Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/af234740-e546-4dbe-8d0e-0ae7ecff2e90.roa
File:                     af234740-e546-4dbe-8d0e-0ae7ecff2e90.roa (raw, json)
Hash identifier:          6C7bicqQCCYR/JpiMrWHExpU0TOYguQMOwohYnTBlHU=
Subject key identifier:   9E:7B:56:43:58:6F:63:18:F8:90:6F:68:C2:EB:B0:24:A6:9A:66:81
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       10F51D9D109B4D557AB40EC29D1E32D3DBE5E11E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/af234740-e546-4dbe-8d0e-0ae7ecff2e90.roa
Signing time:             Mon 19 Jun 2023 00:00:00 +0000
ROA not before:           Mon 19 Jun 2023 00:00:00 +0000
ROA not after:            Mon 24 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f5:1d:9d:10:9b:4d:55:7a:b4:0e:c2:9d:1e:32:d3:db:e5:e1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 19 00:00:00 2023 GMT
            Not After : Jul 24 23:59:59 2023 GMT
        Subject: serialNumber=6557db95ea4154170186d46e1ef3befdd674e16f559afe1481e90fb716a8a740, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a0:78:9a:18:ee:c3:c1:4a:97:8b:bd:61:fd:
                    a6:fc:e6:c1:c9:66:43:ac:fe:58:fb:62:ec:ea:63:
                    c1:cb:83:a5:31:ce:49:5a:11:38:ca:4e:0f:59:98:
                    2e:7c:04:d3:22:2f:67:76:f5:45:ee:ea:42:ec:4e:
                    35:f2:f7:65:0d:64:14:90:0f:9c:08:c7:92:c9:a2:
                    41:ba:d1:98:d6:fe:4b:9e:b9:6f:72:ce:49:99:dd:
                    53:65:cf:a0:98:03:66:e6:47:2f:76:0c:70:56:7b:
                    9a:6f:a3:71:61:23:84:19:13:06:ee:4d:46:8b:e0:
                    b8:ca:a7:f4:28:08:94:dc:e1:37:0e:ce:70:15:fb:
                    13:71:d1:22:c9:f9:33:de:c6:d7:79:00:e2:96:1c:
                    ca:49:66:c9:55:58:c0:c4:6e:4f:1b:d4:7b:c3:a9:
                    1c:71:ba:dd:7c:80:e1:e2:38:d6:8a:9c:3d:da:57:
                    3e:68:da:66:b9:6f:e9:fc:97:3f:3c:e2:ad:0f:7d:
                    d5:ad:3c:58:a1:73:cd:56:e4:51:f6:3f:1c:23:91:
                    9f:10:d9:18:cd:2e:17:bd:0f:d0:ad:7f:77:d4:ea:
                    ac:f9:94:ea:cf:a9:d5:c7:cd:54:96:e4:9c:06:17:
                    19:22:d2:1f:1a:ec:d4:73:f4:ca:4a:f2:bc:51:e6:
                    d8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7B:56:43:58:6F:63:18:F8:90:6F:68:C2:EB:B0:24:A6:9A:66:81
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/af234740-e546-4dbe-8d0e-0ae7ecff2e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:68:68:12:60:f8:c4:fb:7a:cf:20:ce:87:5c:0c:69:d1:e6:
         2b:e4:90:5a:b3:fd:ec:81:de:68:d7:80:d0:4c:62:47:f0:5c:
         c8:cb:a8:36:56:b2:4d:2d:d2:dd:cd:7e:9a:cd:a9:81:6d:6a:
         53:13:0d:5f:0d:41:46:af:de:9f:0a:04:52:54:a8:cf:85:1b:
         85:e8:23:d1:78:a2:84:da:68:c2:bb:00:d9:df:8d:29:30:aa:
         49:f8:f2:49:31:69:9d:d7:76:6b:e2:8f:7c:4b:96:d2:65:66:
         3c:6d:61:c1:57:20:fc:a3:64:54:3a:e7:3f:86:ad:08:a9:98:
         b0:93:e6:c5:13:80:d2:eb:c2:20:9a:8b:b2:46:2e:46:46:11:
         45:42:e1:4c:70:a5:ed:0e:b5:ab:8c:f6:ea:61:78:a5:d7:5f:
         f1:06:69:51:1e:b3:f3:c0:24:6e:4b:a4:c4:5b:5b:e9:e2:68:
         44:66:df:73:39:1c:58:4c:dc:6b:40:b8:93:3b:61:23:1b:cb:
         7f:d6:40:fa:f7:cc:99:c5:9a:97:c0:9b:34:77:aa:ac:8e:67:
         ea:ad:73:08:82:13:fa:a7:a1:e5:5b:be:73:c8:6a:94:f2:c0:
         fa:95:12:62:b0:48:fe:ed:a3:1b:de:df:fd:52:ea:74:0d:86:
         eb:dd:18:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----