Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1dbc3abd-8aa1-471d-8343-105ca5ea6bec.roa
File:                     1dbc3abd-8aa1-471d-8343-105ca5ea6bec.roa (raw, json)
Hash identifier:          3GvMzI7lHeO8Fx9bIDbbjtCIxpqQIbbF9p1RZv+s8ys=
Subject key identifier:   46:18:71:A3:AA:3C:17:07:E2:6C:16:D5:C0:9F:F1:FD:F4:55:76:46
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4BC55B27DD30CFB8B665C77001CFE46D7C46E778
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1dbc3abd-8aa1-471d-8343-105ca5ea6bec.roa
Signing time:             Sat 19 Aug 2023 00:00:00 +0000
ROA not before:           Sat 19 Aug 2023 00:00:00 +0000
ROA not after:            Sat 23 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c5:5b:27:dd:30:cf:b8:b6:65:c7:70:01:cf:e4:6d:7c:46:e7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 19 00:00:00 2023 GMT
            Not After : Sep 23 23:59:59 2023 GMT
        Subject: serialNumber=836769077535f4aed41c4ba2e85133c613c07fb9f75c88b94e6f451f490b84ad, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:b0:0b:42:94:a1:1f:3f:da:c1:0b:57:65:
                    0a:61:4d:49:60:87:2d:c2:57:d6:9d:51:d3:0e:55:
                    00:ee:a6:8e:20:a5:08:a6:60:74:b6:b1:c6:44:c4:
                    46:8b:37:96:8c:e0:63:3b:00:55:6e:78:e3:30:b2:
                    16:df:47:82:55:86:a2:71:e7:19:3c:84:83:73:6f:
                    a3:88:a6:76:5f:df:47:99:50:e8:b0:12:b0:26:e6:
                    5f:51:dc:03:b4:48:bb:73:d0:1d:e8:59:94:c3:ba:
                    6f:7f:77:5c:35:82:ff:31:2f:8d:c1:52:ce:bd:ac:
                    85:ae:ef:7d:60:6c:c1:b0:42:e4:bf:0c:31:4b:f7:
                    fc:56:20:22:77:24:a2:4c:aa:f4:b3:98:61:b2:d6:
                    98:2c:a9:bd:83:47:d8:6b:7a:8b:cb:67:e5:b1:33:
                    c3:02:02:d9:7e:3f:d5:b7:d3:ca:89:c1:cd:55:12:
                    d1:ce:5f:3f:bb:2f:0c:2e:4d:ff:77:9c:32:ea:81:
                    05:3e:80:c9:c0:20:e4:cb:aa:6c:f6:33:ae:09:a0:
                    76:d6:88:ec:f3:61:49:89:b5:9c:86:9e:06:cf:28:
                    39:c4:03:f8:54:f9:c2:0d:b0:8f:d8:72:9d:ac:66:
                    8a:68:bd:f3:f6:58:1f:d8:d3:c8:5c:e9:c7:2d:7d:
                    85:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:18:71:A3:AA:3C:17:07:E2:6C:16:D5:C0:9F:F1:FD:F4:55:76:46
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1dbc3abd-8aa1-471d-8343-105ca5ea6bec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:f4:99:01:d8:4a:28:a6:f6:20:08:0f:a7:df:c6:1c:e3:65:
         5e:b7:12:35:6a:49:2a:85:05:fe:a0:27:21:b7:2d:1f:5f:7e:
         cb:ba:18:4d:02:6b:ef:2f:13:c9:3c:49:d6:bb:8b:6d:6b:20:
         4e:49:9b:f0:cb:48:80:e3:94:b7:41:51:68:dc:81:d9:22:03:
         58:30:f8:15:bb:76:2d:e4:3f:81:7d:bb:e5:ad:ff:dc:ed:48:
         51:26:ff:48:7e:b5:fe:f9:3e:a2:a5:1e:e1:df:88:36:d3:7e:
         73:40:3c:22:e3:ca:18:2f:bb:1f:c8:6a:1a:00:17:24:41:38:
         d1:c5:72:4e:82:50:0b:62:dc:65:8a:ff:f2:b8:6c:91:1f:ef:
         53:64:b4:84:b2:6e:58:c1:f0:69:d2:c2:4d:21:e3:86:0f:68:
         63:b2:60:19:33:f7:36:59:c7:40:ad:9a:1c:55:00:5b:60:4c:
         ee:99:81:bc:97:23:d3:bf:b3:80:64:7c:31:8b:69:93:98:e9:
         85:c1:cb:7f:b0:d9:1a:82:81:4e:a7:73:bf:f0:5f:25:dc:aa:
         4d:43:2e:cc:13:b2:eb:17:77:13:79:a4:b0:06:31:37:75:9e:
         78:f8:53:43:b3:60:ef:ca:7e:64:1d:4f:6c:11:e1:f5:61:1e:
         38:e3:bb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----