Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d2628c82-3cec-4dc5-afee-6f6966b9ec70.roa
File:                     d2628c82-3cec-4dc5-afee-6f6966b9ec70.roa (raw, json)
Hash identifier:          w7DLHToOBBOH1KmnOi7XG0U3Alv/3OublxThgLqBw1U=
Subject key identifier:   DE:A9:78:62:D4:AE:51:E5:C2:56:E9:8E:C1:59:B9:45:0C:2F:C7:B3
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4EEF0D6F9F5550D80C4ADEB732CCB0392EB5CF3F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d2628c82-3cec-4dc5-afee-6f6966b9ec70.roa
Signing time:             Sat 14 Oct 2023 00:00:00 +0000
ROA not before:           Sat 14 Oct 2023 00:00:00 +0000
ROA not after:            Sat 18 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ef:0d:6f:9f:55:50:d8:0c:4a:de:b7:32:cc:b0:39:2e:b5:cf:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 14 00:00:00 2023 GMT
            Not After : Nov 18 23:59:59 2023 GMT
        Subject: serialNumber=e84e15c8a2feb80ced9416fa09b4eb83c3c3b1b529c6d0425ba96451982f29c4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:b1:5d:ca:ff:b0:65:98:a1:7a:17:95:24:
                    5e:e1:a1:94:80:7f:94:56:24:ae:c7:f3:50:e8:3c:
                    47:06:02:16:eb:4e:3c:35:80:8d:9d:f9:f4:88:8b:
                    9a:1a:1e:e1:e5:11:b3:42:fa:0e:9e:c7:d6:83:78:
                    19:39:8b:44:3f:5f:c5:2f:18:f1:15:75:bc:20:06:
                    6f:ed:69:6b:37:69:af:1a:f3:64:5b:cd:cc:dd:44:
                    cc:00:13:b3:b7:4a:21:fc:65:0e:64:04:4e:ec:68:
                    13:6d:11:7d:d7:19:23:c6:ca:b3:d8:fb:ed:97:7b:
                    e3:f4:cd:70:f8:a8:f5:e2:d6:d2:1f:59:0d:bb:fd:
                    bc:37:05:02:57:71:ad:e7:fa:06:42:97:9a:38:d8:
                    dc:c9:86:13:fb:29:28:45:c2:88:7b:31:28:34:01:
                    38:1f:39:ec:7f:b6:85:a6:90:3c:9a:8d:7e:31:cb:
                    d9:eb:b8:63:15:67:67:65:17:52:fb:92:40:47:6b:
                    53:b6:cd:60:c3:a3:bf:03:a6:dd:9c:f1:09:75:90:
                    14:ae:dd:63:e5:b2:18:41:79:3a:d1:1e:53:0a:7a:
                    9f:b3:b2:f3:e4:06:fb:76:03:39:ed:9d:b9:70:63:
                    b4:bc:17:17:86:65:08:ed:f3:3f:91:56:a2:be:16:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A9:78:62:D4:AE:51:E5:C2:56:E9:8E:C1:59:B9:45:0C:2F:C7:B3
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d2628c82-3cec-4dc5-afee-6f6966b9ec70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:ed:1d:a7:41:de:7b:d8:96:71:f8:3d:3c:8f:25:eb:02:f6:
         dc:38:00:f3:81:10:01:ac:86:fe:a4:10:b1:1f:2d:42:33:0f:
         e5:8d:90:05:62:12:08:7e:55:92:79:14:9c:88:54:39:e6:df:
         ed:81:20:ed:cc:c9:16:a1:3f:d0:e0:5c:ed:56:51:36:5c:78:
         25:2b:18:32:18:7a:d6:2f:d1:a7:c8:fa:16:e5:5a:67:f6:8d:
         aa:ba:3e:7f:2f:f8:ce:cd:34:2f:dd:8d:ce:d6:8d:da:bd:94:
         dc:c5:be:e2:10:6c:33:fc:66:ae:fa:2a:0d:14:d8:4d:66:7f:
         4f:63:a2:9d:ec:e7:de:8e:03:a5:96:ea:23:37:49:f0:d8:f8:
         5c:a4:a3:93:cb:fa:8b:b9:29:e3:04:da:39:d9:40:a3:26:24:
         ef:7d:f5:c4:53:bf:25:8d:a1:25:5c:af:b0:3f:19:81:be:49:
         10:69:ee:6b:fc:94:9b:9d:d0:b0:87:4c:e6:b5:47:94:88:c5:
         a7:5a:74:dc:6c:f3:86:cc:f7:30:f4:7a:be:74:15:70:55:26:
         95:5a:49:18:1e:92:48:e1:d8:4a:a9:bb:bf:fc:d3:df:0e:5a:
         5d:34:83:a1:29:29:dd:e4:40:c3:69:6d:17:69:28:63:2d:49:
         c2:e7:bb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----