Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6b2c186-1d9d-41ec-ba83-3e5b07d2b953.roa
File:                     d6b2c186-1d9d-41ec-ba83-3e5b07d2b953.roa (raw, json)
Hash identifier:          c0vzQVYI3ikrW+yLIiH6TG9w+I41FZQtVZNTtKuUGLk=
Subject key identifier:   F8:71:93:1A:BF:0C:1B:89:38:07:69:41:B0:9D:CA:3F:76:3A:FC:2E
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       43D4AF2DCB1018173A3F00209B73A0430F7B09DD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6b2c186-1d9d-41ec-ba83-3e5b07d2b953.roa
Signing time:             Thu 22 Jun 2023 00:00:00 +0000
ROA not before:           Thu 22 Jun 2023 00:00:00 +0000
ROA not after:            Thu 27 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d4:af:2d:cb:10:18:17:3a:3f:00:20:9b:73:a0:43:0f:7b:09:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 22 00:00:00 2023 GMT
            Not After : Jul 27 23:59:59 2023 GMT
        Subject: serialNumber=83da4ac4969160d41727057608a4d11b418156e797d7ded8e331b8d8317d0af4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:4f:dc:86:e2:64:b1:9c:46:6b:80:eb:0e:
                    c8:a1:94:5f:51:d7:28:4a:82:b9:26:ed:9c:11:07:
                    67:0c:3f:6b:c6:83:47:b5:99:9c:b9:fa:29:cf:dc:
                    fc:a5:10:91:54:4b:40:56:29:41:df:20:34:af:31:
                    74:57:c6:e2:1a:25:e7:e1:6b:5f:78:cd:75:f9:d9:
                    bb:be:c8:85:03:8f:6b:3c:49:61:7a:b1:cd:da:b0:
                    55:dc:82:32:ad:b2:4a:93:ae:2a:d4:01:54:8b:89:
                    d3:51:3e:70:66:28:fd:7f:f2:51:4a:2b:b0:c8:f1:
                    2b:93:96:52:2e:02:ab:25:e3:55:ee:55:37:fb:36:
                    7a:a3:42:21:6c:19:7c:fe:44:a8:94:81:b3:58:4e:
                    64:ff:ab:38:59:f5:d5:a0:8a:81:0f:94:19:30:94:
                    ee:a5:46:1b:8f:9c:dc:fb:21:42:d5:ff:75:cf:6b:
                    b0:55:74:c2:58:5b:d9:fd:dd:5e:27:28:99:0a:62:
                    91:c5:40:95:00:74:58:da:b1:d9:23:8f:0c:b9:27:
                    86:38:84:c3:cd:34:ef:64:a8:2d:b5:7f:5e:6c:39:
                    d4:8f:33:3d:cd:6f:be:c0:86:76:01:6e:1b:0b:7d:
                    d4:5b:39:fa:79:da:62:0f:f5:78:70:fe:ea:34:28:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:71:93:1A:BF:0C:1B:89:38:07:69:41:B0:9D:CA:3F:76:3A:FC:2E
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6b2c186-1d9d-41ec-ba83-3e5b07d2b953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:41:d0:58:e5:c9:a7:bc:fa:8f:67:21:9c:aa:e4:aa:2f:dc:
         61:6d:83:aa:35:fc:f8:e1:63:65:da:cf:b4:b7:08:d1:f6:1f:
         67:99:04:c2:f1:c8:ad:86:64:fb:07:4c:d3:17:44:ca:2f:ab:
         5f:6a:18:65:92:63:85:0e:9c:bd:42:7b:cf:d4:21:85:ba:c1:
         05:22:ad:96:f4:00:59:ed:63:f3:38:5f:9a:ad:a3:9c:3c:6b:
         14:1a:87:af:b5:48:ef:ff:bf:b7:f2:df:a7:4c:e7:b4:c6:71:
         30:d9:ee:96:36:53:9c:7d:cc:e3:cf:cc:dc:6f:4c:46:ff:88:
         df:e1:1a:bc:21:0f:1e:98:14:0a:f3:9a:ec:45:e2:fb:c9:5a:
         3c:0d:d3:96:70:4e:8f:63:76:c6:20:aa:56:11:3f:1d:0f:40:
         93:9f:4e:4c:70:b7:10:8e:aa:c0:30:f7:6e:25:bf:b0:cc:6e:
         77:73:ba:fe:ff:1b:41:5e:19:7e:b2:34:8d:11:ef:5b:db:38:
         23:ea:ff:7b:ff:d1:ff:62:a1:7d:0b:10:c7:87:35:34:cf:d2:
         00:d7:9e:76:8c:e5:12:ca:f4:94:8d:9d:b7:e9:7e:d2:f9:85:
         fb:14:c4:6f:9a:db:56:a9:37:de:65:37:a6:8c:23:a6:20:b7:
         f4:25:df:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----