Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/86db373d-eb63-4392-82ab-1a9baa9e2c38.roa
File:                     86db373d-eb63-4392-82ab-1a9baa9e2c38.roa (raw, json)
Hash identifier:          xDn+fDeljFSrrbg/MuZ6TB/o7y5t0jz4EYGak2jX/X4=
Subject key identifier:   72:6D:C5:B3:D8:8C:4A:B3:AD:99:F8:BB:89:12:01:75:52:F5:AA:A2
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       06797A695C7305F42FAF1C99B9330C7044164BED
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/86db373d-eb63-4392-82ab-1a9baa9e2c38.roa
Signing time:             Wed 22 Nov 2023 00:00:00 +0000
ROA not before:           Wed 22 Nov 2023 00:00:00 +0000
ROA not after:            Wed 27 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:79:7a:69:5c:73:05:f4:2f:af:1c:99:b9:33:0c:70:44:16:4b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 22 00:00:00 2023 GMT
            Not After : Dec 27 23:59:59 2023 GMT
        Subject: serialNumber=76bfda0259fd40a393990c3f9032152c8603238e8048629c6b92a17619b78579, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e6:9d:9a:60:7b:05:f3:9a:96:da:30:71:e7:
                    6e:de:92:f5:28:1c:a7:70:a7:31:c3:29:b7:61:e0:
                    d2:cd:5c:6c:a1:0d:32:a5:0b:c1:ca:76:67:a1:97:
                    d8:c2:8c:8b:d0:d3:e9:fb:de:33:17:af:57:be:6e:
                    1c:b9:35:e1:7f:c7:3c:f5:2e:22:12:31:51:3f:3e:
                    a4:32:23:08:6f:56:de:aa:d1:48:00:66:b5:6e:72:
                    e5:d2:ed:3d:a5:2d:94:86:4f:36:c7:70:1b:3e:ab:
                    33:f0:76:85:b7:1e:6d:08:fe:1d:82:82:03:77:76:
                    e2:96:c3:5a:fe:af:2d:a2:a8:37:5f:74:9b:58:60:
                    ea:65:39:03:c8:60:91:7d:a4:6f:1a:e8:26:f6:6d:
                    52:c8:97:6b:d1:32:ce:9f:67:b1:a2:83:41:1d:69:
                    f4:3b:9c:e7:87:4f:9d:86:35:b2:cd:1c:10:36:10:
                    4e:65:97:e7:fc:11:60:4a:a3:c1:a5:3c:5a:3b:61:
                    f4:7f:a6:a6:08:af:18:43:d2:0e:f1:fd:ad:9e:7d:
                    fb:5b:00:e0:df:4a:a7:9a:74:8a:73:b8:8d:14:31:
                    94:cf:1f:16:1a:91:4f:72:f8:94:5d:93:eb:e3:35:
                    08:34:c8:6e:ef:28:e4:fa:67:73:8f:a3:0e:f4:a3:
                    39:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6D:C5:B3:D8:8C:4A:B3:AD:99:F8:BB:89:12:01:75:52:F5:AA:A2
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/86db373d-eb63-4392-82ab-1a9baa9e2c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:bd:eb:d9:02:3e:87:d0:28:69:c8:a6:d2:dc:76:c1:dc:72:
         b3:d5:91:30:77:69:0e:dc:36:60:9e:bb:09:37:3e:27:78:4d:
         c5:d8:57:7e:fe:e0:48:7f:4e:f1:55:2e:c8:ba:4c:13:5b:65:
         2c:12:ae:2a:e4:de:68:86:aa:53:c0:58:7b:9b:bd:b0:56:0c:
         2d:76:22:97:f4:17:b5:9b:ca:b5:4e:72:8f:5c:7c:13:92:83:
         80:46:c9:87:49:84:51:28:46:a6:f7:18:88:07:76:7b:77:d0:
         15:b2:a8:6f:80:25:27:90:8b:a8:96:91:9f:eb:83:9d:4d:2d:
         4a:50:df:f9:8a:0c:97:b2:2b:a4:42:ce:8b:af:73:5e:fe:17:
         62:5d:cf:8f:f3:35:08:b8:9b:71:d0:f7:98:92:ca:47:b8:0f:
         5b:bf:e7:8a:c0:48:3b:fa:91:13:82:60:94:4f:a8:e9:26:ba:
         6a:ac:b8:6c:66:89:0b:49:37:f0:64:5e:d5:a4:45:74:86:97:
         b3:a9:5d:3a:b7:4c:1d:ba:58:47:1d:56:16:ad:6f:cb:e2:cf:
         57:0f:89:9e:12:0f:17:7a:3a:d2:79:84:a1:ef:38:b9:ee:ed:
         1a:fc:f9:df:84:fa:12:1c:0f:40:b4:c8:39:54:be:49:7f:dd:
         50:4c:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----