Rqz2EWTOhcEkTzJP4iIirxBq0TIfo=
Subject key identifier:   93:B2:56:8D:72:5C:24:FE:50:94:B3:D9:B2:EA:D7:C8:EF:DC:C6:EB
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1CF19F49533ABCE0200E86DBCA2534B3711F8E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7b63ee9-b655-4b69-b794-b6be543910fc.roa
Signing time:             Mon 17 Jun 2024 00:00:00 +0000
ROA not before:           Mon 17 Jun 2024 00:00:00 +0000
ROA not after:            Mon 22 Jul 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f1:9f:49:53:3a:bc:e0:20:0e:86:db:ca:25:34:b3:71:1f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 17 00:00:00 2024 GMT
            Not After : Jul 22 23:59:59 2024 GMT
        Subject: serialNumber=b6477db7269db2010103166147ca4d047fccc352875101dc8f209922956b0227, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:53:66:13:5b:76:da:3c:d0:f7:1b:bb:e2:d6:
                    a8:4e:5c:10:c4:98:84:25:63:4f:87:dc:5c:6f:44:
                    57:73:73:7c:f7:d0:a6:cd:31:98:81:a9:78:d9:53:
                    90:21:07:8e:61:4b:35:93:7b:2a:2c:aa:52:e4:d9:
                    12:d3:81:d8:cb:43:84:9d:71:73:2c:bf:50:21:43:
                    04:aa:fd:c5:29:27:25:99:2c:78:a5:bf:a8:ec:53:
                    a2:da:73:f8:48:54:44:29:2b:89:97:89:9b:8a:a3:
                    14:bc:82:84:4d:c5:2a:ad:e0:5d:7c:28:74:52:5f:
                    1f:a2:51:83:fc:4d:c5:06:73:50:32:29:f2:13:2a:
                    9b:fa:1b:9f:84:bd:84:16:5f:3a:a0:35:df:5d:a6:
                    3a:16:97:56:16:fd:4d:9f:d7:31:7f:cd:7e:5a:43:
                    96:e8:3a:58:0e:41:f6:64:1d:1d:c6:0e:b2:c0:84:
                    b5:6a:70:f9:2f:af:1a:f7:c9:fd:b5:9f:13:3c:af:
                    b7:b2:f3:9a:a8:53:db:bf:6e:c7:6e:bb:4b:0a:64:
                    d7:51:34:d9:8d:b1:d4:d1:10:04:ba:2f:3b:d2:0b:
                    f1:6d:ae:8f:2c:82:35:cc:f1:f8:f6:25:82:52:33:
                    59:82:5f:99:ca:1f:3d:04:28:72:5a:77:46:ce:ec:
                    92:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B2:56:8D:72:5C:24:FE:50:94:B3:D9:B2:EA:D7:C8:EF:DC:C6:EB
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7b63ee9-b655-4b69-b794-b6be543910fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:80:9d:3f:2c:ad:50:56:e5:ea:57:d3:b0:c0:7d:d4:b3:65:
         2c:4a:2d:d4:07:bb:20:4c:dc:14:b5:9b:38:8d:d4:95:40:05:
         7d:0e:03:58:0d:8b:56:91:48:a9:61:63:40:66:44:9c:7d:d9:
         a3:bf:04:02:a6:93:e5:cd:9e:92:a7:59:fe:d9:bf:c2:44:5c:
         0d:e6:e2:46:22:3a:1a:47:bb:01:2a:e3:6d:96:ce:aa:b9:a0:
         8e:fe:b7:aa:e2:49:ed:b9:f0:a2:e2:20:8f:cb:34:1d:b7:02:
         21:df:08:25:85:04:57:6d:b8:2d:65:38:51:b6:ae:e1:6a:13:
         78:20:37:9c:1a:57:5e:2e:7d:9b:69:1e:43:4e:e9:eb:89:fc:
         b3:dc:85:15:92:a9:ab:a9:15:6a:1d:01:65:b7:ce:bb:47:c5:
         16:41:07:c5:0c:e2:ad:30:0e:2b:62:d5:01:ba:73:89:81:03:
         c6:5e:bc:57:2e:d1:e0:59:e6:e9:b9:dc:06:c8:e5:78:01:5a:
         f9:a8:be:e1:56:45:8d:52:72:b2:8f:37:3d:af:a5:98:37:7c:
         df:15:d7:10:f8:5a:11:86:21:5d:25:0d:b8:a6:41:e8:ba:14:
         f4:d1:c5:73:0f:35:bf:ff:4e:78:eb:53:2a:80:63:b7:79:14:
         3b:ce:0e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----