Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5f0c0882-11a7-4eec-b6e3-5a4591bb6d4d.roa
File:                     5f0c0882-11a7-4eec-b6e3-5a4591bb6d4d.roa (raw, json)
Hash identifier:          hBR8xgqFM9yWCaLUwuRNILwolqYoLwTLh+98YOY7u+s=
Subject key identifier:   8C:CB:BA:DF:E7:BA:A7:E9:2C:6F:6B:B4:11:78:64:AB:78:E6:03:91
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       14AB4047F5F0F55974D1B438E6E5ED69B5A9EDC7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5f0c0882-11a7-4eec-b6e3-5a4591bb6d4d.roa
Signing time:             Thu 28 Sep 2023 00:00:00 +0000
ROA not before:           Thu 28 Sep 2023 00:00:00 +0000
ROA not after:            Thu 02 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ab:40:47:f5:f0:f5:59:74:d1:b4:38:e6:e5:ed:69:b5:a9:ed:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 28 00:00:00 2023 GMT
            Not After : Nov  2 23:59:59 2023 GMT
        Subject: serialNumber=dd06214f6c9ca5b5709dcb7142063221bc547d5f54bf05f9f811a6ebba651b4b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:3f:98:3f:15:44:6a:45:bf:cd:65:ad:49:
                    bb:43:77:0a:cf:b4:66:6a:0b:b6:52:50:ac:03:09:
                    dd:a7:ca:0e:8a:d4:b3:33:a5:71:6b:4c:af:8f:b7:
                    44:cf:ba:73:65:ab:d2:50:af:36:76:90:5c:09:b4:
                    de:6f:42:c0:f2:da:b1:55:41:35:34:c5:a5:35:d8:
                    65:3f:ef:0d:a5:02:55:a7:ed:33:c8:d2:26:a0:57:
                    6e:75:1e:cf:de:38:1c:cf:92:34:2a:e2:ef:bc:61:
                    a3:bc:21:69:63:0e:b1:9b:6d:1a:7e:0e:04:dd:5a:
                    aa:01:89:b0:9f:3a:e4:ab:b4:5e:7a:5f:e8:63:0e:
                    57:24:9c:57:45:fc:88:e3:3a:c5:73:30:8b:d1:5d:
                    2a:54:b4:c4:64:85:78:bb:51:3b:04:c1:cc:e0:a2:
                    0c:7f:d3:40:0e:a2:5f:3f:26:ab:91:9d:bb:e3:4a:
                    cf:40:6c:4d:fc:a4:e0:08:a4:34:ec:c7:8b:9e:0b:
                    a1:6a:71:a2:71:49:da:b1:83:e2:cc:2c:1d:8d:69:
                    ae:d5:11:c7:a0:e0:97:94:5b:f4:60:b0:88:d8:33:
                    78:4f:72:e7:72:4b:40:5c:98:a3:3b:7f:0e:11:58:
                    ee:11:85:72:fb:54:0c:77:f6:6b:fb:19:89:9c:28:
                    b2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CB:BA:DF:E7:BA:A7:E9:2C:6F:6B:B4:11:78:64:AB:78:E6:03:91
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5f0c0882-11a7-4eec-b6e3-5a4591bb6d4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:01:2e:20:5f:62:1c:18:b4:91:25:9a:66:14:d7:7d:b8:df:
         d7:52:ae:20:36:d0:58:2b:f9:bf:b9:a2:37:8a:8b:09:a8:6d:
         48:2d:fa:71:13:24:04:da:ee:18:86:b9:0e:89:52:7b:88:b1:
         a3:3d:3c:0f:94:8c:d0:89:fd:2a:27:44:fb:dc:b6:99:02:e0:
         7d:85:b1:4a:cf:ca:bf:84:ae:7c:07:a8:eb:d3:f7:cf:02:54:
         d0:46:10:0f:15:ff:d3:70:36:75:24:e2:7e:b8:5d:88:dc:d6:
         5e:68:fd:c5:12:26:0c:b7:61:77:f3:95:1d:6e:6d:17:05:09:
         b4:79:b2:fc:26:34:d3:10:9c:c2:04:db:5f:6f:a4:fc:af:94:
         2c:70:81:79:22:61:7a:03:36:8f:bc:48:46:02:fb:ae:fa:8e:
         48:54:f4:0d:90:d2:41:9d:22:cb:52:6f:12:b4:92:c4:65:cb:
         03:8b:c9:6c:97:75:50:8f:75:6d:8e:4d:8e:f8:e0:44:ad:83:
         b5:41:10:bb:1c:fe:c6:a8:7d:c5:95:51:5c:ea:05:f2:39:b5:
         f7:71:77:29:27:0e:69:e3:76:62:bf:79:fd:b6:c5:e8:b1:11:
         1d:b6:6a:f9:6c:26:4f:76:a9:ec:89:5f:52:b1:c2:c2:93:8d:
         ac:aa:69:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----