Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/28eb3097-7d6b-4328-a649-fd38a2906ecc.roa
File:                     28eb3097-7d6b-4328-a649-fd38a2906ecc.roa (raw, json)
Hash identifier:          SE7gynLv28X0CvsdzCrkVuJlpeqUySfnUE2ooPltMX0=
Subject key identifier:   BF:C6:9E:3E:CC:DF:39:17:48:9B:5C:C6:0F:FD:52:57:75:F5:A5:7C
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       35FB19F331B197418A7D03F959408687C9FEAEF3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/28eb3097-7d6b-4328-a649-fd38a2906ecc.roa
Signing time:             Thu 23 Nov 2023 00:00:00 +0000
ROA not before:           Thu 23 Nov 2023 00:00:00 +0000
ROA not after:            Thu 28 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fb:19:f3:31:b1:97:41:8a:7d:03:f9:59:40:86:87:c9:fe:ae:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 23 00:00:00 2023 GMT
            Not After : Dec 28 23:59:59 2023 GMT
        Subject: serialNumber=8b4435fb514e172c6c62f2ea43c1f1458ce5a4ffdc708919e8b99714e8eedc23, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:0b:39:88:15:9c:52:c8:01:04:fb:fc:e0:
                    67:10:55:a3:4f:36:85:53:26:a8:98:b1:f8:a9:95:
                    9e:61:b5:31:dd:58:d5:8a:d0:77:d7:fb:88:50:98:
                    19:ef:98:ca:d7:2c:fe:6c:23:ac:2b:6c:fd:86:38:
                    46:4d:d2:f9:64:a4:7e:10:95:93:33:0c:b9:1f:83:
                    90:19:75:34:c1:da:42:f1:a4:2e:d3:fd:a4:ee:4e:
                    0c:3c:37:67:8c:27:6f:c9:7e:ba:1c:52:a0:73:6a:
                    33:d4:7e:1a:0b:e9:63:85:b9:3f:31:70:2d:86:37:
                    56:f5:5e:a5:8c:99:5b:cf:11:c2:f4:9b:c3:bc:a3:
                    e0:52:1a:96:ed:72:d8:18:e6:2c:b0:1e:23:6b:54:
                    7c:5b:76:9f:ed:f1:e9:81:74:8e:3f:4f:4d:02:3e:
                    c0:45:a9:17:53:a7:5b:3f:4a:e8:fc:54:dd:b1:e9:
                    dc:1c:cb:e2:bf:8d:d9:62:0a:2b:2e:3f:1a:b4:67:
                    e9:c7:a6:c1:31:c4:11:ef:5e:9f:f4:c8:89:39:dd:
                    08:bc:b5:38:68:ae:f8:d3:8f:71:37:bd:dd:a1:17:
                    73:70:ef:21:00:15:6b:b5:5b:59:d5:00:ec:23:8a:
                    3c:a2:42:1c:72:9a:d1:27:ec:84:b7:c5:b8:ea:24:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C6:9E:3E:CC:DF:39:17:48:9B:5C:C6:0F:FD:52:57:75:F5:A5:7C
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/28eb3097-7d6b-4328-a649-fd38a2906ecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ac:bb:40:f4:e6:77:c0:2c:1c:c3:88:7f:7e:06:b6:19:85:
         aa:2b:b1:d4:2c:66:72:3d:00:1b:fd:ac:47:36:55:fd:49:ae:
         fe:2b:20:90:88:a2:c6:77:53:9f:25:bd:70:af:41:ca:95:1f:
         f8:b0:8d:49:a5:b4:9b:df:c6:28:d6:4f:c9:2f:1f:90:1a:45:
         62:b7:e7:44:44:63:9d:05:bf:6c:a5:76:7c:95:e9:c9:e5:c7:
         6a:1d:55:af:61:ec:1d:25:10:88:fe:0f:ef:cb:05:fc:6c:57:
         b7:23:61:ce:d4:27:7d:15:a5:78:f8:b8:33:2f:80:4a:57:9a:
         a8:bb:62:b6:46:cc:8a:b7:7d:59:ee:14:1d:58:3c:8c:aa:71:
         27:f8:a0:d1:3b:12:4d:0a:f1:4a:85:be:07:eb:ba:aa:cb:ba:
         91:8c:93:38:5c:86:20:dc:2a:1b:b8:37:99:e8:80:89:fd:0c:
         ed:ea:68:e6:0e:b8:ce:19:46:e2:79:6a:81:19:70:16:aa:42:
         5b:1a:60:38:82:50:64:06:ba:5f:ce:81:85:ac:75:3d:82:21:
         e9:b3:29:a8:ff:b2:88:f7:e6:da:c4:91:7b:5d:48:0e:bc:1c:
         1d:c1:8e:9d:b0:23:fa:1d:0f:35:63:6f:51:40:da:dc:86:89:
         8e:5a:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----