Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aceb3c6e-3127-4b44-ad22-3519740f326f.roa
File:                     aceb3c6e-3127-4b44-ad22-3519740f326f.roa (raw, json)
Hash identifier:          LgjZlzT2M6cJlbuPJJ+LVFQ5pWpTQd8WW7s9F/4+dyM=
Subject key identifier:   2A:B2:93:05:23:B6:1B:14:16:83:B1:68:2E:7A:BE:A0:6A:F4:44:1B
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       177657C31AE69A010CEA60BD46D0281E06E2A5B6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aceb3c6e-3127-4b44-ad22-3519740f326f.roa
Signing time:             Thu 14 Nov 2024 00:00:00 +0000
ROA not before:           Thu 14 Nov 2024 00:00:00 +0000
ROA not after:            Thu 19 Dec 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:76:57:c3:1a:e6:9a:01:0c:ea:60:bd:46:d0:28:1e:06:e2:a5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 14 00:00:00 2024 GMT
            Not After : Dec 19 23:59:59 2024 GMT
        Subject: serialNumber=e3f5e48c9b96928e948aef008d5c1a3cac15d656fe0b14b05c3dfd947867d502, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:02:2d:9c:74:2d:64:6e:34:fb:4a:43:07:
                    9f:e7:a7:4d:87:05:7d:b7:ab:69:8a:d1:af:34:62:
                    4c:a0:3a:30:f9:fd:e8:90:4b:62:2a:14:8b:f3:23:
                    58:41:5f:f5:63:a3:1a:86:28:8d:8a:31:97:62:f1:
                    57:47:64:13:a0:a8:ea:a3:38:6f:28:8a:3a:c6:33:
                    dd:7b:31:36:67:3c:29:8c:46:87:ab:de:1d:6e:8b:
                    31:4b:38:3e:15:dc:1a:aa:0d:3f:74:0a:54:da:ec:
                    b1:17:ce:8c:39:f0:12:10:f5:89:31:af:0b:d7:b9:
                    e9:17:41:d3:fd:3d:70:5e:57:db:be:cf:d2:25:b0:
                    ae:37:d6:e3:9a:ee:5e:4e:fc:37:b5:9e:2d:e4:60:
                    ef:12:12:08:24:cb:3e:20:fa:70:0c:32:fc:c2:b4:
                    e4:94:1a:da:98:6b:9b:eb:b2:1c:42:0f:c4:87:cd:
                    63:29:7e:a6:18:7e:5a:ad:22:a8:c0:70:79:75:bc:
                    d2:39:0c:77:db:43:89:35:58:ce:11:52:6e:f7:94:
                    bb:cf:f4:d9:d0:3e:e7:fb:1b:28:0e:94:da:19:49:
                    14:47:fe:85:4e:ca:f7:74:24:74:68:21:04:73:7a:
                    da:81:d6:da:f3:c6:9d:5f:6b:4f:a3:5c:fc:da:91:
                    7c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B2:93:05:23:B6:1B:14:16:83:B1:68:2E:7A:BE:A0:6A:F4:44:1B
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aceb3c6e-3127-4b44-ad22-3519740f326f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:86:f4:93:98:aa:74:3e:c1:95:0b:01:e5:7e:d0:52:4a:c0:
         c9:76:e5:c2:be:9d:90:19:43:ee:22:1c:a6:3e:2e:e3:e3:8d:
         75:5c:84:ce:8b:f5:fd:ca:d0:f0:56:5f:7e:d3:53:27:59:c0:
         07:bc:cc:48:ad:83:43:ae:41:fc:dc:f4:9d:e0:db:f1:e6:14:
         b0:4b:9c:22:04:6c:62:bb:d8:ba:5f:ce:65:1a:d5:66:ed:f4:
         0b:1b:e7:55:5a:10:8a:65:e3:5c:ef:b6:e9:72:2e:0b:fc:f6:
         b2:68:32:d3:43:ca:9a:46:0b:18:ac:65:0f:03:a6:c5:68:fc:
         02:d3:26:80:c9:da:d1:9f:20:a2:46:38:0d:c1:ae:5e:d8:4e:
         fb:a5:52:a6:32:e4:ce:2e:be:e9:20:0f:8a:d0:a8:69:cf:12:
         d9:fa:c4:16:5d:1d:2f:ab:38:8d:05:5f:ec:f5:3a:fd:84:dc:
         a3:b9:ee:9e:e5:c7:fd:b4:0c:d6:11:7b:66:16:f0:c8:0f:00:
         c6:2f:b1:d3:9d:72:79:18:b6:ce:f8:47:a3:1d:37:44:32:45:
         40:ec:8a:df:50:ff:90:93:ed:8e:ad:7d:9a:e3:6e:7a:93:f5:
         52:82:34:18:b0:02:0c:e5:95:c2:97:a5:e4:ab:f8:5b:f4:cc:
         15:08:57:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----