Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d40eb8e-6434-4511-86a5-af941aeba641.roa
File:                     6d40eb8e-6434-4511-86a5-af941aeba641.roa (raw, json)
Hash identifier:          MrQvAorZgqpEqXQsQWFnqpEys7zK+MKqlrQSgD2qYVU=
Subject key identifier:   DF:93:4D:63:7F:39:DC:D4:87:04:40:DC:2B:49:FC:74:35:0D:A6:AF
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6618A889CB217EDA539D739C8F3880A377F44EC9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d40eb8e-6434-4511-86a5-af941aeba641.roa
Signing time:             Tue 03 Oct 2023 00:00:00 +0000
ROA not before:           Tue 03 Oct 2023 00:00:00 +0000
ROA not after:            Tue 07 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:18:a8:89:cb:21:7e:da:53:9d:73:9c:8f:38:80:a3:77:f4:4e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct  3 00:00:00 2023 GMT
            Not After : Nov  7 23:59:59 2023 GMT
        Subject: serialNumber=6c2167324975786f06620ef4ac7208a4d7fd07e25db0b6183a812842157e68a9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:b6:32:f1:c3:62:b9:99:fb:63:62:f9:cc:
                    b0:d5:d0:3b:91:c5:e0:a7:c9:14:42:5f:de:26:5e:
                    47:2a:75:bb:12:b5:ff:aa:44:9b:32:99:48:7c:d8:
                    ee:14:f6:2e:8e:2b:eb:8f:ee:6e:d4:c0:18:6e:53:
                    04:30:a7:4b:80:87:ff:3f:9d:1a:82:39:9e:4d:4c:
                    01:d4:81:7e:28:f6:0c:6f:d5:e6:e9:99:24:1e:d8:
                    1a:6d:98:3c:b6:1e:6c:39:40:91:cb:44:76:f1:18:
                    2c:24:c2:b6:43:33:e3:5a:db:c9:f9:5d:79:39:43:
                    21:76:f5:4c:ce:a6:cb:96:e7:12:6d:73:d3:81:35:
                    47:30:b3:1d:92:a9:16:cc:9e:6c:a1:35:b6:fd:31:
                    3f:6a:92:b3:9e:36:9e:79:af:42:a9:a0:0b:a7:bc:
                    6b:5b:a1:e2:82:3f:88:26:96:d0:9a:6d:59:7e:06:
                    d3:31:9b:af:87:e1:64:21:3f:2b:57:f9:2c:73:88:
                    9d:74:34:bf:78:f0:33:eb:f8:7b:22:84:a8:15:03:
                    a2:4e:a1:25:6a:19:6c:34:1f:55:37:e7:0c:47:6b:
                    af:f2:e1:9d:c2:df:84:ec:63:82:12:f3:64:ed:86:
                    cf:b8:7f:21:c2:7c:c3:9c:ce:0e:f1:21:d5:42:12:
                    f7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:93:4D:63:7F:39:DC:D4:87:04:40:DC:2B:49:FC:74:35:0D:A6:AF
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d40eb8e-6434-4511-86a5-af941aeba641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:6f:da:3d:3d:d7:d1:81:f9:40:76:f3:f4:cb:fb:03:8b:e2:
         b2:9e:62:29:66:92:60:6c:db:53:19:cd:98:ac:e5:c8:c3:1f:
         70:34:10:83:55:a9:ae:f5:1d:9b:50:50:4c:8c:76:69:85:b1:
         b3:ba:0c:73:dc:05:bb:47:a6:9f:51:4c:d0:99:27:e7:96:b6:
         cd:82:98:09:81:58:c0:59:9b:e0:c8:2b:6b:66:ae:b8:23:bf:
         5d:a4:e6:25:24:c9:3f:43:d8:3f:fd:7c:69:08:e3:7a:cb:d7:
         37:81:7a:64:49:c5:74:83:89:61:2e:d9:bf:31:e5:98:1e:e5:
         0f:71:24:e9:62:38:95:56:dc:d4:5a:bd:ca:68:35:a9:b6:f0:
         39:36:50:2e:c8:36:54:e3:e1:7f:76:44:02:2b:45:34:95:57:
         51:49:53:83:9c:f3:62:c7:ca:ef:46:93:9c:2b:c6:e1:91:fc:
         ad:d6:93:06:74:5e:94:80:44:73:1d:47:6e:13:97:de:d8:66:
         7e:b1:e3:c9:3a:af:99:30:84:83:b4:c1:1b:cc:79:4c:a8:81:
         f8:4c:f2:6e:19:5e:13:10:91:29:69:08:e8:fe:62:fe:dd:e9:
         fb:85:6e:7b:9b:06:f9:56:58:cf:0f:22:44:8d:d8:54:a4:b5:
         7a:45:6e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----