Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2bfe17a1-6264-4734-928e-52be3c701d8e.roa
File:                     2bfe17a1-6264-4734-928e-52be3c701d8e.roa (raw, json)
Hash identifier:          vipod+whAZNRvGXpAowmioKiiAiqW7E7vPdommjo/2E=
Subject key identifier:   AA:7D:7A:7B:88:0D:4A:BD:75:6F:E3:36:E2:71:75:43:78:01:B1:7F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3149D00368C1F815589631F550573CC74CD94196
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2bfe17a1-6264-4734-928e-52be3c701d8e.roa
Signing time:             Thu 22 Jun 2023 00:00:00 +0000
ROA not before:           Thu 22 Jun 2023 00:00:00 +0000
ROA not after:            Thu 27 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:49:d0:03:68:c1:f8:15:58:96:31:f5:50:57:3c:c7:4c:d9:41:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 22 00:00:00 2023 GMT
            Not After : Jul 27 23:59:59 2023 GMT
        Subject: serialNumber=99f3562ffbf86a59b83443fcf68f977ecf0041f196dfddfed81b88cd8abd019d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:c8:95:1d:0a:ec:29:e3:4b:52:ef:87:9e:
                    50:2e:0b:ca:b9:a4:07:bc:a1:67:f7:08:e9:8d:12:
                    d7:3e:98:78:90:99:c3:8f:c0:53:93:38:1c:0c:28:
                    46:bb:0a:2e:88:fa:13:c4:36:87:1b:d2:b2:da:99:
                    b6:e3:0b:e3:99:e6:53:30:d7:6e:16:f6:51:14:72:
                    a4:3e:4d:3f:a6:a2:2b:0c:d0:cf:5e:6d:50:46:45:
                    ec:88:88:c9:c8:49:d2:90:25:dc:2c:a6:df:06:d3:
                    a1:d1:8a:0a:4c:f5:68:86:18:c8:5b:68:e6:02:32:
                    09:15:10:23:2b:13:81:b4:94:6a:00:c9:5a:31:b1:
                    6b:40:db:7c:c5:13:1d:69:52:19:83:09:9a:f6:82:
                    b0:65:1c:9c:92:61:21:43:10:f1:af:e4:fc:86:c8:
                    f8:e9:cb:92:f0:07:96:fb:e7:03:ea:20:26:6f:de:
                    18:bc:24:1e:c1:35:47:e2:04:47:be:fd:4b:79:6f:
                    db:f4:76:57:f7:8f:7f:1d:c0:bb:2f:f0:87:c6:34:
                    16:11:1c:c8:09:69:e4:58:bd:78:ec:21:e5:d0:f1:
                    05:79:f7:93:b9:5b:11:c2:46:26:2d:f7:18:20:72:
                    9e:f5:a7:41:3a:83:c0:28:eb:3e:28:16:af:c5:cb:
                    f8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7D:7A:7B:88:0D:4A:BD:75:6F:E3:36:E2:71:75:43:78:01:B1:7F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2bfe17a1-6264-4734-928e-52be3c701d8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:d5:c0:61:8e:70:2b:eb:1a:f1:14:86:73:00:e9:60:bc:4d:
         cc:b5:9e:16:66:e3:e4:bd:63:fb:4b:26:ae:e3:9f:e4:ec:54:
         1d:37:13:36:7f:5e:40:bd:de:71:68:72:08:6b:fb:3e:cb:de:
         90:19:f3:2e:1c:23:c7:67:69:fb:14:8e:0b:b6:d3:41:03:1d:
         64:1c:ee:8d:bb:0c:a5:2f:d8:06:1e:2b:f7:a0:91:72:e6:e3:
         fa:35:37:d2:1d:4b:d9:3d:2e:ac:de:db:7e:c2:72:90:de:dd:
         69:b3:e2:4f:52:c3:bc:80:8e:22:9c:c2:f1:0e:4a:ec:0c:52:
         19:3f:a2:9b:f4:df:80:36:2f:1a:48:38:35:6b:dd:9b:07:8d:
         01:2c:31:51:56:85:30:af:33:3a:68:03:b8:8b:29:e7:43:ea:
         94:94:e5:90:75:fc:11:52:11:85:9c:d3:3a:dd:de:b4:bf:72:
         55:21:7e:0c:8e:6a:41:1a:da:22:6f:1f:4d:74:a2:82:ae:b5:
         bd:f5:aa:db:e9:45:d1:56:b2:d4:e6:4a:80:6a:2e:54:5b:25:
         ae:83:9f:66:99:9a:af:b8:1e:78:38:18:d2:36:56:d1:6e:87:
         c6:1e:62:6f:a7:b5:b1:9e:9f:65:b0:d1:0b:d6:bf:b7:dc:5b:
         94:c3:cd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----