Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/525beeee-4959-49fa-9658-b17da7f4cbbe.roa
File:                     525beeee-4959-49fa-9658-b17da7f4cbbe.roa (raw, json)
Hash identifier:          I1lMU+U6s6OcRvF1CbYQuzmf95cWOB2TanmqKiRoZxc=
Subject key identifier:   06:64:50:D0:72:44:09:42:E4:6D:1F:23:0C:B8:52:50:12:6E:09:A7
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7D9E87679BB84F2167C2300027403C19DD41F64E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/525beeee-4959-49fa-9658-b17da7f4cbbe.roa
Signing time:             Mon 13 Nov 2023 00:00:00 +0000
ROA not before:           Mon 13 Nov 2023 00:00:00 +0000
ROA not after:            Mon 18 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9e:87:67:9b:b8:4f:21:67:c2:30:00:27:40:3c:19:dd:41:f6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 13 00:00:00 2023 GMT
            Not After : Dec 18 23:59:59 2023 GMT
        Subject: serialNumber=680c7ae2bf23cbb8b281397f50d406aa9d031e5f19c3fc314ef7a61cab48f6f2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:5c:6a:3f:d8:a7:ab:33:38:32:bc:f8:bd:
                    79:a9:66:bc:e1:3d:73:e7:69:c7:1a:ca:bb:71:25:
                    ae:e1:cc:dd:ae:76:0a:79:01:ab:2d:31:8f:72:9a:
                    61:f2:75:34:3c:ce:8c:a1:5f:c0:50:bb:97:cc:6f:
                    f1:57:78:2e:e2:dc:ff:5c:35:e4:f0:13:1b:67:7e:
                    cb:f3:79:c4:e0:4c:f4:7f:c9:99:9a:2f:12:79:49:
                    30:67:e1:d4:fd:06:d3:70:82:1d:8e:8d:6a:47:97:
                    3d:78:da:a5:26:09:58:23:97:16:e6:38:74:f0:2d:
                    3a:f1:f4:0a:e9:76:aa:ed:b1:8d:2e:d4:a7:f4:2f:
                    bd:bc:89:13:8b:79:7f:25:48:3f:2e:aa:e1:04:08:
                    37:36:84:9c:57:d5:9e:07:1d:3f:b7:55:a8:58:a2:
                    f3:4c:85:c6:70:67:34:62:d6:00:41:97:6f:50:69:
                    95:4f:e1:0a:e0:b6:28:12:3b:c9:e4:5b:ff:03:5e:
                    33:96:5c:fe:29:b3:9f:e6:28:f8:e6:d1:19:7a:e2:
                    01:2b:d0:ac:85:3d:23:6f:cc:7f:1e:fd:5c:45:6a:
                    e0:63:f0:df:e7:24:89:66:8d:49:e9:ec:68:47:c8:
                    c8:dd:4d:17:45:1d:3a:37:13:29:ea:26:08:2f:32:
                    0c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:64:50:D0:72:44:09:42:E4:6D:1F:23:0C:B8:52:50:12:6E:09:A7
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/525beeee-4959-49fa-9658-b17da7f4cbbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:55:7f:31:81:e4:bf:2c:17:f5:bc:c8:92:10:e5:b4:d4:fc:
         01:34:f8:c8:38:f5:13:fc:d2:cf:b7:35:3e:c5:b0:e0:dd:56:
         b3:0b:9e:5d:14:71:78:e7:40:dd:34:c5:a8:ed:c1:a6:17:c2:
         15:5d:3c:25:a7:76:34:62:47:89:a0:df:96:3e:d6:17:59:8d:
         08:59:e1:70:04:b0:79:68:85:25:94:56:71:bc:32:64:0a:24:
         7c:4f:54:54:46:3f:dc:1f:30:7b:19:1b:0a:44:6c:9e:d9:30:
         23:65:60:a4:00:b8:3c:5d:b8:c1:86:cc:ee:58:2a:d0:41:be:
         89:c3:d8:44:4d:de:62:1b:10:c0:a0:e5:b1:e3:5a:c9:c9:57:
         41:56:a7:55:14:55:90:40:e9:87:aa:49:72:99:aa:23:96:95:
         91:d7:3d:5a:d7:25:26:30:e9:0b:f7:e2:79:80:a4:97:24:7d:
         a5:01:81:44:1d:73:b8:49:6b:42:06:63:d1:bf:24:69:df:03:
         13:76:18:a9:d5:1c:48:ff:f1:25:07:a1:af:96:f1:fd:f5:74:
         45:a8:5e:a8:9c:c5:a8:c1:04:0a:e2:a0:5a:f2:8a:ae:71:19:
         8d:8b:3a:44:d6:de:5b:6e:16:e4:b2:49:87:fd:d6:da:d0:06:
         1f:93:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----