Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0a56210d-1aad-46d0-833b-92a1a0402af3.roa
File:                     0a56210d-1aad-46d0-833b-92a1a0402af3.roa (raw, json)
Hash identifier:          0KLsxeDo8DY0MaaHrNO2XpcWGepxy9GDaPa78TIYTn8=
Subject key identifier:   DE:28:8F:9C:F2:B2:AD:D6:CF:A9:72:3C:2B:C2:82:FF:7C:8B:A0:66
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       30432F152138249E95741C83945E4D7D9256886A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0a56210d-1aad-46d0-833b-92a1a0402af3.roa
Signing time:             Wed 21 Feb 2024 00:00:00 +0000
ROA not before:           Wed 21 Feb 2024 00:00:00 +0000
ROA not after:            Wed 27 Mar 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:43:2f:15:21:38:24:9e:95:74:1c:83:94:5e:4d:7d:92:56:88:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb 21 00:00:00 2024 GMT
            Not After : Mar 27 23:59:59 2024 GMT
        Subject: serialNumber=d84e9b5f5e2402d28f4bd6288707e374b1e5bea1cbac75766cdbd185668216a0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:35:77:c4:2e:d8:58:79:f4:01:bd:b0:e9:
                    88:67:04:e6:65:c4:e4:22:52:ea:9c:de:27:ba:97:
                    4b:7d:1b:db:59:0e:9f:ca:6f:f9:b9:f8:7d:5a:0a:
                    c6:42:aa:d7:de:4b:ed:82:39:fe:0e:e5:2f:15:49:
                    7d:d6:08:6f:fc:13:d8:a3:a9:76:13:e3:f4:b9:3d:
                    c3:3d:e7:62:80:fd:b3:35:f8:28:10:a8:0b:ff:0e:
                    f1:c9:7e:19:c6:9c:52:1d:81:61:b6:a1:0e:0d:8b:
                    07:5a:13:96:ba:88:f9:6a:97:7d:0c:06:20:10:87:
                    57:7e:ef:be:ab:f9:37:07:ef:0c:33:3e:44:d3:ce:
                    ad:72:84:f9:00:0f:2d:41:44:fb:5f:e6:a6:a6:71:
                    01:72:95:e4:f7:06:9a:74:d4:6b:3f:d9:53:4b:b5:
                    e6:9f:12:f5:f5:d7:0b:53:bf:ee:c9:15:bc:cb:a1:
                    fe:be:55:5b:2a:e8:bb:64:c5:97:e5:5e:d6:ae:9b:
                    5e:ec:54:3c:cd:a7:41:8b:5b:d0:c2:ca:cc:9d:a2:
                    01:8b:38:7e:f2:21:f5:47:0e:82:4b:e8:df:c7:45:
                    95:25:6b:e0:22:ba:96:ba:5e:37:08:12:74:e7:4c:
                    18:b1:91:c0:22:83:68:92:3a:fe:9e:26:90:05:17:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:28:8F:9C:F2:B2:AD:D6:CF:A9:72:3C:2B:C2:82:FF:7C:8B:A0:66
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0a56210d-1aad-46d0-833b-92a1a0402af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:dd:ab:23:ba:35:78:c9:65:59:cc:bd:91:e5:f0:bf:d3:bb:
         a5:5f:1a:02:c4:6c:ae:0c:fd:0b:16:bb:11:8e:01:04:01:c2:
         d3:33:fa:45:bb:34:2d:83:b6:04:8a:da:42:82:57:c3:ed:70:
         5b:cc:0c:11:c0:7b:53:8b:91:7f:4d:98:fb:de:d4:6b:2e:6d:
         dc:e3:3e:83:84:0f:e9:ca:43:af:ee:71:57:5b:cc:4e:1e:1d:
         31:aa:75:04:89:a0:99:ee:58:f3:58:e9:7f:e3:a5:e0:a4:52:
         a0:03:b2:b5:89:af:1f:29:bc:c7:29:a5:39:57:9e:33:7e:36:
         36:25:e6:2e:1f:0a:35:ef:5c:f9:b2:8f:33:5b:2d:dd:60:e2:
         44:3a:35:b6:5e:49:4c:36:60:02:27:76:29:68:06:8d:2d:8b:
         0b:1c:53:6d:17:5d:9f:3f:a7:e6:03:e6:02:1e:03:9d:bb:64:
         5b:1b:b1:28:dc:75:9e:90:a3:cd:ef:ec:08:45:17:3b:5b:39:
         0d:c5:d5:42:5f:e2:94:18:34:71:6c:ae:39:f4:ac:e2:dc:d7:
         af:7c:fb:d4:f0:3d:24:8d:66:07:c5:57:2e:e0:82:75:ed:ce:
         84:5f:78:8a:88:a4:45:c7:1e:76:a7:47:20:d0:17:33:0b:1d:
         12:f6:e6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----