Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/461e53f4-846a-4b2e-922a-b6d48d584d67.roa
File:                     461e53f4-846a-4b2e-922a-b6d48d584d67.roa (raw, json)
Hash identifier:          L6EUv/CZWK6+YBKQDkzSzmkZt1obDLPUtgULbx9DY+o=
Subject key identifier:   34:9D:77:63:99:F1:DE:B3:5B:10:25:C9:7E:A6:8D:F2:68:07:1C:65
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5E106CFC6B7D02F92E65987C6FDDFAB3D44C2EE6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/461e53f4-846a-4b2e-922a-b6d48d584d67.roa
Signing time:             Fri 28 Jul 2023 00:00:00 +0000
ROA not before:           Fri 28 Jul 2023 00:00:00 +0000
ROA not after:            Fri 01 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:10:6c:fc:6b:7d:02:f9:2e:65:98:7c:6f:dd:fa:b3:d4:4c:2e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 28 00:00:00 2023 GMT
            Not After : Sep  1 23:59:59 2023 GMT
        Subject: serialNumber=2f13e05e7b5f89f94a6c704239441d4c51999aa9211125c1f4e20a954084ce9f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8e:55:7d:a8:f9:28:3a:33:e2:ad:22:ae:58:
                    b5:b1:af:dd:d3:5f:5f:73:e7:4f:26:7d:68:9b:9a:
                    0a:66:f4:ba:d6:8a:48:34:23:2a:ec:52:c9:1a:cd:
                    ac:e7:00:df:84:6c:a2:0b:e2:93:3d:88:18:88:8a:
                    a7:b9:35:7d:89:7e:50:d3:9a:7e:a3:3f:c2:fe:ab:
                    b3:28:56:61:c5:c6:18:52:87:71:46:ba:6c:f3:bc:
                    bc:24:2d:c6:25:e8:67:d7:86:21:b2:c2:f8:1f:39:
                    4e:4a:48:ce:56:30:3a:cf:67:9a:71:2d:89:98:9f:
                    67:f7:be:26:a8:a0:02:9f:ec:4e:84:89:48:c2:60:
                    1f:7c:f5:5e:0e:e8:32:2b:41:2c:77:91:3d:61:59:
                    f3:84:ff:e4:0e:d0:7b:aa:58:de:3b:ca:7d:a4:e6:
                    95:28:68:be:36:70:86:ed:76:24:84:7c:31:d0:1e:
                    cf:37:2d:97:7f:3b:c8:ac:4a:7f:74:2f:94:a0:1e:
                    3f:be:12:ed:41:f6:6a:77:de:a3:08:a2:6d:cb:a7:
                    11:b5:6f:d1:ad:da:31:9b:63:9b:61:a0:83:be:25:
                    f6:dc:d7:24:81:d5:ac:f6:95:18:61:3b:a6:02:f5:
                    23:00:a1:b5:a5:2a:de:42:b7:33:a2:e6:1b:2c:fb:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9D:77:63:99:F1:DE:B3:5B:10:25:C9:7E:A6:8D:F2:68:07:1C:65
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/461e53f4-846a-4b2e-922a-b6d48d584d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:ee:f9:42:1c:18:ba:d4:80:99:0b:c5:28:20:d8:a4:28:f1:
         96:c2:b7:fe:26:42:51:52:ce:70:29:6e:2c:f7:99:fd:e7:25:
         94:64:5c:d9:22:a0:49:e8:5d:55:52:b0:00:49:c5:76:fc:73:
         0a:d9:35:72:00:f6:82:24:b2:8c:67:87:cd:e9:26:14:89:1e:
         ae:82:4b:5b:ee:c7:7e:3f:30:15:88:f6:fb:91:de:89:ea:c8:
         a1:73:15:c3:73:a6:63:54:42:40:f4:0b:56:f6:60:70:eb:55:
         37:80:4e:b7:d8:7d:aa:fb:06:91:3d:33:26:5c:f6:a8:f3:73:
         aa:d0:d2:83:fa:4f:2d:07:fd:d0:18:ce:7a:6d:42:34:0c:bd:
         8d:98:71:a0:ad:65:27:59:55:c1:7b:f3:8f:71:95:3c:6e:1f:
         3f:1d:88:0e:ca:f8:26:f3:39:01:a1:d5:a7:fc:71:c1:b1:a6:
         a3:42:12:e3:c2:a7:a6:12:d4:f7:ec:9f:bc:c1:eb:39:79:44:
         74:b9:44:fc:2b:d2:26:49:6b:33:42:f7:9e:ca:e0:ec:11:ce:
         ee:a3:f9:53:ac:40:8d:c1:f2:c4:95:f6:96:58:a4:36:80:bc:
         bf:46:75:e5:fd:05:9e:06:9e:40:18:29:da:f2:70:b4:9b:40:
         8d:6a:f2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----