Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f4b83798-b90b-46b4-a62e-40f4e4d0a377.roa
File:                     f4b83798-b90b-46b4-a62e-40f4e4d0a377.roa (raw, json)
Hash identifier:          cp/LWKiHxD93/6Djz+LUx5DaPYzpn8KR/aTHnJ3uieo=
Subject key identifier:   40:3F:6F:19:1A:83:A8:DA:3F:87:09:BB:43:A3:45:5C:78:D8:D3:BB
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4E0560215DBD09C10B20626E139C11EEDD7B358B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f4b83798-b90b-46b4-a62e-40f4e4d0a377.roa
Signing time:             Thu 28 Sep 2023 00:00:00 +0000
ROA not before:           Thu 28 Sep 2023 00:00:00 +0000
ROA not after:            Thu 02 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:05:60:21:5d:bd:09:c1:0b:20:62:6e:13:9c:11:ee:dd:7b:35:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 28 00:00:00 2023 GMT
            Not After : Nov  2 23:59:59 2023 GMT
        Subject: serialNumber=18a3e4905e438e73e251d45c78db901fa92a8cc2b134c6ffc3587bbf5b623b2c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d7:22:7e:52:d8:62:f4:2f:97:03:be:a5:59:
                    ee:60:6b:37:43:e3:b1:f8:27:4a:b6:a4:75:86:87:
                    bd:9a:a4:3e:f5:17:df:fc:a8:55:89:bb:77:e9:e5:
                    4b:dc:ad:1d:0d:6c:0b:83:ab:ff:03:17:51:30:83:
                    b7:dc:a0:1a:a1:d4:1c:b8:0a:8e:d3:3c:e4:be:e0:
                    2f:00:57:07:a9:90:20:ed:97:49:fd:68:13:54:98:
                    db:5b:b5:77:08:ef:04:87:f7:13:33:48:16:f8:3f:
                    ea:11:f3:02:84:f0:f3:48:fc:2d:64:0c:54:86:91:
                    42:e5:fe:6f:3b:a7:bf:cb:17:32:12:f2:db:b7:be:
                    22:d7:23:21:02:8c:51:db:6f:72:0f:df:6c:67:e5:
                    bb:d4:cc:00:c4:b0:1b:20:7e:38:40:7c:96:89:d9:
                    87:65:04:3d:75:1b:94:fa:f2:64:c3:74:7d:3d:79:
                    5e:58:f1:58:08:80:52:a6:6f:98:3d:b3:63:a3:d0:
                    55:20:cf:9d:2c:15:e1:37:03:7a:ee:a9:07:c9:b3:
                    a3:6b:72:4a:7a:a1:80:e3:a1:3e:ff:2b:f6:d4:5e:
                    97:ef:1c:f3:7c:c0:7e:4c:cd:5f:fe:c8:90:96:b0:
                    62:0f:88:d4:1f:ba:30:e8:61:47:db:b4:9a:1b:20:
                    f4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3F:6F:19:1A:83:A8:DA:3F:87:09:BB:43:A3:45:5C:78:D8:D3:BB
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f4b83798-b90b-46b4-a62e-40f4e4d0a377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:ec:7f:77:6a:7b:7c:fa:9f:06:58:fd:8a:98:3f:0b:bc:6e:
         22:5c:97:b6:75:44:54:95:48:91:65:81:33:83:20:b0:55:c6:
         b6:ea:39:92:fb:14:bd:35:e9:0d:a7:45:f2:ff:a7:11:76:9c:
         c3:4c:fc:ff:3f:c7:52:c9:5a:b7:61:3d:cb:00:b5:57:d6:4e:
         f8:06:fd:30:9d:ec:ff:98:9d:66:44:e8:e4:43:97:5c:9c:91:
         3a:9c:c5:ed:6c:66:c7:27:3a:99:ba:df:a7:9f:84:1f:c5:57:
         bd:d8:94:15:13:5e:a4:63:88:ec:ed:4d:3f:50:76:3c:a8:86:
         23:fb:a5:76:9e:d7:cc:e5:33:ab:36:59:ae:1c:90:8e:8b:d4:
         cc:7b:5d:68:24:a8:73:17:4e:8b:1e:61:98:16:f2:d6:d9:16:
         cb:10:9a:d2:80:8b:2d:0f:dc:b4:28:ba:a2:89:ba:a4:57:b7:
         38:e5:f7:90:53:21:51:0f:6f:5e:30:de:92:64:2e:89:2f:98:
         55:0e:76:0b:22:36:49:30:73:13:89:55:da:65:ac:69:c0:8a:
         5e:0f:94:fd:7e:63:0b:21:b1:f0:00:80:a6:0a:ed:de:3a:30:
         ba:11:65:44:5f:03:11:5e:41:68:57:10:84:a1:1f:5a:9c:93:
         15:b5:0f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----