Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22f13157-07b7-4706-9f5e-c4ec7cb885d1.roa
File:                     22f13157-07b7-4706-9f5e-c4ec7cb885d1.roa (raw, json)
Hash identifier:          +JtxbqL4cO2DuOw3OP7YjFjoaLeCuGaCrQrvr4Kcu9A=
Subject key identifier:   FE:F1:92:A3:95:DD:62:41:DF:04:B6:C9:41:25:EE:9E:65:90:23:38
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6B98A77AC8A0DFD755B908AADD1D4D877B0834AE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22f13157-07b7-4706-9f5e-c4ec7cb885d1.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:98:a7:7a:c8:a0:df:d7:55:b9:08:aa:dd:1d:4d:87:7b:08:34:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=e66391c0a194dfaa43569aa5f5bbfa1a9ea9a4ad80909204201c9411152a4416, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e2:00:af:b7:63:8e:34:cf:b6:a1:75:f3:4e:
                    fb:95:28:e0:e7:f4:db:1a:3c:ad:50:97:18:93:99:
                    40:14:fe:43:d5:7c:b0:7e:ed:18:0f:69:1e:96:e6:
                    3e:de:bf:65:86:8c:8d:d2:a0:c5:a1:de:17:20:6b:
                    af:4a:30:06:e7:1d:78:1d:9a:67:f0:b9:f0:a7:21:
                    14:0a:63:7b:69:35:f2:58:16:e0:d3:ee:ab:53:11:
                    73:d8:57:b5:de:73:bd:ca:c3:83:f6:24:90:9a:d3:
                    77:fb:b7:28:aa:dd:40:74:cf:51:96:6d:9a:35:45:
                    2c:f2:f2:51:5a:36:05:4f:29:fb:d9:88:cf:ae:c1:
                    aa:da:b9:2d:0e:3c:ce:bf:fc:21:b3:49:48:b5:ae:
                    80:97:26:db:65:7f:a1:20:c4:eb:ad:75:15:f8:7a:
                    47:d9:ac:09:43:e1:13:f1:76:3a:73:87:3f:ca:a6:
                    32:7a:e1:fd:5c:55:d6:0e:f7:60:db:51:92:60:ac:
                    3c:de:0c:dc:9b:aa:b5:c0:d0:69:a1:14:f2:86:cb:
                    c3:76:15:fe:af:28:d7:19:25:c5:ed:78:15:75:8e:
                    69:53:7e:f4:78:d0:4e:8c:48:0e:4b:8b:e0:9b:e1:
                    34:e7:24:04:8c:1e:e4:82:f5:20:d6:0a:57:11:d4:
                    d1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F1:92:A3:95:DD:62:41:DF:04:B6:C9:41:25:EE:9E:65:90:23:38
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22f13157-07b7-4706-9f5e-c4ec7cb885d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:a9:78:8c:52:b5:6c:c4:dc:36:d9:f8:67:00:66:81:28:95:
         32:e5:02:6e:d3:64:18:da:66:50:1b:8a:73:a1:fe:df:ce:5e:
         e9:32:ca:38:3a:f4:1d:a2:41:98:bd:8a:00:45:b5:75:1a:ed:
         09:6c:3d:19:9d:60:89:0c:65:f4:f8:bc:a0:77:ff:d8:c7:21:
         cf:95:e9:d0:dc:4b:67:37:ee:63:68:03:a7:4b:d7:76:6d:02:
         8e:77:eb:16:89:68:63:ae:48:e7:12:eb:75:df:f0:b7:4c:e3:
         05:0a:19:b6:57:82:f8:74:30:32:9a:73:8e:5b:ce:91:49:ea:
         27:52:4f:90:9b:fe:a0:ba:90:92:5e:e0:d7:5f:85:2d:02:c0:
         1f:9d:7f:3d:48:db:cb:af:28:82:48:67:ac:3b:7d:6c:d0:17:
         99:62:d7:5a:41:bf:16:aa:23:68:fa:53:95:72:2f:a2:6b:ba:
         97:df:84:bd:a1:39:59:3c:95:8a:3e:de:bd:14:3a:28:bd:de:
         39:01:8b:64:6f:41:97:3b:44:71:13:fe:00:95:7f:72:f2:fa:
         ca:24:a3:cb:5f:dd:59:a7:df:71:4b:07:11:7e:8f:46:3e:e5:
         44:79:0d:2b:7c:77:32:b3:ca:68:ec:a8:e3:cf:4d:5d:b3:cd:
         45:bd:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----