Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dbea82e1-af1f-49a4-801a-96bdee8b56cf.roa
File:                     dbea82e1-af1f-49a4-801a-96bdee8b56cf.roa (raw, json)
Hash identifier:          t927ke49adr+NTntO9uhYyV51qVZ2qPTKbeXQ+tut64=
Subject key identifier:   F9:23:BF:94:F2:8C:A6:18:4E:94:4C:1D:E0:EC:AB:6D:12:FA:89:60
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       268C4E55A0DB87C2486EE6F504D329633E74A295
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dbea82e1-af1f-49a4-801a-96bdee8b56cf.roa
Signing time:             Wed 25 Dec 2024 00:00:00 +0000
ROA not before:           Wed 25 Dec 2024 00:00:00 +0000
ROA not after:            Wed 29 Jan 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8c:4e:55:a0:db:87:c2:48:6e:e6:f5:04:d3:29:63:3e:74:a2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 25 00:00:00 2024 GMT
            Not After : Jan 29 23:59:59 2025 GMT
        Subject: serialNumber=a4bbad5b0108fbef88182203f49ef7ddc041fdfe37cd36d682b4f4521cbef05a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:aa:33:83:fc:65:87:64:c5:74:7d:04:77:16:
                    0d:5a:b7:e8:00:12:ba:0e:df:0a:5c:19:c8:c0:2d:
                    db:0b:fe:a6:b3:c4:c4:46:b6:0a:ab:13:f5:ce:0e:
                    b3:ce:62:bc:5c:f5:50:5b:92:2b:cb:ec:2d:b4:ca:
                    18:52:85:1c:b6:da:80:d5:03:90:8c:2d:3a:d4:f3:
                    35:7b:4f:4a:8e:1f:7b:a2:a0:a9:cb:cb:e1:51:7d:
                    bd:b0:51:f9:23:d3:3b:1a:b0:d0:7c:7b:46:0b:d7:
                    30:8b:f8:72:05:c3:37:33:dc:ce:97:7d:e3:e4:9b:
                    e2:29:b9:ac:20:16:7d:88:ea:fd:1c:d3:f4:10:e4:
                    59:ee:a3:b8:c0:89:93:ba:1e:ff:d0:36:fb:e0:ca:
                    82:6f:7e:25:72:aa:60:39:73:a4:2e:c2:8d:02:e1:
                    7b:23:20:34:9f:30:13:86:b7:68:bd:90:16:42:8f:
                    a3:2a:3d:03:bb:40:5d:91:35:6c:a8:6d:b7:90:fe:
                    7f:f0:5e:57:e6:76:a4:e9:b2:84:b3:95:7a:b7:b6:
                    bf:3c:13:d4:06:04:fb:8b:6f:a7:2a:85:13:c2:37:
                    98:ac:1c:d6:c6:7c:30:f5:58:ef:f2:61:86:e7:df:
                    d1:03:45:c6:c6:2c:86:fc:f9:4e:43:2a:c0:36:0d:
                    58:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:23:BF:94:F2:8C:A6:18:4E:94:4C:1D:E0:EC:AB:6D:12:FA:89:60
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dbea82e1-af1f-49a4-801a-96bdee8b56cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ec:69:a2:21:b8:e6:76:6a:9a:34:6c:ab:0f:1a:ae:b8:59:
         c6:cd:38:b6:91:c1:7b:d1:9d:c0:14:c2:93:7c:f3:ca:6a:8d:
         01:ec:10:33:cf:d9:5a:e9:a0:2e:4e:11:91:4b:60:fe:74:93:
         a7:44:ba:83:60:60:5c:30:aa:85:ec:ef:1d:28:0f:fc:a2:12:
         c8:78:58:80:7f:82:a6:d1:54:46:8c:00:ab:55:1d:22:7b:d9:
         2e:4a:42:37:c5:4e:50:04:02:ae:be:e1:d2:fd:06:a3:e0:f7:
         a8:e7:2f:a1:b6:ca:9f:4b:24:d6:8a:99:b1:22:5a:04:0e:66:
         0e:e6:6b:60:f8:e4:54:89:14:e9:50:f5:28:df:14:a7:b9:af:
         57:ec:0e:ca:3c:45:c9:58:cf:c9:14:d7:62:ab:6c:c0:e2:21:
         9a:2e:05:c1:36:06:02:5a:5b:1d:20:eb:7a:1a:08:47:31:0e:
         bd:96:b9:a6:67:9e:9a:e3:91:f4:c4:e5:91:bb:4b:73:e1:68:
         59:3d:73:ff:83:10:47:67:8d:7c:bd:62:37:22:b2:31:54:69:
         d5:39:ff:43:34:f3:19:47:b8:b4:8f:ad:8d:35:6e:35:a4:00:
         f1:23:eb:63:02:40:43:b8:a8:9e:6e:d0:3b:41:80:04:76:3a:
         ae:f3:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----