Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aedd1f35-b17d-485a-a12f-bdf65a07199c.roa
File:                     aedd1f35-b17d-485a-a12f-bdf65a07199c.roa (raw, json)
Hash identifier:          LNzOoQVOOORE9MAIdHPcqnUo18wgGmvdMoy54r3KMN8=
Subject key identifier:   BA:D5:6B:B3:E4:A9:DA:AD:4C:E1:EA:70:0F:BF:B3:AB:1B:4E:A0:10
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       688F6AD75BDDFEF916E4FB26C24842653B33DED3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aedd1f35-b17d-485a-a12f-bdf65a07199c.roa
Signing time:             Sun 07 Jul 2024 00:00:00 +0000
ROA not before:           Sun 07 Jul 2024 00:00:00 +0000
ROA not after:            Sun 11 Aug 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8f:6a:d7:5b:dd:fe:f9:16:e4:fb:26:c2:48:42:65:3b:33:de:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul  7 00:00:00 2024 GMT
            Not After : Aug 11 23:59:59 2024 GMT
        Subject: serialNumber=7e6116c3eeb8c33e2320d1d2519a9ff714ddad3ab8808c4c12e810bd47d5c1e3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:f9:33:c7:8e:d0:ec:1b:d0:c4:f9:11:a9:
                    2f:e5:db:20:38:f0:1e:eb:82:cb:5b:86:d6:d0:cf:
                    5f:b8:26:af:2a:76:3e:88:6e:6e:55:b0:8e:51:d0:
                    cb:0c:05:4b:95:c9:da:95:43:43:01:73:4a:b6:07:
                    9b:f5:64:40:29:3a:e8:de:91:1b:81:4a:a1:2b:27:
                    52:51:62:38:9d:33:59:d8:0f:f4:1a:08:97:8f:f8:
                    7a:57:81:ae:a8:d4:13:86:37:f3:d9:42:be:53:3a:
                    3f:21:74:a3:3b:4e:c7:0b:19:3a:d6:58:c3:7b:5d:
                    85:ad:ad:c4:83:19:af:06:03:2e:54:bc:1a:95:49:
                    31:37:a8:7a:78:93:c0:3e:53:78:ce:c1:66:2d:fc:
                    db:f3:c9:e6:46:35:62:7a:47:1f:51:16:fd:ab:08:
                    b8:22:3b:d1:38:f5:67:32:b6:8b:fa:ff:74:5b:bd:
                    52:c3:fe:91:03:85:0d:49:60:c8:76:2a:ff:bd:f7:
                    24:d0:b6:1a:08:18:ad:57:fa:87:e2:50:51:7c:39:
                    66:47:cf:cb:c4:71:a2:95:2b:2c:a0:9b:50:20:b3:
                    eb:e6:9a:cd:4a:a5:34:44:7a:f7:78:8b:d7:d9:35:
                    b9:59:a0:d5:e3:61:35:51:4b:0c:0d:c0:09:86:08:
                    c1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D5:6B:B3:E4:A9:DA:AD:4C:E1:EA:70:0F:BF:B3:AB:1B:4E:A0:10
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aedd1f35-b17d-485a-a12f-bdf65a07199c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:3d:c6:2b:b1:89:3c:f3:87:52:6c:67:24:8c:dc:fd:85:66:
         99:29:fb:71:6c:9a:59:e6:2c:9a:4a:7c:f4:39:cf:e7:8d:ef:
         71:e3:ae:a2:b7:7b:15:5e:27:54:ad:69:98:0e:33:4c:da:09:
         04:0d:b2:3f:df:fa:72:1a:f4:1a:d1:97:88:ae:65:8b:12:14:
         92:dd:90:6e:22:51:5a:ac:53:56:d0:b1:81:cf:15:47:59:2e:
         49:8d:fc:20:0b:eb:03:3f:e1:65:b9:53:e5:4e:7c:f7:f4:97:
         c5:5d:e7:79:0b:97:8a:a2:37:e5:a6:8a:50:4d:2d:6a:6c:dc:
         54:23:b0:cd:7b:14:81:df:5c:51:76:5f:8a:c0:d5:92:b2:4b:
         d9:0e:68:de:20:ec:e0:45:8d:ad:52:f0:0c:d6:b8:65:1a:a6:
         3e:97:73:27:e5:37:8c:99:95:14:25:ca:31:08:be:75:1a:63:
         e8:00:6d:12:57:1d:b6:79:89:e3:13:79:fa:71:61:7c:e8:e1:
         45:ba:12:98:49:e4:63:96:41:71:32:38:0b:ab:76:01:a8:9d:
         95:3d:a2:06:eb:ef:ea:a5:63:c5:2a:cb:e6:0d:c6:57:cb:01:
         04:04:03:50:db:22:1a:2f:7c:41:ad:0a:92:e5:17:ba:9a:b6:
         2d:9c:2f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----