Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/357694a6-d97d-48a9-ad35-888282daa587.roa
File:                     357694a6-d97d-48a9-ad35-888282daa587.roa (raw, json)
Hash identifier:          YVZ12+N7fk8KvrC2N41mhx2J1TP9LRtTz62BQmXpxUg=
Subject key identifier:   A9:A9:EE:F1:7D:4F:5A:67:3B:B9:D6:C3:1A:71:C0:43:73:36:88:D5
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       61EEB0CF3F7E649EC36FB0F2F3D63C2CA5F9D421
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/357694a6-d97d-48a9-ad35-888282daa587.roa
Signing time:             Sat 04 Nov 2023 00:00:00 +0000
ROA not before:           Sat 04 Nov 2023 00:00:00 +0000
ROA not after:            Sat 09 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ee:b0:cf:3f:7e:64:9e:c3:6f:b0:f2:f3:d6:3c:2c:a5:f9:d4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov  4 00:00:00 2023 GMT
            Not After : Dec  9 23:59:59 2023 GMT
        Subject: serialNumber=198a4e38e3d70fd02a3e2f8fb379e5202b5129832a12fd1008e7de4054995d42, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:96:cb:25:fe:67:7c:82:f3:b1:70:65:13:8b:
                    c8:64:01:2a:34:df:fd:aa:d5:d5:76:c9:98:c4:d2:
                    16:cd:e8:aa:79:28:3e:35:1a:f1:f3:2b:62:ef:fe:
                    c3:93:21:9e:cb:21:34:e0:33:67:0a:2c:32:93:3f:
                    2f:6c:5a:36:c7:56:ea:8c:40:5c:ae:0a:c1:74:28:
                    80:64:3d:aa:ad:6b:19:ad:cc:c5:cb:09:ea:3a:ce:
                    4a:10:86:79:3b:de:ae:48:be:61:f4:49:a9:43:96:
                    e7:ea:5a:5c:c0:ec:d5:47:0e:38:86:56:bf:32:6b:
                    2f:b7:55:0e:09:16:a3:ea:42:87:38:ac:c3:a7:d5:
                    84:5b:68:90:c8:36:ea:ff:87:3b:9b:06:9c:c3:32:
                    48:ca:aa:ed:28:57:7e:a2:49:e9:90:b1:48:1f:8b:
                    89:cd:ad:ff:95:1b:78:9c:56:c9:08:27:71:fe:46:
                    51:29:74:91:95:30:51:bb:5f:5c:a1:c7:5f:03:0d:
                    9d:d5:81:ed:a3:f0:5f:99:9b:f0:f0:a9:0d:bd:93:
                    44:26:97:ed:42:8b:4a:0b:a4:7f:b4:6d:c0:5b:32:
                    b1:62:c3:b4:0c:9f:98:a1:1c:af:a5:22:a9:9b:8b:
                    ca:61:0d:28:7a:90:35:6e:32:09:40:33:2c:a3:d1:
                    84:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A9:EE:F1:7D:4F:5A:67:3B:B9:D6:C3:1A:71:C0:43:73:36:88:D5
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/357694a6-d97d-48a9-ad35-888282daa587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:8d:6d:0d:ae:76:b4:d7:b5:4a:d3:40:aa:a1:8c:5c:b8:f2:
         1a:49:7c:30:1e:b6:f7:59:64:ef:8c:71:b5:44:51:ec:b8:b5:
         51:41:2f:ab:75:ac:d3:1c:e8:fa:0f:e0:fa:08:38:c2:d9:76:
         59:58:be:3c:28:64:c3:ff:39:2b:02:7a:ae:24:51:75:a4:55:
         95:37:4d:06:fb:68:17:f1:73:0c:96:02:02:46:20:ab:31:7e:
         9b:a7:a0:48:7b:86:df:9c:a7:2b:2f:6e:9c:79:b2:12:16:3e:
         dd:82:91:ef:bb:53:db:37:83:8e:91:0a:76:75:f4:55:ef:98:
         50:0f:15:36:a2:56:a2:d3:30:a2:eb:da:4c:cc:79:c1:34:98:
         c8:b9:c5:48:5c:01:09:4d:d0:87:4b:d9:55:71:85:7c:12:15:
         72:b6:41:4c:b7:2f:1d:12:67:9a:73:b4:58:ba:cc:83:c9:0a:
         41:92:e2:90:1c:da:0e:45:8f:49:50:d1:82:5e:f9:0e:9b:1c:
         54:b8:54:10:e0:d9:5b:a6:95:36:29:f5:46:4f:08:b8:bf:70:
         1e:cb:f2:d4:09:06:65:23:3b:08:c2:f4:09:c6:48:b3:61:68:
         01:54:9e:8e:92:45:75:49:ef:a8:5d:42:79:d4:4a:21:5d:07:
         3f:35:a8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----