Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e5e39f9c-85f4-4d7d-b062-169532cf9af1.roa
File:                     e5e39f9c-85f4-4d7d-b062-169532cf9af1.roa (raw, json)
Hash identifier:          2njtsk2lH5d0x2+mEpDO3hWyw+eXcvUVZ78C8ikTYSM=
Subject key identifier:   46:60:F3:0D:3F:51:F8:C3:62:4E:D2:4F:12:AE:F2:7B:75:81:72:E3
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       16D3BCCC09DC80D16797075159D81643A7052E2A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e5e39f9c-85f4-4d7d-b062-169532cf9af1.roa
Signing time:             Tue 15 Aug 2023 00:00:00 +0000
ROA not before:           Tue 15 Aug 2023 00:00:00 +0000
ROA not after:            Tue 19 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d3:bc:cc:09:dc:80:d1:67:97:07:51:59:d8:16:43:a7:05:2e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 15 00:00:00 2023 GMT
            Not After : Sep 19 23:59:59 2023 GMT
        Subject: serialNumber=df294f6a775a374def675b79b3f8f43651fcdceff543aaf4659d6b1621e0bce4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8f:56:f8:7a:5d:c9:af:6f:5f:9f:8e:03:52:
                    c7:ef:52:09:e2:53:6e:b5:8c:3b:c2:f6:b4:dc:62:
                    a4:46:f1:0a:17:38:9e:4b:23:74:a2:fe:4d:a1:2f:
                    c5:45:f6:18:5e:6c:ce:56:9f:29:f0:2b:38:02:a2:
                    0b:66:93:a9:ee:c7:a4:46:2f:04:18:e3:a9:da:52:
                    0e:d8:10:6d:46:2f:3d:2f:44:19:59:bb:74:23:f9:
                    1e:b3:1f:65:10:11:a7:e9:ad:8e:00:10:30:26:0d:
                    d0:f7:ff:6e:9d:b7:b4:e0:72:c9:7a:1d:a7:3a:33:
                    9f:66:c5:19:1f:11:b5:7b:cd:92:07:89:21:64:9c:
                    78:d1:d3:c6:41:13:ec:b3:e5:62:04:07:ab:9e:40:
                    c4:d8:67:04:ce:df:67:e3:57:d2:af:7f:bc:94:fd:
                    2b:21:0a:e5:b0:ba:e0:1f:0c:33:c2:49:74:91:25:
                    7f:af:56:20:1b:d1:9a:f4:7c:86:23:a9:52:de:d7:
                    54:4e:11:86:f2:fc:a3:46:90:5a:aa:af:d6:ec:3b:
                    b8:28:dc:68:37:ce:8d:a4:52:7c:be:0b:68:14:6c:
                    72:13:9f:b1:f3:1f:13:02:f5:fe:47:6a:f6:aa:a5:
                    32:4b:22:de:4b:f5:06:42:98:15:8d:be:76:4a:0e:
                    9f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:60:F3:0D:3F:51:F8:C3:62:4E:D2:4F:12:AE:F2:7B:75:81:72:E3
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e5e39f9c-85f4-4d7d-b062-169532cf9af1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:08:4e:97:58:03:24:5d:51:6b:9b:88:0d:dd:cf:30:b5:ec:
         73:18:b3:b9:64:d9:9b:b0:09:d6:09:6d:79:5a:b9:05:ae:d5:
         02:77:29:fb:d4:77:99:99:51:08:55:fa:36:8d:64:a2:24:e1:
         36:45:ff:ac:1c:88:ce:6c:2c:c2:b2:21:c3:ca:f9:50:8e:12:
         80:b3:07:25:73:2a:88:33:a2:1f:0a:91:19:6d:c1:11:bb:dd:
         c1:54:6c:86:b4:bf:8b:81:d7:9c:b1:28:cf:0d:e1:e1:89:a3:
         2d:26:db:67:d8:87:5c:35:23:9a:d6:1e:d8:ed:9a:45:bb:5c:
         15:a4:54:d6:4f:24:c0:56:fd:41:1c:36:ef:45:b5:ac:9a:ae:
         cb:93:34:96:a6:aa:41:c6:8c:93:68:93:b5:81:ea:40:f9:85:
         62:00:fd:22:ff:83:03:3e:eb:e4:b3:d0:b7:6e:5c:3f:a1:79:
         4a:31:e8:5f:ae:eb:cf:6d:1e:e8:43:6c:1c:ac:72:d2:d8:8f:
         cd:8b:44:99:cd:3e:f8:31:5d:49:9d:18:7d:4b:c6:58:ae:97:
         9b:21:5d:fb:eb:f3:46:37:98:5e:25:67:b1:92:61:d4:e6:d8:
         41:4d:f0:be:90:12:5a:24:d1:d0:ce:f5:4c:42:17:df:e8:c6:
         a0:97:90:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----