Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/40058af0-a2a5-46b2-a9a6-152727524567.roa
File:                     40058af0-a2a5-46b2-a9a6-152727524567.roa (raw, json)
Hash identifier:          jW8XUiPQYWtaos19Z7Sk9atMTUaVSqcp03YmeDmy3X8=
Subject key identifier:   D5:B4:1C:86:2A:A7:4D:68:F0:8B:E7:4E:75:41:DC:82:6B:3B:71:27
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5A7F064C1E18E2E742110B29313C8CFE5B531F1F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/40058af0-a2a5-46b2-a9a6-152727524567.roa
Signing time:             Wed 07 Feb 2024 00:00:00 +0000
ROA not before:           Wed 07 Feb 2024 00:00:00 +0000
ROA not after:            Wed 13 Mar 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7f:06:4c:1e:18:e2:e7:42:11:0b:29:31:3c:8c:fe:5b:53:1f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb  7 00:00:00 2024 GMT
            Not After : Mar 13 23:59:59 2024 GMT
        Subject: serialNumber=b2c0237f4cdf969b424305227dd964c399bfe622b7739e2b2af61f6ef9b2b287, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:18:34:1f:04:55:78:62:1b:0b:3e:ac:0a:7b:
                    63:fb:00:d8:53:e1:78:37:9e:24:3c:6e:a6:15:11:
                    16:47:d2:3f:de:e3:6d:c6:95:2f:45:6d:e5:0b:4f:
                    36:f6:14:e1:6c:54:3d:ed:21:c8:65:b4:e8:d6:8e:
                    0f:63:4e:e8:fb:8d:6e:0a:97:d8:17:3f:2e:72:6a:
                    d6:4f:95:a9:61:11:4b:99:24:e0:1d:39:65:bf:a5:
                    bc:fb:48:85:11:44:91:c3:bd:1e:69:b5:f1:1c:db:
                    35:8e:5b:72:49:41:3e:3c:c1:64:d0:a9:8f:8d:b4:
                    a5:53:1c:59:56:ed:d8:11:04:1d:31:ea:38:e6:b1:
                    c3:44:3c:7b:c7:6d:22:98:ed:4c:e5:57:64:ef:73:
                    09:ba:64:35:e4:54:b2:90:05:ba:e5:69:c2:45:b3:
                    cb:c1:28:99:f2:1b:f0:29:bf:fb:8a:57:fb:db:04:
                    13:6a:96:de:9c:ed:75:87:7b:59:13:e8:95:19:f2:
                    44:0d:b1:7c:a1:38:95:36:1c:d5:5a:51:90:66:74:
                    90:cf:b7:13:a3:55:4e:19:d2:d6:79:4b:ee:39:13:
                    a8:98:05:76:cd:3e:79:a1:2f:84:cf:8d:8e:00:55:
                    1e:24:fb:41:02:01:e2:1d:fa:68:d6:29:9a:49:60:
                    43:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B4:1C:86:2A:A7:4D:68:F0:8B:E7:4E:75:41:DC:82:6B:3B:71:27
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/40058af0-a2a5-46b2-a9a6-152727524567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:f4:c3:eb:56:e8:7e:db:5e:8e:60:e4:31:7b:a3:09:e9:df:
         ee:84:17:b2:4a:e3:43:6b:ca:a8:55:f1:a4:bd:a0:29:b1:09:
         27:d9:1a:bb:aa:3c:96:83:b1:07:2c:e9:82:2a:b5:6c:b8:14:
         71:1b:55:9e:eb:ef:93:b3:b0:8a:a4:78:bc:ff:df:36:13:83:
         04:10:78:76:2d:ab:b1:63:6f:3d:ec:b0:93:2f:38:ec:42:d7:
         5a:97:97:71:8e:91:75:66:b7:f4:9a:60:f5:61:5f:8c:a7:64:
         8b:56:9b:70:39:44:c4:82:84:53:07:5d:9e:28:31:f1:92:88:
         aa:1f:34:b1:ae:1c:cf:bf:96:12:a7:09:97:da:d6:85:56:88:
         80:e4:32:94:3e:1a:08:c7:92:fb:1f:db:17:89:ec:09:5c:d6:
         db:b0:6b:93:b3:09:79:64:7e:07:91:16:bd:6c:2b:cf:2b:f4:
         56:7c:46:4e:9c:65:21:f4:11:b7:a9:f2:11:50:4b:b1:80:48:
         6c:6b:07:78:9b:a1:c2:4a:9b:ad:b8:b2:8f:e1:11:90:2e:30:
         d0:36:ad:c6:89:cd:c6:49:88:8a:60:b4:66:26:ca:b4:38:1e:
         aa:2a:d7:7b:c5:4e:aa:7e:65:50:9e:7a:eb:52:41:ae:65:5b:
         db:fa:cb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----