Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/41d9a1ae-979c-4dda-b8ba-f698eac315ec.roa
File:                     41d9a1ae-979c-4dda-b8ba-f698eac315ec.roa (raw, json)
Hash identifier:          TCBXVkrgn0pmZ7OsVqSKGB51t9EdcoLoEDnA+lMLO0k=
Subject key identifier:   10:EA:D1:09:59:89:0E:37:ED:6C:A8:22:D3:C0:7E:7F:BE:07:CD:3B
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       29DC7A5C576D1856734B355B3BCBD52A3161D5C2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/41d9a1ae-979c-4dda-b8ba-f698eac315ec.roa
Signing time:             Wed 06 Sep 2023 00:00:00 +0000
ROA not before:           Wed 06 Sep 2023 00:00:00 +0000
ROA not after:            Wed 11 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:dc:7a:5c:57:6d:18:56:73:4b:35:5b:3b:cb:d5:2a:31:61:d5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep  6 00:00:00 2023 GMT
            Not After : Oct 11 23:59:59 2023 GMT
        Subject: serialNumber=5ec10a747d2c1b352513b675dc94e12672601cadcba2cff8cde5f7fb2b47bb23, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:30:08:8e:fa:2c:9c:e0:02:0a:4a:9d:41:
                    e9:2a:ab:6b:07:f8:e1:86:cf:59:72:f6:78:a2:c5:
                    25:a5:db:6f:f9:1a:3e:8b:88:30:c7:e6:f2:18:d6:
                    fa:1c:eb:bb:5b:81:88:9f:c8:90:5d:32:d5:0b:88:
                    d8:30:9f:31:4c:c9:45:90:75:07:35:15:e5:ab:3d:
                    ad:21:a2:50:a5:23:18:de:4f:a2:f2:31:cf:51:42:
                    c4:47:a0:78:95:69:64:03:8f:6e:06:71:49:56:88:
                    7c:0b:42:6a:1c:1b:42:59:f1:d6:88:6a:60:fc:a0:
                    16:5e:a6:58:60:75:de:f4:22:8e:ac:a1:5f:6d:2f:
                    43:19:30:63:7d:ca:6b:02:58:ec:64:0d:dd:94:76:
                    07:9d:ae:79:a2:a9:8e:f3:ce:d4:0c:f5:cd:ce:3a:
                    d4:d7:94:03:d7:e3:53:cf:c2:88:58:17:b2:42:f0:
                    50:c0:7f:62:84:6e:8b:9c:7d:fe:5e:96:20:9f:49:
                    60:79:68:6d:3d:fb:e0:f1:f2:50:a1:e1:19:81:e9:
                    3a:d7:e0:65:06:ec:98:e8:b0:14:e5:f5:39:9a:0e:
                    9a:54:a2:58:6a:3f:82:6d:9d:e0:7d:2c:01:8d:04:
                    6b:55:8d:d4:c3:d3:17:4b:76:29:20:29:59:ff:3e:
                    23:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EA:D1:09:59:89:0E:37:ED:6C:A8:22:D3:C0:7E:7F:BE:07:CD:3B
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/41d9a1ae-979c-4dda-b8ba-f698eac315ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:63:ea:d4:b1:25:7e:87:c6:0e:bc:85:fc:5a:f5:c6:26:04:
         8c:0d:fd:90:05:08:63:31:95:6c:de:bc:09:a0:aa:7a:69:b3:
         e5:3f:28:84:61:e9:bc:70:b0:96:a6:da:94:9d:09:fb:fb:24:
         2c:a1:be:6e:26:1d:06:33:31:d7:65:fe:3b:62:8a:43:5d:29:
         9c:fb:81:c9:f4:7e:1c:74:3b:f2:8d:0b:a0:07:91:24:45:18:
         91:40:ee:2c:0a:d0:e7:e2:e2:a3:bb:b6:4f:89:02:27:39:4f:
         7e:28:8c:f6:91:62:ed:db:e9:ba:ed:5a:88:2e:fa:87:c9:13:
         5b:9c:d1:e0:b9:50:88:6d:0e:1b:b6:61:31:ae:ec:7e:f4:11:
         52:4d:1c:fb:16:32:71:32:b7:c5:a8:48:3f:82:89:5f:dc:e7:
         c2:27:cb:87:2b:d8:62:7b:6a:ba:15:4a:c2:54:46:50:7a:25:
         f8:51:64:79:21:62:d8:f2:a2:77:f2:b5:0a:29:2e:b8:a8:a0:
         c2:b2:60:6d:01:c2:45:4e:b7:58:c1:d5:a7:b8:0c:2f:bd:ad:
         48:0d:70:b3:f8:73:6d:f1:44:6d:a8:da:8d:05:66:2f:66:c9:
         64:3a:d0:8b:02:7c:56:14:d5:2d:f0:ef:09:0f:a2:fd:ca:cc:
         fd:15:38:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----