Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/393a5ed9-3c2a-4fb9-9212-0d0a9b2e2f3b.roa
File:                     393a5ed9-3c2a-4fb9-9212-0d0a9b2e2f3b.roa (raw, json)
Hash identifier:          X4etHZOipc5Umh1zDHQUvBr/T7BLQly8+iIT+L+ktM0=
Subject key identifier:   89:33:31:3A:68:2E:3C:E5:85:99:4C:3F:4F:E6:80:5C:3B:6A:AF:42
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6DA3AA8011429884D778F78CBB60C935F7A4B1C6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/393a5ed9-3c2a-4fb9-9212-0d0a9b2e2f3b.roa
Signing time:             Fri 03 Nov 2023 00:00:00 +0000
ROA not before:           Fri 03 Nov 2023 00:00:00 +0000
ROA not after:            Fri 08 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a3:aa:80:11:42:98:84:d7:78:f7:8c:bb:60:c9:35:f7:a4:b1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov  3 00:00:00 2023 GMT
            Not After : Dec  8 23:59:59 2023 GMT
        Subject: serialNumber=062bcc684453e66bd8b5532bcf72f6228d162e5d2ba0fa13fe78aa37df5ab76b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:79:a7:88:bd:dd:74:52:98:d4:c4:de:51:71:
                    65:af:39:60:ab:61:cf:61:b3:8c:70:c5:e9:75:ea:
                    51:3c:76:ef:62:2b:1d:2a:39:28:a0:7d:9d:ae:3e:
                    8b:06:bf:7b:25:ee:c1:1a:a6:ba:cd:81:9c:d7:2c:
                    6e:82:e5:3b:a7:bd:d9:80:b8:99:e2:84:17:93:fc:
                    05:e2:79:4b:d0:db:30:f2:d9:6d:25:89:a1:dd:81:
                    d4:b3:ec:27:1e:61:aa:f3:e9:d1:9b:89:a1:b0:b4:
                    34:d5:95:eb:09:92:1e:a7:46:ec:f3:2a:17:23:39:
                    8b:76:99:51:ec:96:e0:1e:92:09:ab:a8:c6:58:3d:
                    16:1b:d9:d4:b6:90:26:56:ed:f2:43:f9:8f:bc:d2:
                    2d:e0:d8:84:09:f5:5f:bb:4d:2b:95:09:9b:50:a9:
                    d9:90:72:85:f1:5b:7a:2a:0e:7b:32:40:36:e6:bd:
                    74:60:1b:ec:6e:f0:cf:32:8a:bb:f9:d7:1a:26:b6:
                    b0:33:49:a8:42:4e:ac:9a:4c:fe:57:91:ba:f2:2c:
                    8d:a4:9e:ea:7d:60:a9:7c:81:d2:89:80:e5:2d:70:
                    76:50:69:dc:16:b5:db:d0:f4:19:7a:c3:3c:69:fb:
                    63:56:a7:17:38:15:c2:ab:8d:36:bb:7e:81:1d:a6:
                    88:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:33:31:3A:68:2E:3C:E5:85:99:4C:3F:4F:E6:80:5C:3B:6A:AF:42
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/393a5ed9-3c2a-4fb9-9212-0d0a9b2e2f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:75:c7:96:17:47:4e:21:ac:b4:4e:c2:26:28:f2:1d:0b:55:
         79:e4:f6:56:2b:8d:3f:9b:4b:8a:ec:25:4e:8d:99:2e:7d:44:
         98:c0:7a:d5:77:57:2a:10:fa:d3:5c:1e:a4:e6:c4:99:d4:46:
         27:77:0d:9c:e0:36:7e:c1:de:90:b7:35:51:3c:4d:5a:ea:0c:
         8f:e7:84:8e:c9:78:5a:c8:84:97:ef:13:54:b0:7d:10:1f:b7:
         b1:40:c3:44:55:b1:64:ad:86:5a:74:8a:11:60:0e:5e:84:4b:
         9a:87:f5:db:1e:c7:0a:08:02:b1:87:c7:71:4a:a6:bc:17:3b:
         26:95:19:70:b6:e4:0f:68:5e:f1:70:a8:bf:61:69:1c:fe:95:
         e4:78:dd:8a:ad:fa:9d:24:77:40:0d:33:4b:10:75:2c:3f:b3:
         e9:38:fa:7a:1b:e3:79:56:7a:5d:53:ba:44:55:3c:ee:32:1f:
         60:89:8c:aa:e5:dd:1a:ee:7e:a7:35:93:87:99:0f:28:80:85:
         32:f8:a7:9f:83:e1:79:34:61:3f:6c:1e:48:8e:75:ed:b1:f2:
         2b:25:a1:4d:33:0e:bc:48:b9:8a:27:3d:2b:05:0e:90:b4:56:
         d5:40:07:f8:0e:11:b3:2b:bf:0b:93:87:ae:e6:4a:5c:e8:16:
         07:38:31:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----