Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7129d29-8388-4840-8c65-ec7b96a70bf5.roa
File:                     a7129d29-8388-4840-8c65-ec7b96a70bf5.roa (raw, json)
Hash identifier:          RiQ2UitF7as4ZvvxRlZPYmakrbVERVa7r/J+mV99cSI=
Subject key identifier:   10:DA:34:6D:C4:D2:CA:52:41:4C:69:19:31:E5:34:93:80:76:EB:69
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       68D1596D61BAC46529BFF277912EC1935B4DD454
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7129d29-8388-4840-8c65-ec7b96a70bf5.roa
Signing time:             Wed 12 Jul 2023 00:00:00 +0000
ROA not before:           Wed 12 Jul 2023 00:00:00 +0000
ROA not after:            Wed 16 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d1:59:6d:61:ba:c4:65:29:bf:f2:77:91:2e:c1:93:5b:4d:d4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 12 00:00:00 2023 GMT
            Not After : Aug 16 23:59:59 2023 GMT
        Subject: serialNumber=1fe91588bfcdf1be31d22cc1e98412f2bd3d5c08ff2dd34f8bd79c999f9ceeb7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:d3:85:68:a4:4d:cf:6f:aa:0a:6f:8f:66:
                    65:94:7c:f4:be:c4:ee:b7:49:96:fa:40:8b:08:2a:
                    b6:6e:94:93:84:8e:a1:3e:d1:7a:f3:1d:87:e2:8a:
                    23:c6:56:42:50:18:db:d0:fe:69:a3:21:61:10:48:
                    fc:99:a9:89:3b:a3:f8:84:d3:17:00:91:ef:41:be:
                    5a:95:84:63:50:9d:06:00:30:d4:8d:b2:43:0d:11:
                    57:6e:a3:10:03:ad:ac:c9:62:ae:2e:ee:a9:47:2a:
                    f2:1a:1f:a9:4d:41:1b:7e:54:df:0d:81:ba:40:e4:
                    cf:5e:27:04:0e:7e:0a:df:da:d7:e5:a3:6e:4f:89:
                    39:27:1f:de:63:80:34:33:fa:ec:7a:6b:cd:17:c2:
                    aa:ea:34:09:8d:79:52:40:9a:8b:b1:e2:a3:0f:a1:
                    ef:d4:07:ed:98:20:a2:ae:66:15:e4:d5:b3:ec:19:
                    d8:5a:3a:73:5b:4e:13:b1:d4:b5:0b:3c:cb:ff:a4:
                    27:7c:90:42:fc:48:21:8f:3f:3c:15:d9:e8:08:a6:
                    8d:d1:81:6e:14:3b:9b:59:36:3e:65:a9:4d:6c:17:
                    5a:b1:ef:e7:e4:d4:21:8b:53:71:02:3b:9f:95:58:
                    42:fd:f5:b5:a8:de:da:46:77:7e:4b:e6:e0:8c:18:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DA:34:6D:C4:D2:CA:52:41:4C:69:19:31:E5:34:93:80:76:EB:69
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7129d29-8388-4840-8c65-ec7b96a70bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:eb:bb:aa:c7:c1:38:68:73:ea:42:7f:ef:96:aa:33:1f:d4:
         a7:e2:01:95:d9:38:e7:29:a3:f3:4c:35:86:c7:a9:db:c8:82:
         b1:b8:34:42:84:38:0a:34:1d:6b:33:a2:9e:01:ea:07:07:06:
         05:fe:d0:27:bd:fc:9c:39:91:f4:09:ce:c4:fa:63:3b:97:e1:
         5f:a2:07:81:4f:f3:e9:a6:c3:d8:ac:9e:5f:e7:15:61:86:cb:
         8e:fa:9c:8b:09:b6:aa:97:0f:8f:c0:03:ba:14:ef:dc:e3:6f:
         2f:d9:30:8c:26:f2:3f:2e:23:62:4d:f7:81:e6:92:46:1e:dc:
         0e:12:5a:a0:33:d9:a6:c0:cf:28:34:dd:06:2b:cb:85:7e:7e:
         ef:cd:26:bf:45:7f:0d:6a:72:8c:7f:db:a7:43:d9:81:52:fa:
         f2:fe:a6:16:8d:7b:ec:14:07:cf:29:e5:60:f2:8c:ca:e4:1a:
         54:96:08:74:f2:94:52:73:f9:d7:24:a0:67:46:3e:02:e6:7b:
         c0:18:db:e1:c9:a9:e0:f8:70:86:31:a3:04:48:5a:8f:25:3e:
         f6:36:30:14:65:d5:92:fa:23:a3:45:25:c4:4b:b5:b2:f2:d5:
         44:1a:9a:3c:84:39:4a:24:ca:ef:80:bd:db:53:87:30:c8:c6:
         dc:5b:68:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----