Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/60c91e1c-2377-4983-a2b1-235867ffdc00.roa
File:                     60c91e1c-2377-4983-a2b1-235867ffdc00.roa (raw, json)
Hash identifier:          G6OMFF4Tm3HVzKMbROB3n6O5JyFznEpCZoFrHA/TMjM=
Subject key identifier:   BA:87:8F:7A:46:A1:45:A1:92:E5:0F:D8:0F:05:FE:92:2E:35:34:85
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6315DA78047AFDFE39E0EB92EE37BC59168A1FF3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/60c91e1c-2377-4983-a2b1-235867ffdc00.roa
Signing time:             Wed 25 Oct 2023 00:00:00 +0000
ROA not before:           Wed 25 Oct 2023 00:00:00 +0000
ROA not after:            Wed 29 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:15:da:78:04:7a:fd:fe:39:e0:eb:92:ee:37:bc:59:16:8a:1f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 25 00:00:00 2023 GMT
            Not After : Nov 29 23:59:59 2023 GMT
        Subject: serialNumber=6c792656b2b91761cd98b504468550e47f31b043c257907b17fb407bc75cbc56, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:36:a7:b7:1f:49:85:dd:ca:ff:57:66:13:
                    a3:d2:4b:04:70:35:a8:0d:45:28:32:f3:bc:3c:40:
                    0f:cf:93:79:76:db:08:e0:1c:4e:29:77:46:f3:f4:
                    f0:96:71:3d:e9:67:2a:59:65:56:cb:50:4b:9f:29:
                    87:44:f2:b2:51:55:26:d8:5c:b9:3c:31:b2:a7:8e:
                    59:7c:79:9d:6c:3f:33:83:4f:0a:e9:26:03:d0:24:
                    ed:34:74:7a:c3:1e:93:74:fb:85:4b:bf:39:47:70:
                    a1:94:bd:80:99:bf:b2:fc:ad:4d:3d:11:e6:27:dc:
                    34:08:05:bc:6c:de:38:4e:69:dd:02:08:f4:08:db:
                    ac:47:70:2d:7a:86:7f:94:45:0e:92:84:c0:62:07:
                    b2:e8:e1:4c:5e:79:f8:57:e8:90:2d:7b:08:7e:53:
                    b9:1f:37:ba:5c:d2:3e:5d:33:9a:7c:a0:e5:c3:41:
                    61:b6:32:dd:c1:00:c2:37:2b:92:fe:ac:2f:ee:4d:
                    72:0a:ca:af:cd:f5:75:73:10:69:bd:fc:bc:99:e5:
                    ff:e1:47:ed:0f:9a:74:d1:7b:33:5f:cf:76:ee:05:
                    90:15:9a:b3:71:66:c1:d9:b5:89:8d:6a:2a:77:b1:
                    7e:66:ad:36:a1:ca:57:63:ce:bd:0e:70:e3:d1:0f:
                    f9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:87:8F:7A:46:A1:45:A1:92:E5:0F:D8:0F:05:FE:92:2E:35:34:85
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/60c91e1c-2377-4983-a2b1-235867ffdc00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:dd:1c:82:a0:26:ab:ec:ba:97:3d:70:d1:3f:80:f8:e4:1e:
         9d:71:42:44:fb:10:20:8d:ec:5f:6f:f1:a4:37:a0:9b:e1:73:
         44:6a:e3:d7:57:7a:66:a3:8f:1e:3c:ac:ff:66:e8:29:c4:45:
         98:e8:64:d8:a4:e6:37:e6:bb:1f:7a:80:95:4d:72:62:4d:3c:
         42:8a:51:e5:34:0f:72:51:d2:cb:74:7f:6b:cb:7c:fa:14:91:
         aa:22:8f:e7:9e:3f:4a:55:9e:4f:79:4f:5c:96:20:a5:d7:38:
         21:e4:c4:38:07:ed:d4:31:44:4d:fe:b1:15:33:e6:b9:78:62:
         cb:d2:a8:01:69:8a:b8:33:0a:73:98:02:db:df:e5:56:da:30:
         24:89:a0:f1:2c:2a:c3:cf:63:32:a0:10:73:38:aa:6c:42:c6:
         8d:ba:45:85:d4:c0:e6:d3:f4:eb:7a:84:07:ac:21:88:ec:d5:
         a3:15:26:79:55:76:cb:fa:48:e7:6e:4a:93:8a:6f:04:42:e7:
         10:28:b5:e4:58:73:7f:f0:45:08:df:1c:8e:54:4b:4c:62:fe:
         5b:02:b8:1b:23:73:f9:6e:b1:bd:6c:ee:de:5a:d6:cd:24:79:
         dd:0e:88:f3:34:d1:a9:da:f2:cd:57:f5:c9:2b:33:b0:f6:0d:
         ed:3a:60:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----