Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19565113-7426-4f2a-b575-92939edfdd39.roa
File:                     19565113-7426-4f2a-b575-92939edfdd39.roa (raw, json)
Hash identifier:          ePSTE8HyL9dg3s2iuKUUnk/MbXrIRTkzMYHwvITuslg=
Subject key identifier:   76:FC:69:E7:03:A0:00:28:9A:F5:59:D2:9F:61:56:2D:24:FF:20:2E
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       11CFDCE461E85DF5AE4AED93EF4989963C2701AE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19565113-7426-4f2a-b575-92939edfdd39.roa
Signing time:             Mon 16 Oct 2023 00:00:00 +0000
ROA not before:           Mon 16 Oct 2023 00:00:00 +0000
ROA not after:            Mon 20 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cf:dc:e4:61:e8:5d:f5:ae:4a:ed:93:ef:49:89:96:3c:27:01:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 16 00:00:00 2023 GMT
            Not After : Nov 20 23:59:59 2023 GMT
        Subject: serialNumber=bc0227f2ebbcf7b1087980d34bb13b66238012b3416c40c6248162c5fc874398, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:46:51:cf:bd:8e:57:49:85:1a:fb:f3:d6:
                    38:71:5a:f7:61:01:2c:f4:e2:6a:39:a4:09:dc:fe:
                    fc:33:bf:24:7c:77:39:19:38:f4:e7:a9:c3:4a:1b:
                    76:4c:9a:ce:c8:9b:35:b2:89:17:6c:f7:e9:f0:2f:
                    53:be:b8:60:e0:4c:41:c3:4e:88:54:e2:b7:75:e9:
                    28:f3:57:04:6a:93:8e:f1:83:6a:0a:3a:0a:2f:e1:
                    10:87:41:94:8f:03:7e:7e:69:25:6b:1d:00:2a:23:
                    92:47:ab:57:39:6b:36:ec:b6:32:89:30:ec:e9:97:
                    37:e1:30:52:e5:ed:37:aa:18:2f:ab:ce:c1:a6:88:
                    67:f0:9b:8c:67:43:6b:c4:b0:d5:83:b1:46:68:68:
                    a5:3d:b7:24:69:f1:7c:66:fd:39:c8:6e:32:50:01:
                    d3:64:b0:a8:27:7d:44:6a:83:8d:69:bc:35:fd:ea:
                    bb:e8:68:d7:e2:36:94:86:b3:d3:43:82:9b:9a:ba:
                    39:18:21:81:61:b8:c2:e5:6e:4e:04:ec:d9:89:a7:
                    53:ce:0d:3e:31:eb:11:39:00:73:09:a8:65:1e:24:
                    da:98:df:ab:55:75:44:21:8b:ac:85:4f:de:0e:05:
                    ee:6c:96:ae:14:85:66:df:30:f8:37:b1:6b:cb:d4:
                    5d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FC:69:E7:03:A0:00:28:9A:F5:59:D2:9F:61:56:2D:24:FF:20:2E
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19565113-7426-4f2a-b575-92939edfdd39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:40:97:b4:42:78:dd:98:ed:30:27:97:9c:e4:46:49:7a:7f:
         d5:37:6c:e0:94:6b:14:de:10:49:ba:88:23:f9:0b:d0:a5:ef:
         a8:24:9f:7e:b3:e1:6f:0c:29:b1:75:0f:4d:df:3e:58:02:59:
         66:06:7c:8c:92:23:d0:67:6c:11:b9:56:dc:dc:d3:b1:85:6c:
         f2:43:26:76:d4:cc:e1:29:f0:1d:9b:38:3f:c3:f1:78:32:09:
         1e:37:4e:26:1b:86:8e:e6:a7:61:6f:0a:17:36:16:76:11:06:
         6f:0d:c7:a1:42:8a:38:24:6c:37:b5:f4:72:fc:57:e2:6b:6e:
         bf:f5:42:2c:4e:91:a6:12:00:3c:43:e3:5f:96:39:1e:95:75:
         8d:42:93:eb:92:0f:d9:b1:3b:00:f1:75:fa:58:3e:49:4d:a5:
         d6:31:6f:1c:18:be:4d:82:f9:f8:9c:42:b7:01:6c:f7:09:93:
         fc:ba:4f:92:0c:7d:58:15:8c:70:72:9e:01:9a:51:55:80:97:
         43:d7:7a:1d:bc:cd:19:a3:09:d5:d8:9d:e8:99:19:26:a7:7b:
         89:fa:c0:8c:62:78:7e:be:ac:89:da:5f:72:eb:83:bb:95:11:
         06:24:8c:a5:25:04:ac:8d:ad:47:a9:b0:18:30:b0:a0:79:cb:
         01:57:7f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----