Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8887c0d5-9a99-43c5-9186-baf4a59bb278.roa
File:                     8887c0d5-9a99-43c5-9186-baf4a59bb278.roa (raw, json)
Hash identifier:          Bz4cfHPlzzs7Wza9X/Xq+AH3SwsmEsiGKEkcPiOPM/E=
Subject key identifier:   3A:57:88:A8:35:11:B7:B4:97:72:0E:7D:8A:50:E1:99:5E:4C:17:3A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0C15DC6875F39E0D4913CE275E6DC43B9E2A3BC7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8887c0d5-9a99-43c5-9186-baf4a59bb278.roa
Signing time:             Tue 14 Nov 2023 00:00:00 +0000
ROA not before:           Tue 14 Nov 2023 00:00:00 +0000
ROA not after:            Tue 19 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:15:dc:68:75:f3:9e:0d:49:13:ce:27:5e:6d:c4:3b:9e:2a:3b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 14 00:00:00 2023 GMT
            Not After : Dec 19 23:59:59 2023 GMT
        Subject: serialNumber=20ce3ae638c3c4567a7d637073ee563eb6612bd73b3870d1288cb9126a944b2b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:04:de:1e:49:1d:47:7a:27:2d:c2:de:3f:
                    6c:25:1b:39:fe:f4:09:4c:52:c7:a6:d4:8e:ec:5e:
                    9b:42:da:fc:04:ad:db:08:56:a6:3a:72:3b:b4:bd:
                    56:c5:81:cb:42:f4:74:09:ce:f6:07:c8:0d:08:a3:
                    6e:45:36:f6:ab:20:16:1f:5f:5f:31:6c:82:b0:d1:
                    cf:24:8f:99:1d:21:a0:f6:9b:4f:48:49:38:f7:a3:
                    45:24:c2:a6:11:3d:f3:1d:29:0a:68:25:fa:ce:8e:
                    c0:8b:e7:43:76:2d:63:1c:84:80:0f:f2:36:0b:d5:
                    47:7c:9c:7c:fd:1b:6a:25:d5:bc:63:8d:84:7a:a2:
                    b4:04:aa:26:85:cd:d2:f3:75:17:77:ac:b0:69:dd:
                    4f:8c:22:ad:21:68:09:00:df:21:ec:e8:94:f4:a0:
                    96:aa:75:a1:5e:07:f6:b7:e2:4c:7d:72:44:af:84:
                    5e:3f:85:de:a1:b3:76:a1:75:a0:80:b6:24:84:bd:
                    47:ab:7a:0e:f8:54:af:ca:93:e0:7d:c5:a9:bd:73:
                    9a:1c:38:fa:ed:4b:da:c0:c0:3d:e6:bf:0e:db:52:
                    b1:01:81:76:9a:c0:ea:57:0f:21:70:fe:14:e6:80:
                    d4:06:bd:30:26:fd:1b:da:6a:22:11:74:29:41:e1:
                    2b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:57:88:A8:35:11:B7:B4:97:72:0E:7D:8A:50:E1:99:5E:4C:17:3A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8887c0d5-9a99-43c5-9186-baf4a59bb278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:7e:9f:a0:04:b0:59:16:c8:1a:dd:18:97:7f:76:05:f6:a0:
         af:a1:4c:23:89:10:72:3e:b4:72:24:42:98:a4:85:a8:c0:ed:
         32:ce:d8:92:87:a2:15:a5:21:ea:50:7b:b7:fe:de:b6:fd:3a:
         45:0b:f4:21:14:39:48:31:0a:73:f5:95:c5:88:da:8f:46:03:
         fe:4a:d0:77:9e:eb:a2:39:8a:86:2d:82:3d:22:f6:a6:de:8c:
         d5:24:b7:e4:ad:30:9e:0a:c8:fc:45:c0:8b:63:ba:a3:ba:62:
         7d:ea:4b:b4:c3:ed:16:ca:db:12:8f:9c:2e:03:1f:74:c0:ae:
         41:2e:e7:92:07:b7:73:ba:cf:1b:3c:fe:e8:88:2f:ea:62:7e:
         ec:fd:5f:2d:12:0b:69:6b:49:ca:2c:83:86:0c:34:ea:93:c9:
         30:11:d4:96:52:46:62:85:7f:04:0c:97:b5:0a:ca:aa:fa:96:
         6b:e8:b8:42:bf:3c:65:78:e7:1f:b5:35:1e:ed:90:c7:96:43:
         49:5d:1d:78:66:b3:47:cd:0c:9c:fc:8e:ef:1e:32:79:fd:02:
         1d:c8:8b:cc:18:21:12:5e:6d:d3:6e:e2:f1:1c:bc:98:c5:97:
         49:d1:66:ce:e0:5d:62:7d:92:36:ce:43:cb:69:34:db:33:cb:
         6e:6e:ef:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----