Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e4627fd9-20b2-49d8-a927-d512f635aaaf.roa
File:                     e4627fd9-20b2-49d8-a927-d512f635aaaf.roa (raw, json)
Hash identifier:          dCKqrHkukCxmFsJsbmGq6n4cGUVWGPA5PuDpI8XBxt0=
Subject key identifier:   7C:C0:08:B7:EA:5A:F6:17:3D:AC:06:DC:58:AE:86:14:D6:C8:8C:D6
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5865EBDACEFA596DC63D588F697F753F2B7A13B4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e4627fd9-20b2-49d8-a927-d512f635aaaf.roa
Signing time:             Mon 18 Dec 2023 00:00:00 +0000
ROA not before:           Mon 18 Dec 2023 00:00:00 +0000
ROA not after:            Mon 22 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:65:eb:da:ce:fa:59:6d:c6:3d:58:8f:69:7f:75:3f:2b:7a:13:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 18 00:00:00 2023 GMT
            Not After : Jan 22 23:59:59 2024 GMT
        Subject: serialNumber=c8211906630cb6e1c0464d9aa97af2e8ad02c34d3ddad19dda3c7cf4da60937b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:ac:a5:31:14:80:eb:f7:95:b2:de:e3:23:
                    54:6e:1b:0e:53:09:c1:a5:42:6f:40:4e:e8:23:e5:
                    07:7c:e0:a9:2a:54:be:7f:fd:01:5a:80:d4:09:e7:
                    99:6f:b3:e1:f6:9a:2a:3d:99:7e:6a:1e:7e:74:8d:
                    fd:57:f2:ba:fa:b7:56:69:d1:be:d7:2f:b4:9e:b0:
                    e3:51:25:f6:0f:8a:44:c1:22:86:7f:68:d8:37:a5:
                    94:ec:fc:7b:d8:66:41:1c:35:4e:46:5f:19:7a:a0:
                    ef:99:58:14:43:e8:64:71:43:06:aa:62:be:17:0e:
                    2e:0a:44:38:b8:31:63:d4:a3:76:a9:6c:e9:87:a8:
                    e6:89:5d:a5:7b:f9:b8:c5:61:37:7b:cb:a1:05:2e:
                    02:c7:1d:25:24:af:d7:80:b9:8d:bd:c9:5b:5d:ee:
                    0e:fb:ae:91:56:5f:22:37:1b:28:b8:4d:47:c4:fc:
                    0f:38:4f:18:95:b2:a8:41:4e:b9:fa:44:a3:67:d5:
                    c1:5b:ed:c5:75:fc:f8:8c:77:d2:65:ae:89:df:6d:
                    05:7c:85:d1:c1:96:e4:37:98:73:3c:1b:f0:28:f6:
                    d4:3b:ab:06:7e:4f:55:27:6e:81:1b:5e:f8:5f:8c:
                    10:f5:ab:b1:72:43:74:89:7f:33:ef:d3:8a:55:94:
                    c7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C0:08:B7:EA:5A:F6:17:3D:AC:06:DC:58:AE:86:14:D6:C8:8C:D6
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e4627fd9-20b2-49d8-a927-d512f635aaaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:6d:8e:36:92:f7:3b:01:15:e5:d7:0d:f6:4f:25:d3:7a:a6:
         30:20:8e:15:8e:93:ec:0e:98:ee:79:d7:f6:0a:a1:3b:07:8f:
         7f:64:5e:33:c9:ae:97:0f:c5:71:77:0c:1c:bd:c0:e9:ec:c9:
         30:0b:57:e0:95:2e:13:f8:e6:f3:5e:bd:4b:44:57:79:b2:ca:
         49:d6:1e:d1:d7:58:36:05:8d:d4:06:d6:49:47:39:cd:4f:3b:
         23:cf:c6:fc:45:54:11:e0:10:91:e4:37:6d:3f:c7:df:e4:c7:
         55:73:42:32:68:c4:9f:b6:f8:1e:bc:35:9e:89:a8:99:f5:43:
         75:30:8e:e4:f1:57:e3:e3:2d:63:54:ef:0a:fc:04:78:83:0f:
         62:32:be:4d:69:b5:70:d0:6e:c9:c4:4f:18:13:5c:0a:3b:8d:
         b6:3a:ac:ab:86:d0:a2:d6:0a:63:2d:0b:a3:7c:0a:0d:29:e7:
         2b:1d:d8:90:09:55:ed:96:23:cf:12:d9:33:b8:17:4d:dc:62:
         51:bc:5e:6e:97:6e:f2:46:76:45:81:25:d2:ff:d0:da:3e:cd:
         3b:83:36:5b:4a:57:55:e4:6e:f7:c9:0c:28:c3:65:c7:76:3f:
         69:41:be:ae:b7:68:3b:1b:c4:85:fa:9f:aa:2d:59:2e:42:31:
         bd:e7:e5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----