Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e0d5cb74-99a4-4848-917c-1257d4af0006.roa
File:                     e0d5cb74-99a4-4848-917c-1257d4af0006.roa (raw, json)
Hash identifier:          jEug6/09Xd2wfowFObMMXex5/U21gVo7uBCup5GypJM=
Subject key identifier:   61:04:FB:11:12:B0:64:3D:56:64:2E:EB:7A:91:53:9F:6E:6A:DC:29
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4E6D22F33FBD1C6A62883A58E8AD45C4B87A3FC0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e0d5cb74-99a4-4848-917c-1257d4af0006.roa
Signing time:             Tue 28 Nov 2023 00:00:00 +0000
ROA not before:           Tue 28 Nov 2023 00:00:00 +0000
ROA not after:            Tue 02 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6d:22:f3:3f:bd:1c:6a:62:88:3a:58:e8:ad:45:c4:b8:7a:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 28 00:00:00 2023 GMT
            Not After : Jan  2 23:59:59 2024 GMT
        Subject: serialNumber=4be8067d18169ab437c3a7713ffad5318ecc16774d7dfc3e6721a159f4bace7b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fe:ba:92:02:0a:2a:25:13:9e:ce:43:82:02:
                    cb:86:c3:f0:31:1d:86:85:08:70:0b:a4:4e:55:0d:
                    bc:e9:17:6a:d7:7f:0b:35:1c:02:bb:75:fa:dc:b6:
                    c0:d4:f3:12:5b:c7:4a:34:f9:f4:fd:c5:87:5c:ab:
                    cb:b1:9c:57:e3:78:d5:09:32:bb:5f:d3:72:51:c4:
                    13:3a:0b:91:07:93:cf:4f:8d:d4:6e:ae:25:83:d9:
                    2b:0c:29:b6:57:4c:21:7b:dd:7a:fc:35:b8:67:d6:
                    0d:b1:7b:2a:cf:4f:b7:f8:81:13:69:ad:dd:4f:d1:
                    fc:15:92:34:1d:6a:c7:97:e5:3e:ca:41:7c:b5:ce:
                    b8:73:02:5f:68:32:6d:76:2a:8c:d6:3e:49:e5:5a:
                    79:aa:c8:51:28:77:f4:51:c7:21:d2:75:4c:db:5a:
                    20:fd:a7:8d:d2:8f:f7:4b:51:d4:6c:d5:2e:4a:81:
                    39:e0:d0:42:aa:cf:ed:51:76:e8:31:d4:a8:a4:c0:
                    ae:38:7b:cc:f1:c0:2d:29:74:75:b4:49:84:01:36:
                    41:7c:9b:35:34:10:66:5d:96:e7:7e:0d:64:98:f6:
                    15:fe:d0:44:03:0b:33:81:25:1c:8c:be:fe:b1:87:
                    75:db:d7:15:5f:64:ad:a6:33:be:c1:20:32:d0:3e:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:04:FB:11:12:B0:64:3D:56:64:2E:EB:7A:91:53:9F:6E:6A:DC:29
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e0d5cb74-99a4-4848-917c-1257d4af0006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:75:cd:bc:17:c0:dc:76:05:20:09:a1:93:20:70:43:6e:5b:
         6a:3f:08:f3:e5:70:5e:fb:8a:bd:8d:fc:0b:d3:92:1e:fa:7e:
         c0:3a:6a:08:28:eb:39:d0:92:7b:90:0a:16:ca:69:2b:ea:51:
         ff:8e:18:16:0b:12:9b:c3:f3:06:08:3c:df:62:88:f5:df:1f:
         bd:69:2a:20:f1:11:59:59:59:fa:a4:38:a2:78:38:96:40:7e:
         01:4d:0d:b5:40:99:c8:20:04:f8:23:09:ce:6d:5c:d2:0b:62:
         fd:7d:11:37:fb:93:08:81:19:0d:72:ff:27:eb:77:14:11:6f:
         60:50:c3:81:77:28:df:4f:50:cb:bc:08:54:92:65:fb:6a:23:
         b4:37:53:6d:ac:08:e3:62:33:fc:7a:66:b5:1c:9b:af:c3:0c:
         ea:e3:e7:3f:f1:83:9b:65:90:b1:eb:51:bb:a8:84:de:5a:f3:
         db:ba:33:bf:fb:38:59:04:58:c6:06:17:a4:49:10:8a:1d:99:
         6b:68:69:30:b0:46:a5:22:23:f8:57:96:2c:dc:df:ce:e4:9a:
         82:f4:35:f1:ae:04:77:87:40:17:a6:34:c1:c7:f6:3b:d5:01:
         cb:fa:2b:b4:b0:83:a6:9d:3c:a4:a5:58:08:c0:c3:20:c3:63:
         de:46:5a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----