Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/58621b26-1008-4047-9022-9a946db925f4.roa
File:                     58621b26-1008-4047-9022-9a946db925f4.roa (raw, json)
Hash identifier:          DjnRXTep0rYU0Yw3h+zqDu6LKN9xMW9PWhDo/48lcy8=
Subject key identifier:   18:9C:8E:12:39:64:CB:20:FA:72:E6:EA:D4:0D:45:BD:13:1A:BD:EB
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1C9D126133A103772C1189C3B555EE2F9C5DB711
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/58621b26-1008-4047-9022-9a946db925f4.roa
Signing time:             Tue 24 Oct 2023 00:00:00 +0000
ROA not before:           Tue 24 Oct 2023 00:00:00 +0000
ROA not after:            Tue 28 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9d:12:61:33:a1:03:77:2c:11:89:c3:b5:55:ee:2f:9c:5d:b7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 24 00:00:00 2023 GMT
            Not After : Nov 28 23:59:59 2023 GMT
        Subject: serialNumber=6022eafe09e1222a11bcff8f243266de84c51f664e0d63d8ec9a83cfbc085af1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c8:58:3d:ba:99:30:7b:2f:41:b7:3a:45:58:
                    97:93:10:e3:d6:cf:99:e0:62:4c:70:a0:59:80:d2:
                    bb:f6:70:b3:98:09:cd:7c:29:48:8e:92:d7:bf:a8:
                    c1:29:08:d3:8a:cc:f1:12:89:9f:51:3f:82:af:e1:
                    00:dd:73:bf:5a:da:b8:ce:3b:c7:cd:9c:4c:e8:73:
                    24:61:3d:b6:f2:33:6a:e6:35:59:d6:29:a3:11:be:
                    26:38:c6:e3:c5:a9:29:a4:0c:3c:43:fc:ad:1f:b4:
                    bd:90:49:9c:35:1e:b8:4e:ac:d4:e2:df:ae:a6:85:
                    1f:2b:74:5e:50:70:71:aa:ce:cc:3d:30:8e:ae:c3:
                    6e:d0:46:0d:65:33:5c:b5:40:cb:9d:60:df:d7:48:
                    67:72:36:cd:07:a9:00:c4:f8:49:e1:53:b2:05:01:
                    7b:77:fa:94:51:a3:a4:ad:b3:9e:81:bb:12:c3:5c:
                    91:e9:74:16:37:38:5a:11:75:b0:43:50:b7:91:1b:
                    b8:d5:97:20:39:88:a4:f1:20:16:ea:b0:b8:4d:aa:
                    15:eb:ef:31:e7:32:19:ae:9d:b5:63:7c:e4:de:81:
                    3e:cd:83:64:81:c3:51:53:f5:48:9a:8f:25:9f:23:
                    62:eb:d2:12:97:ab:0f:0b:cf:5b:09:36:85:9b:68:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9C:8E:12:39:64:CB:20:FA:72:E6:EA:D4:0D:45:BD:13:1A:BD:EB
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/58621b26-1008-4047-9022-9a946db925f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:45:b1:f1:c8:a6:73:69:39:0e:a7:1f:ad:b4:a6:bb:ed:50:
         96:42:01:88:cf:44:60:22:89:66:a5:1d:9f:7f:9d:06:5f:45:
         79:77:d1:83:69:3c:60:d2:50:8b:cd:ab:9a:e2:80:ae:cf:a3:
         34:fe:10:05:20:6f:b0:85:64:38:26:66:0f:58:b0:63:9b:bd:
         0a:c1:69:56:0a:a4:2c:38:17:33:a7:0f:d2:d9:bf:39:cd:93:
         38:ca:e9:67:68:3a:0f:fe:3f:67:c4:32:dc:bc:90:45:13:52:
         9e:ce:d6:43:7b:ee:70:dd:a1:ae:1e:ef:1c:25:2f:0f:ff:04:
         da:61:25:69:78:a0:26:3f:bf:f2:82:dc:29:1e:23:65:8b:a9:
         a8:27:05:ac:dd:b6:81:c4:58:a1:7b:05:ef:7c:b5:7a:cd:bd:
         4f:7a:75:cf:d7:a2:ba:6e:cd:33:91:c3:8f:32:c6:59:90:c7:
         3e:04:e2:b2:c9:98:a0:0b:ff:56:54:4d:fb:c1:d8:01:46:91:
         a8:7d:c1:5d:04:65:8c:30:fc:81:c4:49:68:60:3a:7a:a3:81:
         34:d0:33:79:87:b5:0f:be:bf:95:e2:8f:a5:54:0a:d1:fa:29:
         de:fa:73:64:44:f3:ad:ef:e3:23:0f:0e:57:66:e1:c1:ce:9a:
         72:35:e3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----