Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5b76867d-a3d2-4194-88b7-054ee7b711d9.roa
File:                     5b76867d-a3d2-4194-88b7-054ee7b711d9.roa (raw, json)
Hash identifier:          DpLg6N9FDG1FtlGLddeXYJh/LKSMOWRwFqozN5AiY2g=
Subject key identifier:   C5:CF:B5:46:4D:60:E0:1E:F7:CB:B4:D3:53:22:E8:54:80:FB:52:A9
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       38131F34D501CC351F10E3340DABCA0209603D7A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5b76867d-a3d2-4194-88b7-054ee7b711d9.roa
Signing time:             Thu 23 Nov 2023 00:00:00 +0000
ROA not before:           Thu 23 Nov 2023 00:00:00 +0000
ROA not after:            Thu 28 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:13:1f:34:d5:01:cc:35:1f:10:e3:34:0d:ab:ca:02:09:60:3d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 23 00:00:00 2023 GMT
            Not After : Dec 28 23:59:59 2023 GMT
        Subject: serialNumber=5249502d5d040e0261c09118d5e42bcb7d0b2a57738993e4e59244e6937e8123, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:79:ed:f0:8d:99:b7:f6:fb:79:78:ab:10:ee:
                    60:ec:80:90:9c:79:fb:3c:73:07:bb:65:a4:39:5f:
                    47:05:72:9c:ce:19:38:d1:e8:b6:52:44:3f:46:ab:
                    ef:a3:26:f3:72:32:c5:5d:40:c0:55:c5:bd:74:b8:
                    b5:45:fc:da:2f:ec:ed:03:0b:1f:af:47:13:79:9a:
                    77:6a:99:9d:d1:ea:aa:79:14:5a:8a:1d:6c:65:0a:
                    11:2a:ce:02:06:7d:e0:f9:ee:9f:59:2b:07:19:f1:
                    2f:a0:c8:3c:f3:56:f1:11:44:20:41:ec:a9:09:b3:
                    7b:bc:ab:09:4e:f0:e8:e7:cd:fd:28:0f:31:9e:68:
                    af:1d:9c:99:5d:cc:7f:53:c3:83:a3:ed:31:d2:88:
                    a2:2b:0b:9a:cf:f3:d3:77:a3:82:b8:7f:cf:72:4a:
                    c7:5c:e2:e9:fd:47:3f:dc:b2:84:bb:f5:c5:89:f6:
                    ba:1b:64:15:73:7e:ab:78:f5:7f:62:00:a4:5f:14:
                    be:de:37:b5:f5:f0:18:a5:73:67:8f:0c:8d:92:92:
                    81:d2:1b:28:a9:be:81:16:04:92:a4:cd:08:31:55:
                    af:09:8a:4a:dd:84:89:7d:93:74:9f:43:8f:3b:48:
                    70:be:24:a1:e3:34:89:37:f2:04:c9:ba:58:0e:66:
                    44:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CF:B5:46:4D:60:E0:1E:F7:CB:B4:D3:53:22:E8:54:80:FB:52:A9
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5b76867d-a3d2-4194-88b7-054ee7b711d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:1e:66:2e:ef:b0:22:8b:fa:01:c0:8f:21:2b:ab:51:c7:8f:
         bc:62:5f:ea:ff:69:c5:5b:17:a7:a1:4f:2c:49:a8:f2:de:6b:
         87:d0:14:67:43:33:21:85:37:55:39:c0:81:36:a3:ea:16:5a:
         9f:fb:cc:2d:3e:77:65:d3:0a:10:90:94:1f:ac:e5:26:e0:c6:
         a0:2d:0a:4b:35:80:17:8d:df:0c:fd:69:fd:8a:3b:6c:e3:81:
         e1:8c:d1:6a:c3:05:41:da:9d:e5:65:47:c3:a4:93:54:11:2b:
         70:c9:79:3b:d1:3a:02:c8:9e:5f:7d:f2:2c:56:5b:24:0c:f4:
         20:e6:78:c3:54:5d:62:58:be:d7:1a:d3:14:52:ce:d7:df:fb:
         e5:27:53:c8:48:e3:69:fb:d9:f3:56:97:e9:cd:f1:c6:b1:8a:
         75:d6:27:31:a4:3d:27:b6:cf:6f:e7:df:de:06:b6:84:83:96:
         67:6e:85:cc:c2:72:31:b9:65:2f:05:d7:c9:b3:36:3a:ff:ed:
         0c:a9:2d:ad:7d:d1:06:53:d3:78:82:90:7d:4f:cb:1f:a0:fd:
         0a:95:27:7b:ab:64:31:01:9b:8c:54:d5:d8:c0:71:74:69:67:
         05:03:92:8a:2a:ea:64:96:2c:9c:49:4d:e7:fa:2a:b0:a1:c9:
         99:c8:0b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----