Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44325952-da36-4f81-a7f0-53b8c25269f6.roa
File:                     44325952-da36-4f81-a7f0-53b8c25269f6.roa (raw, json)
Hash identifier:          QiNMJ8oj3mOekCW8/7Bkh5Ug6TblUVT8VmyyHWweFag=
Subject key identifier:   CC:5F:11:BF:6D:C2:F1:D6:8C:65:7D:AC:95:EE:07:0E:1B:4C:1C:92
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       75FA43D15B285BFAE9A1B4ABA014962B409F6DF6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44325952-da36-4f81-a7f0-53b8c25269f6.roa
Signing time:             Thu 11 Jan 2024 00:00:00 +0000
ROA not before:           Thu 11 Jan 2024 00:00:00 +0000
ROA not after:            Thu 15 Feb 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fa:43:d1:5b:28:5b:fa:e9:a1:b4:ab:a0:14:96:2b:40:9f:6d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan 11 00:00:00 2024 GMT
            Not After : Feb 15 23:59:59 2024 GMT
        Subject: serialNumber=66f5704bc8a459f1899733e194e3108aef2538f3e48ec8e5d2f98f0d3409e541, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c5:a7:88:f9:b8:7e:1d:71:62:40:b7:33:73:
                    5a:71:df:fb:45:72:de:2c:df:9f:eb:12:57:05:c9:
                    11:36:bc:01:78:c2:de:b6:e9:7f:f7:42:b0:cf:ff:
                    36:21:eb:58:fa:49:9a:16:4d:54:a8:0e:1a:f4:52:
                    62:69:8d:b3:c6:84:20:5d:ba:f7:41:3e:53:36:00:
                    00:67:a2:94:0e:53:e4:24:9f:1a:cd:88:9a:6b:0e:
                    9f:5e:02:4e:f5:ad:d3:68:6e:6f:9d:2c:16:a8:23:
                    c3:a8:e3:0e:d0:73:0c:0b:46:f9:04:3b:e1:67:0d:
                    85:d1:42:9b:5f:c6:3e:19:8e:17:5d:72:2b:c9:b6:
                    27:63:f1:5c:06:a7:52:c0:fb:64:e9:e6:38:6c:c9:
                    f9:fd:e4:2b:02:73:88:82:37:65:bd:eb:bb:cd:96:
                    f3:bb:1f:14:b6:82:b1:ff:81:e0:73:43:88:6f:11:
                    6a:08:97:33:73:d0:4d:9a:4f:42:5b:45:8f:ec:0e:
                    c3:10:29:2e:34:ea:20:82:29:05:50:c5:7a:bd:c4:
                    7f:dd:e2:d0:2e:3b:72:f0:58:83:29:45:83:5a:52:
                    2b:6c:95:2b:3e:09:36:7a:1a:91:f6:0f:dd:ee:7d:
                    ec:fc:2f:c1:91:a9:eb:b3:9f:f2:11:8c:e3:39:60:
                    26:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5F:11:BF:6D:C2:F1:D6:8C:65:7D:AC:95:EE:07:0E:1B:4C:1C:92
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44325952-da36-4f81-a7f0-53b8c25269f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:db:33:fe:9e:92:a6:19:83:30:fa:18:0f:53:e0:16:2a:da:
         e1:fe:0d:5a:0e:2e:88:99:91:21:70:99:10:36:93:e7:93:9d:
         ad:dd:a3:68:00:7c:d7:aa:69:5e:eb:05:f7:e2:3f:9a:e0:79:
         c4:66:8b:de:90:22:71:4c:19:b8:0b:d2:a4:73:35:a2:21:eb:
         d5:96:a3:62:29:b0:8f:95:0e:44:10:b2:ae:50:b5:f7:84:45:
         ae:ae:c9:f9:f2:b1:f9:fd:a8:6b:35:bb:c6:f2:56:82:c4:ec:
         3f:ee:02:7c:62:fa:d9:88:45:33:a8:00:04:73:72:74:89:1b:
         2c:11:d0:e8:7b:a6:56:86:6b:17:63:74:8e:37:38:7f:af:29:
         bf:3f:ee:d0:47:28:19:1d:39:5c:e2:ba:d0:26:6d:aa:9b:e7:
         42:37:d3:11:76:b2:08:fc:e2:78:e1:d2:a9:5f:80:d3:b7:b9:
         29:37:e6:fb:f8:73:b1:f8:f0:6d:5f:63:c3:b5:f8:d3:36:71:
         ce:ad:f4:c4:54:31:47:7c:72:1b:16:6e:e7:f8:1b:d2:a6:72:
         25:4c:72:a2:1b:61:97:7e:d9:24:5d:e6:38:bc:75:6a:aa:bb:
         da:79:d4:24:b3:af:70:a7:37:94:5d:fc:2b:40:f9:00:bd:ae:
         66:7b:5d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----