Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/589ced38-f0c6-4cd8-a9fa-7f668d91abbe.roa
File:                     589ced38-f0c6-4cd8-a9fa-7f668d91abbe.roa (raw, json)
Hash identifier:          YXoQIBurRIxTMwEAYRf/oKHY57SB1ZSGwNWaQUv2ebU=
Subject key identifier:   E9:FA:CD:20:AC:2B:66:B2:46:41:3C:45:E8:BB:DA:4C:28:27:B1:DE
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       33005C8DBD8712C8931ABCCC91AEF1EEEF132B94
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/589ced38-f0c6-4cd8-a9fa-7f668d91abbe.roa
Signing time:             Sat 16 Dec 2023 00:00:00 +0000
ROA not before:           Sat 16 Dec 2023 00:00:00 +0000
ROA not after:            Sat 20 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:5c:8d:bd:87:12:c8:93:1a:bc:cc:91:ae:f1:ee:ef:13:2b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 16 00:00:00 2023 GMT
            Not After : Jan 20 23:59:59 2024 GMT
        Subject: serialNumber=5119c2af493db0ec1adf0c410ed40746148bec1d33e90d9edd61ba8d6856010f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:fd:45:35:b4:75:42:fb:8c:91:28:c9:43:
                    40:3f:e3:65:1b:46:18:07:ba:0b:50:e6:e1:ce:28:
                    80:a5:ad:6d:c0:19:d4:82:05:26:1c:94:3a:e0:7f:
                    20:81:96:2e:08:94:03:d7:ef:74:9e:92:e2:ba:df:
                    71:ca:ef:1a:fc:89:29:ab:50:41:9e:f9:45:47:af:
                    13:c4:84:36:42:c9:d6:10:ec:d9:a4:32:f8:b9:c5:
                    5a:ac:c6:25:14:01:f6:66:2b:23:0d:38:ca:ae:a1:
                    24:c2:7c:7f:ad:e9:ec:fb:b6:1a:26:97:1c:47:14:
                    8d:69:35:03:b7:75:3c:5b:40:5d:b8:d2:3e:02:3e:
                    64:cc:41:89:5e:d0:ac:1a:6d:98:2a:2b:e2:2c:23:
                    05:cc:fe:85:42:7d:f0:18:51:eb:9e:a3:2a:14:9e:
                    f1:60:cc:81:08:a3:4a:7a:99:34:dc:2e:40:5c:02:
                    89:00:93:c4:82:7f:34:bd:1a:11:d1:77:88:2d:c7:
                    f6:98:f0:7f:b8:f8:17:31:85:0d:91:55:ee:2a:12:
                    b5:db:fa:1a:d8:45:6e:8a:93:75:3c:b5:0e:9c:b8:
                    c0:76:6f:ca:38:a6:28:98:ad:8c:68:f9:89:4d:24:
                    0d:f5:bb:10:1e:34:94:50:7f:2c:b5:92:3d:b4:61:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FA:CD:20:AC:2B:66:B2:46:41:3C:45:E8:BB:DA:4C:28:27:B1:DE
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/589ced38-f0c6-4cd8-a9fa-7f668d91abbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:d9:51:44:50:9b:e5:f4:a1:73:1d:de:11:9d:9f:89:96:47:
         4a:68:fe:9c:b5:7c:c8:0d:27:3a:9a:8d:22:b1:aa:b0:2b:90:
         c2:c5:c1:d7:2f:86:73:f8:f9:6a:1d:f2:57:9c:b5:87:dd:b4:
         2b:33:78:7e:10:c6:5c:38:82:7d:24:a0:65:09:2d:53:a5:5c:
         be:ec:d9:b1:36:8d:17:ee:f6:9d:78:b4:ca:d9:d2:74:49:da:
         92:8c:99:e7:7c:b7:69:8a:aa:ad:0e:3f:77:17:62:35:8b:6e:
         0d:52:e1:5a:10:db:da:73:4e:13:8b:88:1c:76:54:ad:6b:cf:
         a5:da:ae:51:d0:ca:46:e6:ff:6b:fd:53:0d:db:85:64:aa:33:
         5a:35:03:cb:10:44:07:03:d6:d7:1c:7f:e2:cf:98:ce:ac:38:
         47:a1:7d:b0:47:0c:df:79:f1:f7:51:5c:00:f1:17:27:ad:22:
         49:d9:09:ad:8e:19:f4:ab:3b:bb:63:9c:39:6f:42:50:c5:32:
         8d:6a:13:90:af:42:b6:f8:29:f6:13:f2:48:28:74:ce:d0:5a:
         8f:09:b8:ef:8d:fa:d4:fa:da:a7:3b:5f:0f:29:e7:ee:e6:3f:
         cc:cf:7d:61:d9:12:b5:cd:02:0f:b1:c6:6a:ce:ab:d0:7c:f3:
         15:72:02:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----