Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4d6fceb5-4534-4c69-8e04-eba82d926288.roa
File:                     4d6fceb5-4534-4c69-8e04-eba82d926288.roa (raw, json)
Hash identifier:          N2GKlt1NpxhOSeSyl876MXQvqiI67c+lHRZCXcJDHwo=
Subject key identifier:   1E:C7:BB:17:59:94:22:2E:63:37:6B:26:D2:AC:58:84:28:9B:25:58
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2B6F683A58D8C41313228E29B064FEE24C31664F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4d6fceb5-4534-4c69-8e04-eba82d926288.roa
Signing time:             Sun 15 Oct 2023 00:00:00 +0000
ROA not before:           Sun 15 Oct 2023 00:00:00 +0000
ROA not after:            Sun 19 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6f:68:3a:58:d8:c4:13:13:22:8e:29:b0:64:fe:e2:4c:31:66:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 15 00:00:00 2023 GMT
            Not After : Nov 19 23:59:59 2023 GMT
        Subject: serialNumber=493cea2409564a2ac0f7f448a20bb17f1d47c907b74e05cc42f38209613eee4a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0a:f6:22:39:eb:50:27:0c:50:c8:e3:03:ca:
                    3a:fc:03:9c:d2:a2:2d:a6:cb:b0:dc:04:3b:e7:32:
                    f6:f3:97:9b:88:fd:e8:a3:b2:61:51:80:1a:b6:70:
                    78:8e:62:c4:60:7a:21:da:ab:98:82:f9:48:56:1b:
                    27:66:3e:c2:b9:c2:76:bc:2d:ad:b3:61:52:b0:48:
                    49:dd:6a:ae:67:da:76:0a:12:5c:55:68:ae:e7:18:
                    e8:98:8a:6c:79:bd:32:f8:2f:08:c1:d2:ba:8f:88:
                    b0:a5:75:59:6c:be:7b:58:33:9a:56:cc:c1:05:9d:
                    49:6a:64:6d:b3:e0:54:44:22:3c:d5:6d:79:8f:2d:
                    4a:ff:2e:82:b0:0e:b0:88:c0:49:73:d2:cf:f1:25:
                    1d:01:c4:be:fc:db:cf:e5:cf:6c:03:a9:c1:eb:b0:
                    40:40:85:69:4c:bb:14:6d:c4:43:f9:17:59:a2:60:
                    61:75:0e:22:cf:14:42:80:64:bb:45:79:2b:cb:c5:
                    a6:ea:3b:6d:17:2d:35:96:ef:c7:1f:36:3d:7b:bb:
                    93:17:f9:1d:d5:a8:d2:55:3a:9f:6d:b1:b9:a2:00:
                    10:9d:ea:2e:f3:ce:14:21:34:81:ae:a7:d4:e9:d5:
                    92:8c:a5:8b:8a:19:ff:3e:47:ef:6d:20:9d:8d:80:
                    f1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C7:BB:17:59:94:22:2E:63:37:6B:26:D2:AC:58:84:28:9B:25:58
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4d6fceb5-4534-4c69-8e04-eba82d926288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:fe:56:02:f4:2a:f7:53:49:36:0a:c1:9c:46:72:ea:14:e4:
         ac:c7:d9:7f:82:74:3a:79:06:b3:04:91:f5:3a:98:d9:c9:fb:
         b5:9e:2b:8c:ba:c5:3f:08:85:ff:a8:e9:16:57:0f:9e:c9:80:
         9f:6d:04:3b:32:d3:15:7e:85:a1:0e:ca:80:04:be:36:91:85:
         96:07:ac:ed:91:7f:f9:48:3f:67:ea:cd:5d:bc:ca:71:de:3e:
         4e:29:5f:ce:92:28:c3:d4:c2:8f:76:15:35:7a:5b:12:be:44:
         02:a8:67:ae:1d:cc:70:ff:4e:55:b7:70:ab:0f:c1:c7:21:df:
         e2:64:53:d0:17:6f:49:5e:48:14:1d:5e:71:29:75:12:6f:fa:
         e8:a2:ee:1c:85:19:28:10:85:73:73:cc:1c:8a:49:fc:84:1c:
         df:d3:73:94:9b:5e:f7:ab:52:c1:68:e0:fa:3b:c1:17:03:0e:
         91:a0:06:0c:07:63:19:5d:b8:68:4b:4b:6b:de:87:81:78:ba:
         28:6f:22:bb:04:c8:22:c7:27:e4:cb:a8:50:67:67:71:85:0d:
         e0:de:17:8a:5e:10:79:7b:9e:cd:6a:7b:e4:64:ca:33:e8:f5:
         7d:89:50:df:8e:eb:21:2a:fa:2a:fd:9d:be:22:44:18:c5:bb:
         e5:ae:72:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----