Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4d222e45-9ca1-4e52-8f0b-301ec4d48263.roa
File:                     4d222e45-9ca1-4e52-8f0b-301ec4d48263.roa (raw, json)
Hash identifier:          IeqYl1NrWI2MB4zjH0ay+8pBTDIr21p9qCZV+uuoRCQ=
Subject key identifier:   33:46:58:38:A3:0A:5C:CB:2A:D9:17:50:B7:72:25:BB:24:56:FC:65
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0BBFF9DC8AB2C9D22783F80F2ADF8A1FD16D4E27
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4d222e45-9ca1-4e52-8f0b-301ec4d48263.roa
Signing time:             Mon 12 Feb 2024 00:00:00 +0000
ROA not before:           Mon 12 Feb 2024 00:00:00 +0000
ROA not after:            Mon 18 Mar 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bf:f9:dc:8a:b2:c9:d2:27:83:f8:0f:2a:df:8a:1f:d1:6d:4e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb 12 00:00:00 2024 GMT
            Not After : Mar 18 23:59:59 2024 GMT
        Subject: serialNumber=db9d68c17ff2d71b884a43b340e7eebefa9300d221e1600587b919297cacffcc, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:fb:7c:0d:9c:04:62:f0:b1:b5:dd:07:3a:ce:
                    35:82:4b:87:83:41:d1:d6:b4:ed:45:6e:19:fc:0a:
                    59:68:16:b0:0e:6f:f8:4d:10:fb:98:33:f3:93:e2:
                    ff:38:9f:bb:34:2b:88:e8:ff:9e:0e:9b:11:56:e7:
                    a2:69:34:c7:d3:53:87:40:9d:32:5f:f6:af:6a:fb:
                    5a:c9:77:cc:03:11:48:fe:bd:f3:09:90:05:a4:89:
                    09:d0:73:19:19:6c:27:da:9c:f4:29:6b:ab:a1:e2:
                    e3:c2:52:c0:ee:8d:f9:27:87:28:17:11:45:06:34:
                    44:f3:9f:3d:13:7b:2f:9c:dd:ae:e2:a9:cd:3d:21:
                    bb:5a:70:da:e6:1f:54:d7:ad:f7:37:3e:02:b8:e0:
                    79:40:aa:3c:b3:8e:13:60:4e:f5:92:74:a4:4e:b0:
                    72:e8:c9:66:38:a8:ce:94:77:37:64:90:7d:16:4f:
                    42:a0:e5:f6:4a:e5:3a:ee:b3:c5:75:90:34:7f:87:
                    0c:5e:3a:cd:cd:34:23:7a:40:9a:49:8b:75:48:54:
                    2a:98:33:55:f0:7c:f4:cb:cd:74:18:2e:04:11:a2:
                    8e:f5:1b:c3:46:ac:e6:f4:d4:57:f1:ba:9f:f5:91:
                    f1:cf:01:75:60:0a:3b:a7:66:00:19:5b:24:03:81:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:46:58:38:A3:0A:5C:CB:2A:D9:17:50:B7:72:25:BB:24:56:FC:65
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4d222e45-9ca1-4e52-8f0b-301ec4d48263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:84:67:56:88:bc:67:91:e3:84:64:91:12:08:9f:d4:85:78:
         97:06:0e:d9:e6:7c:92:d1:03:40:bf:48:73:d3:8c:e2:d1:c9:
         c8:2a:0e:97:7d:02:68:be:cf:d4:37:0b:7f:5d:98:ff:02:21:
         d1:87:ff:73:d9:5a:4a:91:5a:87:e4:d2:34:8e:6e:98:d1:b0:
         85:98:e4:54:8d:55:b3:95:d9:c4:23:fb:a1:16:5f:0d:88:0d:
         e2:52:4a:f8:42:58:c4:15:a3:ea:94:8e:3d:43:76:99:84:f1:
         db:8e:70:95:6d:b6:d4:03:ae:ee:bb:bc:94:fc:86:42:e6:62:
         7f:b2:63:47:13:d3:f1:dd:47:d5:2c:f6:b3:f0:f9:e5:02:be:
         eb:c6:f4:f8:d7:b0:88:d0:37:5a:61:62:e2:e7:b6:ff:1a:77:
         b0:16:d2:da:21:56:53:aa:f4:31:95:18:10:a5:4c:a7:a8:16:
         cb:bd:18:00:44:3a:2e:bc:b7:02:96:ef:b3:95:aa:0e:bc:49:
         67:b6:c9:6b:17:91:ef:b4:f6:00:b0:b3:a1:84:92:f1:90:66:
         2d:ea:c7:3d:b7:23:c4:52:d0:db:8c:60:ee:5c:cb:fa:97:4b:
         81:0a:df:ba:68:bd:d2:c4:6b:73:8d:43:7c:ff:bd:37:27:53:
         50:fa:77:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----