Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/39d3dfac-bca3-4aa0-a027-062c17bc2687.roa
File:                     39d3dfac-bca3-4aa0-a027-062c17bc2687.roa (raw, json)
Hash identifier:          bSvVjHVUge0cLjV8Jq0ciD6eHkrwPo3zesczsnDSweE=
Subject key identifier:   FC:E9:D3:1A:70:0C:32:9D:D7:43:1B:A4:A2:22:A3:6F:AC:46:FA:94
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3E0D31DD8F2307BAFA40A22447B095E179172FCE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/39d3dfac-bca3-4aa0-a027-062c17bc2687.roa
Signing time:             Thu 21 Dec 2023 00:00:00 +0000
ROA not before:           Thu 21 Dec 2023 00:00:00 +0000
ROA not after:            Thu 25 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0d:31:dd:8f:23:07:ba:fa:40:a2:24:47:b0:95:e1:79:17:2f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 21 00:00:00 2023 GMT
            Not After : Jan 25 23:59:59 2024 GMT
        Subject: serialNumber=328918596e6df79c7a2f413d4106f3b37b03796134854eddf2c02eaa93a98e47, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:37:9d:2d:3c:c5:6d:24:36:b2:88:cd:79:3b:
                    46:ae:83:14:d2:7e:c8:9e:c2:b7:46:74:26:6f:96:
                    f6:fb:67:d3:54:0c:a8:4a:27:19:46:e6:6b:0f:02:
                    63:55:86:01:cd:1f:53:a8:4e:d9:bc:d2:bf:5c:5e:
                    0a:b4:06:16:39:0c:d4:eb:bf:01:c8:30:28:db:42:
                    fe:67:74:18:53:71:65:eb:47:4c:1a:e6:f7:1a:39:
                    c2:a4:a8:fc:b0:33:ee:e3:9f:f7:9a:49:a2:ef:5a:
                    b8:6d:3d:7f:97:3e:5f:5b:0a:13:8a:51:04:2a:8e:
                    a0:c2:f0:37:ca:79:91:b3:17:8d:14:75:fc:e5:ed:
                    7e:45:ff:b6:1b:de:46:14:47:d4:cb:85:f8:fe:8c:
                    9d:0a:c2:c0:11:01:18:89:3d:11:5a:75:9d:b7:5b:
                    fd:44:26:f0:2e:80:57:e5:2a:21:cb:58:d0:e0:d5:
                    19:9a:81:ca:d4:94:4d:5e:f0:d5:a3:3d:ae:c8:7f:
                    14:a3:f3:92:49:61:c7:59:d4:bd:3b:ba:50:80:a4:
                    1c:83:34:0e:93:94:61:6c:e4:c5:ab:64:4d:01:2f:
                    aa:86:1a:60:a7:9e:ec:3c:0d:c6:e7:3b:3f:e1:ba:
                    6e:da:46:c0:de:92:50:1c:7a:33:9c:b5:7d:b5:1c:
                    62:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E9:D3:1A:70:0C:32:9D:D7:43:1B:A4:A2:22:A3:6F:AC:46:FA:94
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/39d3dfac-bca3-4aa0-a027-062c17bc2687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:0b:30:f9:7b:bd:3e:45:9e:20:33:c5:79:e1:bf:cd:e6:df:
         0e:7e:d8:00:ca:b6:95:29:e2:31:f1:d8:1c:29:00:7e:c2:aa:
         0d:9f:86:51:95:64:0f:62:ef:37:c9:e4:f6:c5:20:24:bb:6b:
         ba:fa:8a:f7:fe:91:77:0d:5f:b3:6a:2a:12:2c:44:f1:e3:0b:
         a3:98:4e:8b:ac:e2:2d:7d:cc:f9:3b:bb:5c:bf:78:f2:08:40:
         75:76:97:c6:03:ba:e1:73:15:50:2a:24:62:d3:b7:22:09:6b:
         5b:46:52:70:fd:90:42:28:16:1d:9d:1a:24:73:23:ec:e1:57:
         10:8e:46:c4:66:94:e3:01:cc:d2:09:ee:fc:7a:ad:76:e7:8a:
         22:39:75:61:3e:e0:23:14:d7:ae:3e:7e:f5:e2:aa:95:89:5c:
         7f:cf:b8:48:c4:7a:bb:56:99:5b:3b:ef:c3:ff:9b:f2:5a:10:
         93:44:3e:7e:66:f7:12:58:14:42:5b:86:04:34:e5:77:cc:6e:
         62:46:4e:0c:9c:e8:28:6c:c5:d7:4e:d5:c7:ca:42:4d:76:db:
         7a:0a:e1:90:fa:c1:60:aa:dc:8c:ac:bf:7a:f6:95:f7:93:c8:
         4c:a3:8e:ae:89:eb:d5:74:32:7c:8d:29:4f:58:a0:52:ac:c8:
         05:4a:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----