Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/02108394-f1ca-4d35-8d94-42927568ee60.roa
File:                     02108394-f1ca-4d35-8d94-42927568ee60.roa (raw, json)
Hash identifier:          itM+AQE6ivt76mJH1igl1Z842aH1FzJ0zPplrKMfgBc=
Subject key identifier:   03:D0:E8:1C:86:77:EB:82:A9:07:C5:F4:F7:EA:32:D5:5B:8E:85:7D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       59A5235EF14E77FFED7289B6A5D77868449FBC9B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/02108394-f1ca-4d35-8d94-42927568ee60.roa
Signing time:             Sat 24 Feb 2024 00:00:00 +0000
ROA not before:           Sat 24 Feb 2024 00:00:00 +0000
ROA not after:            Sat 30 Mar 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a5:23:5e:f1:4e:77:ff:ed:72:89:b6:a5:d7:78:68:44:9f:bc:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb 24 00:00:00 2024 GMT
            Not After : Mar 30 23:59:59 2024 GMT
        Subject: serialNumber=936c04275195c83b15372bee12e15225f19d7ca71a91e203bbf3bcb4e1bde7b5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5a:97:1f:e2:f4:02:09:2d:2d:67:1b:72:df:
                    0d:42:41:7d:ba:c2:b8:3c:c0:3c:58:0e:82:e3:fd:
                    c3:d9:ea:2d:db:4f:af:66:17:63:e6:06:36:91:ca:
                    a7:80:af:b5:17:7d:59:9e:0c:eb:bf:db:bb:c3:fe:
                    16:70:77:a1:00:9c:2e:f3:33:ba:91:70:9e:52:d1:
                    94:c7:51:e5:5e:bb:e4:1f:ca:3a:86:c6:63:ff:be:
                    42:08:d5:8f:5a:a6:d1:9b:84:e2:eb:22:93:c4:dd:
                    3d:9f:61:ad:b4:74:ce:28:76:83:31:5d:c3:f5:c7:
                    14:18:9d:0f:0d:d2:e1:ec:ec:0f:4d:46:30:11:f2:
                    71:34:44:c1:37:ba:6b:0e:9b:47:2a:4b:70:4c:f3:
                    90:1e:b8:89:a9:4c:4f:cd:0e:48:17:f0:d7:5d:b0:
                    a2:c3:ed:2f:92:44:ec:63:e1:39:d4:3f:15:85:5c:
                    04:f7:46:74:9d:73:00:95:a2:7d:6b:f0:df:e2:92:
                    36:c9:ca:4a:c3:57:f1:99:80:c8:61:0d:7b:8f:7b:
                    b8:1c:b2:e6:63:3e:e6:65:d1:1b:cb:3d:fc:d8:86:
                    6a:7c:a6:2d:c0:a5:87:97:be:db:db:0e:22:20:6f:
                    c8:76:36:11:66:dc:ec:b0:98:90:22:8c:f6:5a:f7:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D0:E8:1C:86:77:EB:82:A9:07:C5:F4:F7:EA:32:D5:5B:8E:85:7D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/02108394-f1ca-4d35-8d94-42927568ee60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:58:1e:e6:36:ae:58:b0:08:f3:4c:34:ad:bb:4c:d0:2a:20:
         c8:66:07:7e:dc:d2:dd:5b:f7:9b:2f:db:1b:cd:51:f1:1e:9f:
         02:48:4c:74:bf:88:28:c8:ad:6d:78:8a:8f:72:5f:c4:e4:90:
         0f:d1:6f:bf:ea:53:d7:d5:af:fb:9e:45:dc:db:48:74:04:2a:
         f9:b9:17:85:ab:7a:4b:e2:1d:19:db:92:f7:5f:4f:66:85:70:
         44:c9:05:a7:03:50:10:fe:52:d3:89:f7:ad:1d:2e:b3:79:04:
         cf:f2:aa:fd:90:00:bb:e5:d4:17:c2:3c:6d:63:83:31:c0:5b:
         be:b3:e2:fd:a0:b9:bd:e2:51:60:ab:23:db:0a:21:fa:6c:1b:
         9e:63:1b:dc:54:cc:d9:a3:7c:84:f2:d9:37:9e:57:0d:48:c0:
         e2:7b:94:62:9b:bf:fe:a3:02:2e:ed:61:56:e6:dc:f7:f7:c8:
         5a:fa:9d:69:40:33:87:f4:6e:17:22:12:d9:49:98:3b:04:42:
         1e:d8:36:92:6f:c4:af:bd:a8:d5:55:03:6a:69:ce:85:5b:51:
         64:a3:04:30:e9:bc:bd:e1:e7:96:8e:e7:a9:b7:2e:8b:4f:0f:
         83:8f:76:19:03:1c:44:cd:5b:d3:80:07:e9:5c:84:4c:b0:52:
         a8:72:cd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----