Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e7ba2a93-60fe-459e-91d3-175ef34528c7.roa
File:                     e7ba2a93-60fe-459e-91d3-175ef34528c7.roa (raw, json)
Hash identifier:          07r1LZt/vgEZW9B+5jZEW4SJsY8IDjXB2dozRhmsT00=
Subject key identifier:   23:97:FE:D2:F8:B6:73:1C:14:E9:2F:22:0D:83:8B:CD:5F:3C:DF:C9
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5658C821F1EDBB24B358B7F203C96A1CAB996F22
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e7ba2a93-60fe-459e-91d3-175ef34528c7.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:58:c8:21:f1:ed:bb:24:b3:58:b7:f2:03:c9:6a:1c:ab:99:6f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=530483d6f58bac1649e5805fd5b67a22469e825cb08befe0a777bd1271d726fb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:08:4a:33:50:43:43:75:87:ac:2f:87:e3:
                    96:63:e3:30:ef:67:ca:76:d1:d4:19:7f:77:8c:a0:
                    f7:75:9a:38:49:d3:ac:54:80:cd:89:a7:b8:f8:fe:
                    e3:f5:5c:78:3d:e6:86:74:c6:da:42:ae:e4:a3:de:
                    87:93:e6:c9:83:db:fd:df:6a:5f:0b:0f:03:c4:db:
                    c0:7e:23:62:5f:96:90:01:af:c8:ea:5a:7d:51:4a:
                    76:41:b4:7e:60:04:f4:1d:a0:55:58:75:7a:d2:8e:
                    ad:b5:ea:e7:f7:89:fd:03:f3:99:ad:bf:bf:44:10:
                    df:43:6a:01:4a:ba:aa:7c:20:83:9d:f2:53:29:12:
                    d9:c3:9a:40:f3:18:91:f9:1b:47:06:da:b6:70:40:
                    e2:30:b5:ff:01:69:97:69:a6:e6:e3:cc:c7:40:a6:
                    fa:b3:42:75:8d:d4:97:23:d6:da:24:ab:4e:b2:3c:
                    89:66:86:6f:11:81:a2:a6:17:29:10:e1:71:39:2b:
                    f4:ab:d2:f9:e7:44:5e:fa:8c:ed:79:24:48:5d:a7:
                    5c:71:37:59:d9:9d:01:d8:0a:23:71:e9:52:64:05:
                    b9:10:94:bc:56:7a:e2:36:e7:2a:8a:96:17:5f:eb:
                    75:f4:06:b7:dc:09:4f:96:f7:b3:f2:07:e8:6f:2a:
                    93:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:97:FE:D2:F8:B6:73:1C:14:E9:2F:22:0D:83:8B:CD:5F:3C:DF:C9
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e7ba2a93-60fe-459e-91d3-175ef34528c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:b1:3b:94:d8:e0:aa:f1:f5:5c:d5:33:10:3f:60:8c:22:cc:
         c9:91:97:34:26:65:d3:98:f0:d3:b9:a7:4e:df:9c:67:5c:34:
         4b:22:65:dc:74:b0:01:40:a5:85:3e:00:08:b1:47:10:0e:b8:
         bd:6c:3e:65:f2:2e:3e:7f:14:17:4a:21:51:13:54:d8:d1:4a:
         a3:81:47:bc:5c:df:78:01:26:00:7b:d2:c6:d1:5f:2a:ce:68:
         d6:46:89:58:6c:3b:d7:61:be:e4:f6:50:e3:23:25:0e:2a:d8:
         73:f1:0b:db:c9:a2:ec:fb:ba:ab:f8:67:73:53:8e:37:a2:9c:
         8c:f0:0c:7f:7e:c1:9a:08:33:6f:0c:2a:a5:69:55:65:ce:f5:
         23:c9:e1:3e:90:69:2e:af:bb:84:f6:21:2b:9c:3e:cc:95:d8:
         64:96:85:79:b5:92:d2:38:eb:1e:81:a5:ac:c9:95:b1:0d:78:
         ad:47:d6:51:7d:e3:b4:ee:fc:b1:2c:ef:8f:84:3a:be:2b:d5:
         01:d9:9b:f3:ba:49:2d:91:33:14:f5:16:af:86:cf:c1:60:21:
         3f:0c:93:80:43:4a:34:e9:7f:a1:fb:54:cf:dc:5f:cc:02:df:
         31:d8:20:ef:f3:c3:a3:f5:16:da:c6:2f:f2:fe:f7:18:be:c2:
         28:f5:b9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----