Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e3377aac-aceb-4467-b6cd-7b0f53a484b3.roa
File:                     e3377aac-aceb-4467-b6cd-7b0f53a484b3.roa (raw, json)
Hash identifier:          znR58+7lbfX8OegMLKUFShYq1ySbA294f5qFczjMu78=
Subject key identifier:   B9:87:64:E5:73:32:63:BB:81:BA:72:06:F6:5B:86:28:A2:5D:F6:2C
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       32F7D65C16F331A9669326A079BC1FBC36F74D64
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e3377aac-aceb-4467-b6cd-7b0f53a484b3.roa
Signing time:             Tue 13 Feb 2024 00:00:00 +0000
ROA not before:           Tue 13 Feb 2024 00:00:00 +0000
ROA not after:            Tue 19 Mar 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f7:d6:5c:16:f3:31:a9:66:93:26:a0:79:bc:1f:bc:36:f7:4d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb 13 00:00:00 2024 GMT
            Not After : Mar 19 23:59:59 2024 GMT
        Subject: serialNumber=be48b16792e7b84b59c7289a52beb2b30c09d13b93dbf7244b98aef0b3b9e231, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:91:0e:14:76:e8:9f:e7:87:1e:f0:f7:7f:97:
                    e7:b0:cf:62:1b:83:3c:0a:fd:c0:bc:0c:86:6d:92:
                    ed:f7:1b:94:e5:8d:39:3c:c0:76:89:64:bd:f3:41:
                    f9:8f:72:fc:c3:b2:6d:21:4a:1e:f2:c2:99:6f:fa:
                    b9:e2:21:c8:21:fc:0b:10:77:3e:88:14:7c:21:c2:
                    a3:85:71:6a:71:00:27:95:26:d9:6d:27:91:70:82:
                    90:bb:ef:18:43:33:4a:b8:c5:96:ec:20:00:69:ca:
                    3d:17:8f:a0:b8:5e:87:94:18:32:ff:61:ed:58:eb:
                    3b:4e:ad:af:71:f9:23:9b:4a:3a:1c:11:ac:72:b1:
                    27:2c:11:9a:3c:95:cd:5e:12:65:4f:ea:c8:a8:5b:
                    ae:7b:fa:39:0f:7a:c2:ba:9d:f1:d7:36:a2:91:cb:
                    49:b6:ac:b5:85:e3:44:1e:d4:64:29:fa:73:e7:4e:
                    d7:e5:59:56:59:86:f3:69:28:85:ad:70:52:2d:a7:
                    41:e7:d5:87:75:64:25:31:18:e8:02:41:2d:8e:af:
                    47:43:53:8d:69:5d:8c:d8:35:70:74:8e:05:0a:4c:
                    76:65:cf:35:e1:af:53:09:c6:78:ca:c5:ef:ee:3d:
                    04:e9:75:31:59:c6:19:c5:97:8e:47:f2:b5:23:64:
                    f8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:87:64:E5:73:32:63:BB:81:BA:72:06:F6:5B:86:28:A2:5D:F6:2C
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e3377aac-aceb-4467-b6cd-7b0f53a484b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:6d:8e:13:26:ee:7b:34:a9:8f:38:cd:15:52:3c:12:08:9a:
         68:01:d5:32:ff:49:c2:54:4d:80:11:cd:89:1d:f8:71:9f:68:
         20:74:09:5d:78:15:ff:54:43:07:98:b6:7e:65:c1:f8:74:3f:
         01:1b:d1:d4:42:1b:ff:c2:b5:e2:4d:a1:49:23:3a:1b:4f:62:
         6d:91:1e:40:cd:10:0e:bf:c3:ae:c2:4e:c8:54:bb:49:b1:18:
         52:66:8e:36:ce:07:64:1c:d5:ef:e4:9c:aa:66:93:07:28:99:
         ee:32:36:f7:69:b1:dd:2c:de:6c:88:3a:51:71:8d:68:a4:c6:
         f2:cb:7c:60:97:e9:fa:d4:28:66:11:71:1b:61:78:b1:fe:89:
         f9:d1:d1:57:da:82:3f:c7:80:6a:2d:06:85:7d:58:cd:da:ab:
         65:80:4b:3c:0e:51:cb:54:b2:38:9e:98:5d:6e:a5:bf:69:73:
         bf:03:a6:cf:1d:5d:0e:f4:80:4d:f7:0d:d4:1f:b1:71:48:a5:
         a9:ee:ce:9d:7e:34:b0:00:b6:34:41:ed:ef:4f:75:99:9e:5f:
         42:49:cf:18:19:6d:9d:39:75:d8:f7:0e:28:b4:70:61:45:48:
         8d:23:33:f0:03:27:d6:a6:45:18:cd:66:03:e6:04:50:c8:47:
         e0:6b:05:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----