Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d41c3985-8cdc-4eab-bcd1-f381109f86a1.roa
File:                     d41c3985-8cdc-4eab-bcd1-f381109f86a1.roa (raw, json)
Hash identifier:          T4oDa/KHvhvkA9zLpV2di9H93bYvwkM43yCJefc/0m0=
Subject key identifier:   96:79:EF:2B:60:D9:A5:F0:A0:D9:DD:33:F1:A9:CC:47:D2:84:58:72
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       56B972CA55516A5C69731BF4E44CEE74F895F75C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d41c3985-8cdc-4eab-bcd1-f381109f86a1.roa
Signing time:             Sun 10 Nov 2024 00:00:00 +0000
ROA not before:           Sun 10 Nov 2024 00:00:00 +0000
ROA not after:            Sun 15 Dec 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b9:72:ca:55:51:6a:5c:69:73:1b:f4:e4:4c:ee:74:f8:95:f7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 10 00:00:00 2024 GMT
            Not After : Dec 15 23:59:59 2024 GMT
        Subject: serialNumber=bf4a33c58bc26639490586206dd78861c0843fdfe23fd7e08039df8f9a7b4905, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:22:d6:ff:b8:fc:11:f9:eb:c3:6c:95:ba:
                    58:e5:db:c5:03:94:3a:80:05:32:40:e3:87:e6:be:
                    9c:fd:5c:a9:ff:3e:e0:c1:8d:77:ca:9a:7e:1c:b5:
                    1d:7b:61:38:55:35:2b:dd:62:d2:03:6c:c8:94:80:
                    11:d5:6a:3e:ad:34:b4:89:71:7d:a6:e3:39:42:5f:
                    52:8d:a8:66:17:6b:57:9f:df:47:06:dd:41:e9:d1:
                    40:fc:02:ff:2f:14:5e:2e:4c:00:0a:4b:4d:e7:84:
                    a8:9f:66:b7:9e:db:8b:d9:1d:5c:8c:22:37:e5:42:
                    0b:d2:d3:8f:17:30:dc:40:c7:26:24:fc:64:41:d2:
                    3c:2a:e1:19:96:25:cc:74:1a:86:2c:4d:74:ab:c1:
                    ea:c1:97:62:df:a7:e0:19:0a:ff:bb:d2:45:a6:bc:
                    0d:20:e0:92:fa:6d:a7:fc:c4:ee:d6:5e:00:a9:10:
                    94:f4:2e:17:bc:de:70:ad:bd:75:da:ae:c8:2e:0b:
                    34:8f:1d:f3:19:35:e6:71:c1:c7:28:22:48:84:fd:
                    65:94:82:3a:e9:e5:39:bb:c8:c7:8e:0e:62:68:c7:
                    2f:ee:44:e7:15:85:09:1c:bd:ff:cb:9d:91:0d:ba:
                    f9:7f:2a:9a:0b:65:c7:2d:36:ef:13:2d:58:00:4f:
                    b7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:79:EF:2B:60:D9:A5:F0:A0:D9:DD:33:F1:A9:CC:47:D2:84:58:72
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d41c3985-8cdc-4eab-bcd1-f381109f86a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:41:6d:11:ca:c1:bf:c2:e3:a5:73:5f:7c:35:3f:18:73:85:
         dc:01:41:fd:4e:f3:c9:b5:a5:7d:d3:74:0c:0a:6c:d1:7a:39:
         e0:6f:c8:54:cf:72:7e:99:c8:49:68:e1:59:80:87:43:97:28:
         30:0a:04:9e:38:08:5e:1d:26:66:7d:1c:04:ed:6e:50:78:f7:
         90:ba:1d:f7:11:1f:55:49:8d:79:9a:07:8f:b4:2a:a6:d6:1d:
         68:1b:fc:fb:93:36:3b:01:bf:eb:33:4b:a6:10:8a:26:f0:d1:
         03:bd:f5:52:e3:a1:d6:33:66:d1:21:03:0d:b5:0b:00:be:c4:
         49:b9:86:d9:4a:0a:70:06:44:e7:a4:17:0c:2e:24:c8:46:2f:
         60:c9:d1:70:20:c0:48:ca:4d:4a:33:8b:42:39:99:d9:86:be:
         19:f4:c0:88:18:a8:28:72:be:eb:db:42:67:7e:54:8d:2b:f8:
         a6:d1:6a:87:77:e7:50:fb:8a:c7:de:46:49:f9:90:57:27:19:
         87:ef:90:40:1a:38:22:4f:ad:6e:e4:08:ab:7e:6b:39:6e:0a:
         2a:c5:1a:65:9d:ed:2b:96:e9:d7:bd:6b:36:75:38:7b:9e:fb:
         52:cc:21:e8:1b:84:97:13:52:0c:9e:2b:d7:b0:0d:87:6b:07:
         21:5c:1b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----