Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/beae12d6-c501-440f-a097-d2a84e0a4ea1.roa
File:                     beae12d6-c501-440f-a097-d2a84e0a4ea1.roa (raw, json)
Hash identifier:          R51p6dlVakgW2YC4EFlAqL/nacrPeWq79n1kYU1uRuY=
Subject key identifier:   14:1B:C5:54:5F:A5:76:0C:3C:7D:BD:97:52:55:19:42:57:EC:04:22
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       42D0D6E793A74C197F7F6B6D6E8C44D560062F56
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/beae12d6-c501-440f-a097-d2a84e0a4ea1.roa
Signing time:             Thu 20 Feb 2025 01:23:21 +0000
ROA not before:           Thu 20 Feb 2025 01:23:21 +0000
ROA not after:            Thu 27 Mar 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d0:d6:e7:93:a7:4c:19:7f:7f:6b:6d:6e:8c:44:d5:60:06:2f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb 20 01:23:21 2025 GMT
            Not After : Mar 27 23:59:59 2025 GMT
        Subject: serialNumber=c069030997985e64b97db1ac07b1ba18eff495bd3f690c3224535461284d834b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:a8:af:0f:4f:04:dd:8e:2c:24:46:9d:4a:
                    ea:30:fd:a0:b4:ca:19:24:a6:03:92:5f:eb:b0:5c:
                    4b:9f:32:88:d2:1e:54:63:85:e4:e3:8e:45:8c:bd:
                    6a:75:a8:ce:d6:41:c0:12:38:ad:64:21:26:3d:13:
                    a0:7f:22:43:05:23:c3:22:c5:81:3d:5f:34:c2:c5:
                    5a:8e:d0:b0:ad:ce:2e:cc:a3:73:76:e2:36:00:5b:
                    3e:da:aa:70:a4:d5:52:cf:f4:bb:25:ff:be:3d:71:
                    bf:fd:fa:ba:d9:80:4d:04:09:75:96:17:60:61:96:
                    61:34:68:8a:9e:8d:fe:44:36:22:47:9c:2f:87:1a:
                    14:39:a3:40:65:57:e5:2c:18:e2:f1:a8:96:0c:e1:
                    77:1d:20:26:7d:ee:d0:64:55:a9:a8:1b:22:8d:9d:
                    15:d8:f2:d2:c3:c5:9f:7b:41:25:2b:8b:d4:b2:dd:
                    d7:2f:c3:d9:99:43:e6:85:c9:13:1f:0c:cb:2d:50:
                    84:17:4f:1f:72:6a:69:2a:f9:b3:57:c7:3e:4f:09:
                    56:fd:84:1d:3b:52:4d:cc:07:05:8c:f4:d9:89:bb:
                    74:6a:7a:0b:ee:f2:44:63:36:18:7e:9f:7d:b4:21:
                    85:1e:f8:5e:cd:d0:a2:30:5a:99:3c:3e:1b:a9:0c:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1B:C5:54:5F:A5:76:0C:3C:7D:BD:97:52:55:19:42:57:EC:04:22
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/beae12d6-c501-440f-a097-d2a84e0a4ea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:58:29:7d:22:7e:0b:77:8c:d0:32:79:6a:4c:34:45:9b:11:
         71:4c:65:6e:0d:24:dc:b2:ab:80:ca:a0:20:ed:38:9d:77:a5:
         35:2e:8e:b0:f5:bb:2a:a5:68:9c:8a:f2:02:2f:be:49:98:48:
         ec:6d:a5:e1:f1:83:13:ff:6f:1f:2a:4c:13:2f:bf:1c:22:e1:
         7f:64:ec:60:c4:03:ac:e7:09:21:2b:53:8e:4c:e8:a4:dc:41:
         e9:6a:31:69:4d:ba:c4:a9:81:99:2a:b5:33:dc:ae:01:80:ae:
         58:95:ec:ba:d4:4f:56:29:0d:14:1f:01:67:f2:8b:4f:b2:c3:
         70:ba:a6:ed:c2:77:32:eb:8c:ba:13:ba:b4:d1:96:de:d1:b1:
         75:6d:65:82:12:7b:f8:56:ca:bc:cf:7d:2f:61:87:e9:55:f4:
         92:41:97:48:57:3d:4e:93:51:82:bd:b6:58:93:4c:3d:ac:ef:
         bb:3c:a3:d4:c0:40:ac:71:98:ef:a2:34:dc:9f:ed:d9:e4:f9:
         c3:81:a4:12:b4:01:c8:4c:f1:80:71:5a:b7:30:87:26:7e:85:
         45:eb:52:7e:c5:9b:bd:ba:53:45:55:a8:ea:9f:da:5d:d2:cd:
         64:da:66:cf:71:1f:a4:cb:92:99:7c:ce:78:5e:45:0f:62:41:
         b6:0e:5f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----