Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/475d7ce5-2354-4929-9f2c-d43ff8b5f096.roa
File:                     475d7ce5-2354-4929-9f2c-d43ff8b5f096.roa (raw, json)
Hash identifier:          0VCJoCP6efVTs0SIMRHjf2OiKGff10qvQbplH36oNb4=
Subject key identifier:   A7:10:24:50:C7:88:99:4F:C1:07:D6:A0:F0:4F:44:B3:61:19:54:0D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       462A6C68F84745D744723B36903E8F3D0888B491
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/475d7ce5-2354-4929-9f2c-d43ff8b5f096.roa
Signing time:             Mon 18 Mar 2024 00:00:00 +0000
ROA not before:           Mon 18 Mar 2024 00:00:00 +0000
ROA not after:            Mon 22 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2a:6c:68:f8:47:45:d7:44:72:3b:36:90:3e:8f:3d:08:88:b4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 18 00:00:00 2024 GMT
            Not After : Apr 22 23:59:59 2024 GMT
        Subject: serialNumber=cd0188c84b421cfb36c63a98aa813b050247d329463bbc7b5be3e0ddcc5433c3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:3d:d3:26:9e:28:97:83:62:95:72:3e:67:
                    12:dd:78:f2:a6:06:0b:1b:44:fa:b8:1b:cd:09:65:
                    23:68:93:dc:aa:97:a3:4b:eb:69:2f:9c:b2:62:96:
                    08:27:08:8f:f7:58:65:11:39:2d:59:b2:c4:ac:e0:
                    0c:4d:ed:04:a8:7e:3e:94:31:e0:ad:85:b3:fc:64:
                    c4:04:c1:29:eb:8c:d7:86:ee:73:01:70:1b:e8:d6:
                    df:c2:03:6d:5e:5a:ce:93:44:29:5a:85:df:62:ae:
                    4b:38:00:7e:bb:a9:da:73:52:9b:c9:2f:de:a2:98:
                    b1:dd:2b:6f:1a:a8:b7:63:c7:7f:09:34:81:da:e9:
                    95:b8:82:fb:b0:80:de:46:59:2d:96:77:4d:b1:6f:
                    dc:b8:8b:3d:cc:f2:61:e7:a3:14:34:20:9c:f3:ff:
                    29:91:8a:f1:b0:54:2a:7d:89:65:52:09:19:e3:23:
                    9c:77:e6:ff:c6:ac:d2:53:ab:07:2d:97:ee:fc:b1:
                    7a:00:72:3c:05:a4:26:79:29:7d:f2:a6:31:e4:87:
                    1d:4e:20:5b:ea:01:6f:77:88:37:eb:24:c5:0a:22:
                    1e:fb:1e:9e:94:07:79:61:1b:1f:7f:8c:f8:67:bd:
                    b5:53:18:e2:e7:8c:b1:54:40:80:41:14:c7:a6:4a:
                    f4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:10:24:50:C7:88:99:4F:C1:07:D6:A0:F0:4F:44:B3:61:19:54:0D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/475d7ce5-2354-4929-9f2c-d43ff8b5f096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:15:3c:72:75:19:69:bb:9b:9d:46:c8:7d:0d:b7:e0:5e:18:
         fe:b5:d3:29:1e:98:87:38:15:02:e2:8e:cb:4c:74:43:b5:9d:
         18:a2:24:d3:93:03:93:ac:a6:9d:31:ad:67:46:5e:69:53:3d:
         e0:1c:da:1f:50:09:48:dc:68:13:b2:63:73:0d:f3:19:d8:92:
         d1:05:0c:af:34:9c:32:7d:55:d8:8a:65:4d:ff:86:79:af:dd:
         00:af:22:a8:b7:d0:bb:3d:ca:4a:e1:39:e6:e0:05:50:95:9f:
         75:bb:27:2e:3f:10:a7:a1:a8:25:89:fe:6a:1e:90:f3:99:10:
         d7:a6:26:61:1b:3a:77:18:1b:26:83:01:95:fa:22:d2:0a:14:
         e3:25:51:e4:83:94:c9:99:c6:7f:af:40:a7:75:c6:37:4f:a5:
         21:98:a7:e9:40:f8:91:22:bc:00:8e:f6:95:c7:18:ff:8c:67:
         30:a1:14:ee:4d:d4:e8:a5:47:37:c9:b5:ce:c4:46:5a:9d:36:
         5f:03:7d:99:ae:8b:d1:b4:d9:81:04:84:58:aa:cb:5d:f0:b9:
         da:c2:7e:c0:dd:c4:f1:e4:ac:14:e6:86:44:41:2f:48:b1:29:
         f6:8f:90:69:5b:79:a9:78:46:01:43:8f:b0:28:3f:51:2e:8b:
         b4:17:33:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----