Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01e467ec-356a-4810-93c3-a6bb2ebcc810.roa
File:                     01e467ec-356a-4810-93c3-a6bb2ebcc810.roa (raw, json)
Hash identifier:          /I9Nnmsnz1Wa2OyvKBYA37HBKh5NuV3eyfNGZK6P9TM=
Subject key identifier:   9F:93:B4:A9:E6:51:DC:F2:90:28:47:E4:5A:6F:5A:BB:7F:B9:FC:43
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       125BE634858895E709EB4A5750ABCFC5F4EDCF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01e467ec-356a-4810-93c3-a6bb2ebcc810.roa
Signing time:             Wed 13 Dec 2023 00:00:00 +0000
ROA not before:           Wed 13 Dec 2023 00:00:00 +0000
ROA not after:            Wed 17 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5b:e6:34:85:88:95:e7:09:eb:4a:57:50:ab:cf:c5:f4:ed:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 13 00:00:00 2023 GMT
            Not After : Jan 17 23:59:59 2024 GMT
        Subject: serialNumber=d5eeae2da359cf0d5be7cceb528cd1569257643e983990933b104fa76f2f0aac, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:0a:45:c0:65:19:e1:4a:95:07:bb:79:ee:
                    9d:77:48:03:0d:79:f1:7d:8e:31:ba:59:6c:af:c5:
                    69:e9:0d:d5:e9:e0:f7:4b:49:d5:5e:92:c3:8b:33:
                    40:5a:48:56:cd:49:7b:b4:01:78:fa:a7:4d:b9:41:
                    31:6a:92:06:e0:0a:58:ba:1c:20:ae:22:db:65:ec:
                    d6:95:a3:4e:c0:d7:75:6c:77:ba:94:86:8b:91:e8:
                    b0:df:a3:4b:d1:0e:f6:e9:e6:b0:2e:17:85:b5:26:
                    56:cf:6e:17:31:55:1a:ab:05:26:22:69:27:40:82:
                    f2:d6:66:e2:e8:3d:a9:88:f0:d7:19:c3:91:a3:4e:
                    54:ba:f1:72:2e:b7:ff:9b:7a:65:fa:fe:3b:35:3e:
                    7b:a2:16:39:29:01:a9:53:bc:5d:50:cc:b2:e0:c0:
                    ab:24:84:e4:b5:f6:df:79:36:fe:3c:5f:8d:cc:54:
                    5e:2c:c6:8c:fb:4a:d5:1f:18:f8:a5:dd:5d:99:44:
                    c8:98:26:61:b8:ba:4a:a3:5d:cd:7a:95:f5:10:ee:
                    ce:0f:c8:74:cf:25:36:08:6d:06:4c:e7:9c:aa:4c:
                    00:5e:e3:f1:12:8c:c7:8e:b7:bf:2e:60:8d:3f:34:
                    af:dc:4f:dd:64:19:9d:ee:c4:2e:97:aa:99:b6:c4:
                    51:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:93:B4:A9:E6:51:DC:F2:90:28:47:E4:5A:6F:5A:BB:7F:B9:FC:43
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01e467ec-356a-4810-93c3-a6bb2ebcc810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:55:a3:ae:63:fe:1f:c3:ac:02:76:4d:7e:3c:e6:33:55:e5:
         2b:91:f4:04:e1:ee:43:03:63:6d:2d:d4:c1:85:96:eb:91:44:
         85:34:19:1c:5d:23:9e:07:b3:95:78:22:2b:e1:c0:d4:8e:c3:
         cd:ad:06:47:56:2b:c7:13:72:26:46:59:f6:d7:30:37:2e:c2:
         f4:af:75:a8:18:fa:b3:21:cf:8e:67:7d:ed:3c:e1:98:b1:54:
         9e:5c:6f:a8:4e:ba:e0:8b:b3:35:42:91:f4:dd:3b:48:72:9f:
         65:92:c5:ff:72:4c:58:f3:a3:4b:9e:02:ca:f2:d8:88:66:dd:
         2d:75:59:09:56:28:9a:f2:66:73:42:c4:a8:60:43:ea:93:ce:
         aa:7f:49:9a:e2:a6:90:c1:2d:c7:b1:24:a9:99:12:39:91:81:
         40:4c:de:4c:bc:c2:21:46:c4:92:00:a6:84:ff:9c:24:97:c1:
         15:1f:54:f6:a7:6d:08:27:72:37:23:12:eb:03:b3:05:8d:c7:
         6e:7b:2f:eb:63:9c:7a:a0:08:1e:24:81:d1:02:9e:55:50:c1:
         bc:db:ea:6f:a2:11:c5:2f:4d:af:2c:d1:5a:70:83:d3:e8:a4:
         05:72:78:f0:77:e4:f8:73:83:4b:40:df:c0:e0:47:f9:ee:88:
         39:d8:a2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----