Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1a7249a1-d4f1-45a4-b664-228be18a23c2.roa
File:                     1a7249a1-d4f1-45a4-b664-228be18a23c2.roa (raw, json)
Hash identifier:          a4PRfkHyXYQwl0FZIatENmYNOqlle2LFjPSfoAR3xQg=
Subject key identifier:   66:4D:16:50:32:FA:83:37:34:71:70:54:12:91:A3:AC:15:9B:1F:29
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       287F58FDB117F7AD93A836C05D022BF2F34B3241
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1a7249a1-d4f1-45a4-b664-228be18a23c2.roa
Signing time:             Tue 07 Nov 2023 00:00:00 +0000
ROA not before:           Tue 07 Nov 2023 00:00:00 +0000
ROA not after:            Tue 12 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7f:58:fd:b1:17:f7:ad:93:a8:36:c0:5d:02:2b:f2:f3:4b:32:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov  7 00:00:00 2023 GMT
            Not After : Dec 12 23:59:59 2023 GMT
        Subject: serialNumber=3ac232f5d36846f157ba9f054df3b9f768ca72e604d85626b670432c450ae34f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:bb:7e:61:05:18:ca:63:3c:8e:cb:cc:ee:
                    c4:7b:32:c4:85:42:cb:46:06:af:08:9b:26:01:a8:
                    f8:14:f4:b2:44:80:a4:ca:90:34:cc:f9:9d:42:e1:
                    34:60:91:ab:73:e0:d5:6e:41:71:1e:ab:0e:a6:29:
                    fd:6e:77:a5:92:97:8a:7e:e7:3e:bf:f5:71:30:e8:
                    ab:b8:6e:14:89:33:7b:39:45:75:c0:ea:a0:14:9d:
                    c1:b5:32:d5:6c:88:da:e6:0a:33:d1:bf:45:2d:0c:
                    15:e4:46:2c:d2:1b:da:f9:40:6d:49:4e:05:fa:30:
                    48:1e:ce:0d:3f:e2:fb:d9:2d:58:cf:43:5a:9a:8c:
                    f1:94:72:7e:f2:be:82:10:da:d6:fe:2c:31:4f:00:
                    66:da:39:2f:eb:e4:ff:7b:6c:e8:ad:55:0b:eb:3b:
                    e7:9a:2a:67:bc:a9:2a:d5:5d:d3:48:98:d7:9e:32:
                    fc:c7:c6:6f:4b:d8:99:16:34:3f:91:72:ae:e7:59:
                    c8:0e:ac:2d:b9:98:36:bd:9d:3f:63:3c:d5:ac:9a:
                    5d:8a:28:8f:aa:51:fb:2b:6e:d6:9b:fd:43:64:8e:
                    d3:0b:d8:00:95:c0:cb:29:9b:e1:ae:32:61:fd:5a:
                    9e:23:ad:01:44:fb:9e:81:45:58:0b:a4:f3:a8:8f:
                    34:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4D:16:50:32:FA:83:37:34:71:70:54:12:91:A3:AC:15:9B:1F:29
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1a7249a1-d4f1-45a4-b664-228be18a23c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:7b:26:88:6e:1c:7a:2c:ad:db:d3:95:6e:96:5b:77:2b:e5:
         bf:57:cb:4a:83:34:ff:17:2f:f9:d6:a5:f4:0d:83:86:0f:e0:
         54:2b:c3:62:82:df:50:cf:f8:38:eb:ff:48:33:05:e4:89:da:
         48:c3:03:8b:da:1f:25:93:4d:97:79:25:7e:75:04:3b:40:df:
         24:30:7f:a1:2d:61:ba:ae:3f:6f:86:dc:7e:40:0c:70:b8:15:
         8a:8e:f8:79:7e:c5:08:4e:d2:c6:b0:f9:77:b0:31:19:75:b9:
         0c:7f:0c:b0:2a:c9:8a:14:d3:3d:3a:99:15:94:40:1f:1a:eb:
         2b:99:4f:ae:70:bd:31:f3:ff:ee:72:cf:28:74:4f:93:d2:0c:
         ae:fd:58:ce:1d:e4:ad:d2:60:97:6f:6f:81:14:a3:92:a8:44:
         8b:2a:f5:bf:1f:36:d5:6a:d1:6e:ab:ed:d2:fc:50:ea:a8:89:
         5d:1b:82:ae:f1:fa:85:42:1e:6c:fb:7c:ce:24:e3:c7:d0:6f:
         30:ba:eb:88:de:08:91:e7:35:74:5c:03:23:32:e8:0c:3d:6c:
         f9:f6:bf:77:fe:cf:c8:ee:3f:ea:d6:c0:22:a9:e5:55:e8:b8:
         69:a4:2c:e3:89:75:82:56:eb:43:10:82:03:26:45:6f:26:da:
         7e:4f:26:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----