Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/25e29c75-f56f-4e7c-91ca-62da11a607f5.roa
File:                     25e29c75-f56f-4e7c-91ca-62da11a607f5.roa (raw, json)
Hash identifier:          alkSHhOSHbxHMslBL+1sHUM6SjuVfO1B8LIFcexJ3oQ=
Subject key identifier:   51:92:A2:DE:85:36:04:6E:92:6C:90:3B:55:EB:37:2B:01:B6:90:A4
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       55F57706038D1DF56B2B71C7FF0A961FB4728CD2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/25e29c75-f56f-4e7c-91ca-62da11a607f5.roa
Signing time:             Sun 29 Oct 2023 00:00:00 +0000
ROA not before:           Sun 29 Oct 2023 00:00:00 +0000
ROA not after:            Sun 03 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f5:77:06:03:8d:1d:f5:6b:2b:71:c7:ff:0a:96:1f:b4:72:8c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 29 00:00:00 2023 GMT
            Not After : Dec  3 23:59:59 2023 GMT
        Subject: serialNumber=79000c345047db84be59b5461eb6e340e7afb5b58859a0b704fe140b7f33597d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:b7:ba:17:e6:0d:52:bc:df:f1:75:88:85:
                    b7:58:7d:2f:9f:8f:9a:46:53:51:be:32:b6:8f:29:
                    35:93:db:d2:10:1b:32:c5:72:e2:c5:6d:85:4b:bc:
                    04:1b:f4:27:08:78:0c:4f:01:52:42:c6:2e:dd:d3:
                    fa:cd:31:bf:22:c9:83:ae:8e:c3:eb:b8:30:6a:08:
                    a0:b3:56:bc:24:8a:e7:75:0d:49:0a:3b:ea:64:b7:
                    65:a7:cd:b3:02:51:80:68:bb:e7:53:d0:88:e4:d8:
                    1d:36:2b:c9:72:13:59:01:17:2f:3d:d1:fd:b6:7c:
                    a6:6c:9b:f7:b6:c8:0d:f7:49:45:b2:8f:af:14:97:
                    ce:49:7a:e4:52:ac:f0:e4:b7:52:e4:fb:f3:05:9a:
                    ba:22:75:d3:f2:71:f3:3c:72:25:ae:bf:de:2e:a3:
                    82:d2:b3:52:13:0b:cf:51:1b:01:42:ec:d2:5f:0a:
                    94:5b:03:e1:e1:65:8a:2b:13:6d:c7:85:60:db:4c:
                    c1:07:31:e1:05:a3:85:9c:c2:5f:ca:f2:48:d8:35:
                    5b:66:5a:35:9f:f1:7e:ab:f5:ef:86:12:df:3c:57:
                    ab:a7:4a:f9:e2:e4:00:9b:b3:a4:4b:89:f4:28:13:
                    e6:6e:cd:a1:0b:d0:91:b0:43:f1:8e:c1:4f:ec:04:
                    09:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:92:A2:DE:85:36:04:6E:92:6C:90:3B:55:EB:37:2B:01:B6:90:A4
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/25e29c75-f56f-4e7c-91ca-62da11a607f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:92:10:b5:17:b6:18:4b:60:f5:3d:fa:6a:3f:0b:03:7c:b1:
         19:d1:ba:7b:2b:a8:8b:66:6e:fa:ba:25:ea:3a:45:8a:36:1e:
         18:f6:01:86:b4:34:ce:70:3f:26:d4:bb:64:6d:f9:00:bb:75:
         2a:ee:4c:02:5b:d1:3b:9a:ef:30:88:1e:1c:a2:30:92:45:2e:
         82:45:ac:bb:17:bc:d4:1d:db:cf:b6:1d:98:f8:87:56:6a:a5:
         12:36:8b:12:b3:cd:89:b2:15:d6:7e:7d:55:33:6d:ca:38:3b:
         6f:90:28:7f:74:b0:28:67:9b:2b:a6:67:f4:9d:f1:2b:28:92:
         e5:73:76:d2:4c:be:07:70:24:28:61:1e:aa:81:73:f1:7e:6f:
         9a:5f:d6:d5:4d:a8:f2:84:28:35:cc:d5:5c:26:c4:a5:56:8c:
         8f:b1:95:f9:8e:de:44:c3:b1:ab:72:1c:78:58:dc:56:c4:91:
         07:cd:38:eb:b1:b6:7e:43:88:8d:21:40:05:93:b2:ff:23:e7:
         41:56:c2:3a:1e:f3:24:da:a4:65:d3:30:ac:b5:67:5c:ae:1e:
         26:ce:ff:d5:35:9b:75:46:ee:f7:6a:5b:4b:3c:26:f7:31:94:
         01:79:fe:0b:a5:e8:a8:1e:33:b1:a4:35:79:2b:4d:f3:a6:37:
         b0:2f:40:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----