Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cfdb36b3-b5f8-4c4e-987b-3021242a41b9.roa
File:                     cfdb36b3-b5f8-4c4e-987b-3021242a41b9.roa (raw, json)
Hash identifier:          0UXfwa0RgP0Bj+N7D/s1lVXjGdzICmypcRPl435asC0=
Subject key identifier:   EE:08:5C:CD:50:DD:D3:CB:63:BB:5D:6C:F3:DA:53:95:29:FD:03:D8
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3730363E0956B4838238223826D044929EAF4D04
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cfdb36b3-b5f8-4c4e-987b-3021242a41b9.roa
Signing time:             Thu 18 Jan 2024 00:00:00 +0000
ROA not before:           Thu 18 Jan 2024 00:00:00 +0000
ROA not after:            Thu 22 Feb 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:30:36:3e:09:56:b4:83:82:38:22:38:26:d0:44:92:9e:af:4d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan 18 00:00:00 2024 GMT
            Not After : Feb 22 23:59:59 2024 GMT
        Subject: serialNumber=142bec578a2ca5ae8aaaf4034b76dc5ba306a0341c124e6a1f93029188f2cd7a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f2:7f:59:a0:ac:d9:49:25:a2:09:0d:ef:4d:
                    d7:09:f4:97:4f:95:f1:bd:f2:ef:5e:b0:59:f0:82:
                    00:34:d4:24:86:28:5e:8a:3c:f1:9e:13:79:a6:14:
                    ad:e6:c7:c4:cd:b3:ef:0f:f3:82:af:86:80:26:08:
                    2e:65:ff:4f:05:66:99:a4:d6:27:19:b6:6c:70:68:
                    18:a5:81:3a:ef:54:a2:b0:8a:e8:8f:60:5c:f2:9a:
                    e2:69:08:36:17:f0:7c:2e:c8:88:8f:ba:83:55:7c:
                    23:fa:c2:a6:f7:d5:6f:61:b2:df:b2:f1:07:97:e2:
                    34:8e:ac:f8:d0:59:c4:a0:32:38:04:e3:c0:11:16:
                    bc:0c:e5:65:65:fa:9a:de:f0:c6:b4:ad:ff:97:fd:
                    c4:24:e4:49:df:d7:d0:8d:f6:ed:72:8a:d2:c6:d4:
                    a4:25:6a:92:41:f2:99:f0:ca:6b:07:ac:2f:19:4d:
                    97:b2:ba:b0:95:74:c2:bd:44:70:9a:62:ec:01:22:
                    df:8c:d0:b9:61:3b:36:46:44:ef:66:6a:99:ac:a9:
                    ed:f1:0e:80:69:4a:34:6d:be:bf:7c:63:22:9c:d8:
                    6d:53:68:86:41:4d:c0:0b:0d:91:a4:c4:5a:83:e2:
                    d5:b3:bc:8c:b3:29:76:6d:62:b0:5e:02:3c:90:a0:
                    48:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:08:5C:CD:50:DD:D3:CB:63:BB:5D:6C:F3:DA:53:95:29:FD:03:D8
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cfdb36b3-b5f8-4c4e-987b-3021242a41b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:7c:a0:8f:9e:ad:7b:4f:54:a4:81:90:85:f6:44:51:8a:57:
         3e:aa:56:27:1c:75:37:97:a0:ea:69:b4:cc:07:57:da:9f:3c:
         17:e0:b3:f1:7a:bb:19:0f:8c:4c:1b:fb:75:23:6b:19:07:a8:
         9d:07:a8:4c:d7:6c:dc:87:ee:41:eb:27:e2:50:d5:fa:d5:00:
         de:49:8f:6d:49:50:ba:ed:3e:22:99:12:59:bf:bf:1d:b4:6c:
         df:88:22:db:9c:d5:f8:c6:d5:b3:04:2d:86:62:94:22:08:f3:
         79:9c:e3:cf:05:f2:33:f2:8b:5f:c1:6a:82:73:c2:e1:9c:c3:
         a2:b9:eb:84:46:d8:ce:59:71:44:6e:c6:cd:32:b3:4d:b9:cb:
         cd:f3:0f:84:7e:60:f7:47:2d:0f:3d:10:22:21:f0:51:4d:e7:
         db:27:ce:ce:89:0f:45:73:50:22:1f:a6:5b:eb:5e:5b:9a:eb:
         98:40:5e:6d:79:4f:41:51:fa:c5:70:0e:66:ad:ea:28:b0:c9:
         b1:9a:f5:99:4e:73:9e:98:f2:fc:c9:c3:a7:d7:2d:05:67:d1:
         7a:96:87:a2:9c:d4:d0:19:09:8a:b0:6e:bd:e7:5a:dc:ee:f9:
         38:ed:e5:0a:f1:d9:b9:e5:e4:d3:62:92:5a:f6:9f:0f:d9:2d:
         cd:72:20:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----