Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a84ff59-4358-4682-a255-7e7222fb6b48.roa
File:                     6a84ff59-4358-4682-a255-7e7222fb6b48.roa (raw, json)
Hash identifier:          dofxPDTTOW6T5ocnKmAlKU6E27ZYfwZnO2hpW9gu57A=
Subject key identifier:   4D:C0:C3:C3:8C:DF:96:E9:59:DA:73:FC:DB:6C:1C:D9:F4:BC:C8:82
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       101C02884EC22566C4133E79A88B1004B29D54A5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a84ff59-4358-4682-a255-7e7222fb6b48.roa
Signing time:             Sat 12 Aug 2023 00:00:00 +0000
ROA not before:           Sat 12 Aug 2023 00:00:00 +0000
ROA not after:            Sat 16 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1c:02:88:4e:c2:25:66:c4:13:3e:79:a8:8b:10:04:b2:9d:54:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 12 00:00:00 2023 GMT
            Not After : Sep 16 23:59:59 2023 GMT
        Subject: serialNumber=840b5be824a5f268e8acc5fef49d0764540721a64df9ba1a6396ecca42594121, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:48:9e:c9:16:78:e8:04:70:7a:62:77:33:
                    d1:74:0c:5b:4f:5e:f7:af:a0:cf:0b:f7:2f:b8:62:
                    5f:98:d4:4d:10:a5:58:61:73:21:92:38:d4:e4:c9:
                    dc:1d:78:76:72:57:3c:f3:b8:34:e7:05:ff:1a:0d:
                    d9:b3:8b:e1:2b:51:d8:c5:c8:cd:18:fa:01:e7:77:
                    ee:12:71:b8:dc:87:d8:04:90:a1:57:00:6c:74:73:
                    49:5e:28:cc:ab:8b:df:0b:dd:58:11:b1:32:84:c0:
                    8d:a5:df:58:ae:2f:c4:a8:2e:bc:51:77:8b:eb:89:
                    e7:ac:00:18:29:5e:73:88:99:e3:8f:19:20:cb:95:
                    66:f7:3f:6f:7c:c8:39:0d:53:69:8e:17:07:d7:5a:
                    f1:43:0e:1c:b1:bd:c5:5d:9c:63:dc:45:18:f3:92:
                    7a:d5:e8:44:77:af:3a:09:4d:8d:ff:a6:02:5c:a4:
                    61:39:3d:28:0f:c3:a9:02:9e:24:c5:67:35:7d:b5:
                    0b:b9:11:6f:d4:04:80:ae:c9:19:58:f8:7a:90:93:
                    5a:6b:bb:7d:b6:ba:28:01:0c:d3:24:4f:47:b7:72:
                    76:38:e1:64:da:b7:79:59:9e:38:b2:d7:df:af:1a:
                    16:a1:84:01:f8:f2:a7:84:cd:aa:42:ff:ee:ea:7a:
                    b4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C0:C3:C3:8C:DF:96:E9:59:DA:73:FC:DB:6C:1C:D9:F4:BC:C8:82
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a84ff59-4358-4682-a255-7e7222fb6b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:54:d8:cc:58:24:3e:10:33:d8:b9:59:37:0a:86:73:c0:01:
         5e:b4:24:ea:1b:e2:ed:ac:89:f0:3c:6e:b1:8d:b3:47:88:9a:
         aa:cd:bd:37:58:73:eb:8b:00:96:b5:cd:b7:86:b4:9d:b7:fa:
         e9:c1:5e:15:cc:68:b6:cd:d2:4e:ef:99:c2:9d:42:70:61:f4:
         b6:d5:b9:c4:01:28:56:8f:be:d3:e9:87:fe:f1:b8:49:f6:de:
         b1:bd:0b:e1:69:0f:1f:85:fa:e2:47:3f:14:ca:1d:26:73:11:
         d3:21:a8:d7:b6:39:33:03:22:f6:b0:ae:dd:83:63:d9:79:98:
         4f:77:ea:f5:6f:e4:88:8a:75:cb:67:0c:cf:5d:34:79:6e:38:
         26:ee:6c:e0:dc:74:51:72:3f:01:04:95:32:68:a6:e5:7a:1b:
         11:d7:da:af:4a:ee:a5:6b:63:00:71:85:71:3f:42:f8:39:4f:
         ba:f7:81:91:36:2d:de:0f:66:4b:a8:08:b0:be:f0:22:c0:24:
         78:76:ca:52:ec:b8:12:1c:69:ea:c7:18:a6:84:0c:ff:3a:01:
         0a:54:14:6e:39:27:62:cf:12:a4:d7:35:8d:06:fb:85:df:3d:
         67:80:9d:d2:3a:73:ec:e6:9a:83:4d:41:5a:ff:60:6d:a6:ef:
         d5:66:70:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----