Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6f8a1136-2fd1-4269-b66a-f95e38ef4252.roa
File:                     6f8a1136-2fd1-4269-b66a-f95e38ef4252.roa (raw, json)
Hash identifier:          l1hwr/dFYAhybOEIt2HWgKS4nBq2+Vm7xMnLwb6PdOc=
Subject key identifier:   13:F3:72:EB:8A:41:16:24:64:B0:84:7F:59:55:66:0B:E4:50:EF:42
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6AEEDCF74FB561F8B6C36259ADFA839C54DFA7CD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6f8a1136-2fd1-4269-b66a-f95e38ef4252.roa
Signing time:             Sun 08 Oct 2023 00:00:00 +0000
ROA not before:           Sun 08 Oct 2023 00:00:00 +0000
ROA not after:            Sun 12 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ee:dc:f7:4f:b5:61:f8:b6:c3:62:59:ad:fa:83:9c:54:df:a7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct  8 00:00:00 2023 GMT
            Not After : Nov 12 23:59:59 2023 GMT
        Subject: serialNumber=141691d7c0e4942b34be6450ee1c89f803393684763dcd3a706c6513cb71f97d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:49:84:bf:74:88:c9:48:75:bb:d0:d4:fa:
                    1e:8e:3f:5d:84:9b:30:cc:3f:1f:a4:b6:d3:3e:41:
                    bb:94:2f:77:ad:ff:47:96:a9:6d:4b:38:fa:3e:fb:
                    55:7a:f4:51:88:6c:8a:88:ff:ef:e0:a0:1a:ed:35:
                    d9:90:49:73:d5:ca:d5:91:92:9e:cd:93:69:4f:e2:
                    9f:c0:22:68:4e:97:30:f1:15:16:8a:8f:3d:2d:1c:
                    4b:b5:fb:cc:02:b4:08:98:d5:aa:ed:fd:93:6d:cb:
                    40:89:d1:ce:ce:2f:a5:fe:fb:bf:af:70:4a:13:db:
                    b1:39:be:59:f8:80:b4:60:8d:7a:03:3c:c7:0e:67:
                    e6:b1:e3:35:44:95:d5:7d:31:ea:56:a9:bb:73:06:
                    0c:2d:81:53:e8:6e:6c:96:35:ca:b8:e1:b1:35:0d:
                    74:34:67:79:bc:26:4f:a9:62:e0:43:f5:ab:1c:f0:
                    7e:a8:6d:55:dc:e8:fc:46:2f:8d:8e:b7:f9:d3:2a:
                    c3:ce:b4:66:56:32:b9:56:fd:1d:a4:c2:9f:9e:1b:
                    bf:1b:83:35:67:0c:93:f7:77:f0:2b:e5:28:40:4e:
                    99:8c:ff:70:8d:13:8d:75:31:25:55:a4:0e:e0:1b:
                    ea:99:10:b5:18:6f:2c:0c:f1:eb:d5:61:11:3a:6b:
                    72:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F3:72:EB:8A:41:16:24:64:B0:84:7F:59:55:66:0B:E4:50:EF:42
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6f8a1136-2fd1-4269-b66a-f95e38ef4252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:54:61:e8:14:6c:3b:cf:c8:b9:b9:22:3c:55:9e:5f:2e:dd:
         43:cd:0b:af:aa:60:ed:62:97:7d:47:6e:2e:34:c0:fe:63:08:
         63:0c:3a:e7:20:0c:0b:88:0a:7d:d9:4c:07:8c:f9:4b:bf:08:
         cf:92:a3:1b:af:c1:39:0c:49:ba:84:fa:88:c4:56:40:c1:a1:
         e2:2f:53:1f:93:96:97:b5:ab:c9:8b:0f:2e:d2:a7:32:f5:e9:
         71:ee:0c:31:e7:af:e4:38:90:c4:7f:9e:1b:51:11:46:d0:4f:
         17:ff:9a:dd:0c:53:a4:13:e3:bf:6a:ce:b3:b4:a9:21:8c:f5:
         81:fe:c1:b7:3d:65:41:60:f0:0c:e8:97:2e:b6:fc:fd:cf:9a:
         2f:2b:0b:43:5b:04:3b:a2:86:90:10:ab:e2:83:42:eb:32:25:
         cc:35:6e:d6:fc:ed:79:94:94:82:0b:5a:82:2f:b5:86:6d:88:
         97:af:ac:5d:dc:fc:21:9d:76:79:10:2c:3a:49:48:a5:3c:f6:
         55:2c:5d:f6:95:35:ae:b6:ed:4b:33:3d:ee:03:b3:4c:be:23:
         2b:72:72:96:76:91:17:ac:2b:3c:47:de:52:ff:7b:57:d0:53:
         ea:8c:a4:0e:a9:ae:17:13:4b:45:d9:56:55:e8:aa:ae:03:47:
         bc:f5:79:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----