Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d64e81b-f22c-4782-94ea-13f0038815cb.roa
File:                     6d64e81b-f22c-4782-94ea-13f0038815cb.roa (raw, json)
Hash identifier:          JugGV08VIGKjBZehya7VtdoLEM3ByPhBt3ErREe2n7Y=
Subject key identifier:   B9:60:29:DC:09:69:10:D3:6F:4F:63:12:4B:35:36:DF:D4:27:EA:31
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       54337BBFEC85DAA575C62D5A5590ABC49CDCBD98
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d64e81b-f22c-4782-94ea-13f0038815cb.roa
Signing time:             Tue 17 Oct 2023 00:00:00 +0000
ROA not before:           Tue 17 Oct 2023 00:00:00 +0000
ROA not after:            Tue 21 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:33:7b:bf:ec:85:da:a5:75:c6:2d:5a:55:90:ab:c4:9c:dc:bd:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 17 00:00:00 2023 GMT
            Not After : Nov 21 23:59:59 2023 GMT
        Subject: serialNumber=ecc160fa69d241200430f3cf838c5660954d9300bb0bafa358d6244d761ff70a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:25:84:a2:f7:c1:bd:09:5b:7f:1c:73:1b:d2:
                    a4:08:11:05:5b:11:4f:6f:f4:e2:0b:4c:47:45:32:
                    a7:a7:42:61:d5:5f:c7:33:fe:ff:ca:04:bc:c9:87:
                    87:af:8f:26:6e:76:42:39:f9:82:17:53:36:f2:78:
                    b2:67:1f:58:08:b6:ad:39:65:ad:d9:a4:a0:c3:18:
                    2b:7b:a6:b6:ce:19:f9:6e:8a:f4:eb:13:46:87:ab:
                    67:4b:c2:63:0d:23:c9:d9:43:18:91:64:d5:51:35:
                    26:2b:5e:44:29:0d:3f:c4:71:16:cd:23:68:6b:f9:
                    b4:b4:6e:97:8a:b4:f0:86:ab:91:6c:02:8c:f7:9b:
                    29:30:d8:fa:01:bc:62:b1:aa:b2:05:c9:14:a2:48:
                    7f:11:0f:e1:3a:45:e6:6f:ce:11:d9:ec:fd:b3:d4:
                    33:59:3e:87:00:9b:65:71:45:f6:57:0b:8e:9e:3e:
                    0b:1e:9e:84:e4:68:91:18:4c:62:0b:fa:af:c3:57:
                    94:c6:93:2e:3a:98:3f:1e:f4:1f:57:c1:15:b1:bd:
                    68:87:f1:25:69:6a:0d:ed:a3:c9:6c:b8:8f:23:80:
                    66:21:2d:b1:3f:95:f3:a2:f1:ce:7a:fb:d8:15:9b:
                    35:87:cb:02:45:9c:c2:00:1d:2d:22:16:5f:5d:2a:
                    a2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:60:29:DC:09:69:10:D3:6F:4F:63:12:4B:35:36:DF:D4:27:EA:31
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d64e81b-f22c-4782-94ea-13f0038815cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:c2:37:e7:16:e4:49:6a:40:36:d1:58:8c:a4:12:61:7f:d7:
         ec:ee:87:63:08:20:40:aa:c8:bf:1c:0c:01:53:9d:4b:83:02:
         1d:d2:99:24:2c:d9:bb:3e:11:73:6a:33:19:08:b4:7e:b0:72:
         0e:d9:9d:9e:70:dd:12:46:35:78:9a:76:b6:02:f2:55:96:4c:
         f7:62:7a:21:0b:6a:93:25:e1:ce:fa:8f:bf:2d:8f:2e:91:a6:
         20:77:61:44:8e:84:6b:f6:5e:27:2f:6a:6c:cb:86:53:f8:5c:
         2d:5a:2f:ab:f4:1a:ad:ed:a9:22:ef:e6:b6:f9:66:be:20:6a:
         14:a0:4e:7e:60:3d:89:36:ec:ab:35:71:7b:52:65:8a:07:e4:
         84:9b:98:a1:63:cf:f7:3c:29:2a:a3:eb:ea:b4:c4:35:b5:b8:
         34:07:96:c8:e6:cf:cd:c8:f8:65:44:0a:9a:81:b9:c6:50:13:
         b1:42:56:d2:01:c8:85:2d:c7:54:df:1f:ce:99:54:86:15:d9:
         c3:78:43:f4:73:00:ce:58:62:33:a9:fc:71:6c:09:49:5f:68:
         24:7f:d4:ee:22:fa:24:5c:e5:5f:b4:ce:21:a3:37:f9:50:f4:
         ee:1b:c9:84:6c:5d:36:74:aa:67:2b:e5:fe:31:ab:d8:09:18:
         0c:06:1c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----