Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/420ca896-5640-495e-81e5-615be3bdc2f2.roa
File:                     420ca896-5640-495e-81e5-615be3bdc2f2.roa (raw, json)
Hash identifier:          u9ZzJ3iXokD0bfOJlnJo0vWiLZ3r6Ntq7qIdvSZlKEY=
Subject key identifier:   6C:73:75:CD:AD:25:6C:6B:BD:7E:20:4C:F4:F2:76:79:C1:94:C9:D0
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       075E18A66496CD18BF849F90A60DED7FF3F1EFAD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/420ca896-5640-495e-81e5-615be3bdc2f2.roa
Signing time:             Mon 18 Mar 2024 00:00:00 +0000
ROA not before:           Mon 18 Mar 2024 00:00:00 +0000
ROA not after:            Mon 22 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5e:18:a6:64:96:cd:18:bf:84:9f:90:a6:0d:ed:7f:f3:f1:ef:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 18 00:00:00 2024 GMT
            Not After : Apr 22 23:59:59 2024 GMT
        Subject: serialNumber=cefcce3924f5b4d535af902747059fc3fe68e277efb4917c0e0a0a2fed43cd31, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d3:0c:6a:30:48:1b:cf:39:35:19:f9:5d:4c:
                    28:96:0a:ad:0a:44:74:2d:ce:55:53:27:c4:6a:ca:
                    eb:80:55:dc:e0:b6:e3:c5:8d:f4:a1:a0:85:88:10:
                    43:1f:d7:35:b6:00:e7:f5:36:01:18:12:86:c2:5d:
                    fd:f5:a4:75:53:76:78:7c:26:cb:de:ef:11:a8:b6:
                    39:e8:7b:ea:6a:05:66:54:fc:0a:3c:3b:c6:1f:91:
                    45:ca:d6:68:9a:24:a0:5e:35:2a:17:db:3b:fc:57:
                    11:78:13:e9:89:b9:f9:9b:49:48:ad:6d:68:a4:4d:
                    18:af:98:f2:71:7d:f7:50:a0:c4:b6:a8:29:70:cd:
                    14:34:b2:8c:e5:eb:ba:7f:c2:4e:18:c1:3f:50:eb:
                    1c:3e:8e:ed:9e:89:a3:4a:e0:d0:a2:45:a6:e6:46:
                    ab:92:44:b6:91:71:68:c4:93:d8:15:cb:12:ee:01:
                    f8:6a:59:46:c0:c0:4e:17:38:5b:09:fc:0a:7c:52:
                    25:86:12:10:67:be:df:5f:d8:bd:81:0e:24:91:92:
                    70:8f:47:94:1b:11:67:e0:d5:32:3d:55:d6:b6:71:
                    4b:19:6e:e2:09:f1:9f:9a:c3:5e:e8:3e:fd:d7:4a:
                    a4:79:80:b0:8c:6b:2a:5f:cd:f5:8e:f4:fb:28:b6:
                    5a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:73:75:CD:AD:25:6C:6B:BD:7E:20:4C:F4:F2:76:79:C1:94:C9:D0
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/420ca896-5640-495e-81e5-615be3bdc2f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:a0:2e:db:04:59:30:90:44:07:ac:cf:5b:1d:2e:41:62:95:
         2d:18:0a:cb:90:d9:3c:de:66:d7:3a:56:ed:a5:79:55:de:84:
         a8:fb:03:2a:b0:6b:a1:76:0a:da:e2:9a:79:53:8a:cc:8b:aa:
         6e:22:7a:65:cd:d3:80:74:4e:cb:9f:0e:86:77:be:f5:cd:c1:
         b5:6f:1a:15:b4:5c:28:1e:7d:95:23:63:83:23:f5:63:9e:8f:
         c2:b5:8b:eb:16:67:84:8f:96:b5:3c:c7:7c:86:7b:2c:cb:4b:
         50:93:be:38:ba:1c:3b:a8:13:f7:f6:8e:c2:33:85:33:49:27:
         fb:b4:d0:4d:57:99:f8:a9:d1:ca:d3:27:e8:8e:d6:ea:6c:e8:
         07:fc:3b:f7:1c:2b:f6:c3:19:7f:eb:c7:7d:a2:08:be:02:b7:
         dd:3c:f0:29:1b:b7:f1:3b:25:ee:99:62:1f:4f:62:3c:b1:61:
         13:d9:fd:8a:3f:b9:38:3d:3c:b8:9c:fd:09:b6:8d:12:67:1e:
         86:67:84:cb:83:b9:8e:86:4a:27:b0:39:5c:1f:3d:b3:d3:a7:
         c6:25:7e:90:17:f6:95:a9:93:73:93:65:be:15:06:91:ed:6c:
         81:f6:54:2b:b6:44:f4:0a:af:f8:48:de:e2:6a:1d:ec:09:b2:
         b9:f3:11:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----