Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c6f9d74-e982-4027-bafa-878732d1de3d.roa
File:                     7c6f9d74-e982-4027-bafa-878732d1de3d.roa (raw, json)
Hash identifier:          xr5c9PNPeKRAeqdHfVmgahyACNryx9w7yd4vtCo09FA=
Subject key identifier:   E4:48:38:98:61:EE:67:2C:EC:86:BA:FA:E3:B0:5C:CE:4B:34:1B:53
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       408FFF989A8800B874A9009D1715F7EAC245C7A7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c6f9d74-e982-4027-bafa-878732d1de3d.roa
Signing time:             Mon 19 Feb 2024 00:00:00 +0000
ROA not before:           Mon 19 Feb 2024 00:00:00 +0000
ROA not after:            Mon 25 Mar 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8f:ff:98:9a:88:00:b8:74:a9:00:9d:17:15:f7:ea:c2:45:c7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb 19 00:00:00 2024 GMT
            Not After : Mar 25 23:59:59 2024 GMT
        Subject: serialNumber=cb459a90ac7d5ef0af3f36d4c0a39292b6c6e50948afa298d354de5dd1943c9d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:49:05:ba:60:d2:ca:3a:e8:0b:54:9d:1b:
                    6c:ce:8c:e1:c3:8f:3f:78:4b:9e:53:7b:c9:9a:ad:
                    16:0a:de:92:61:88:36:bb:99:25:90:8c:8c:c6:91:
                    f3:e3:19:3b:e5:e0:c7:a0:2a:b6:c9:23:8c:dd:b1:
                    54:b0:3c:6c:23:a4:cd:62:d0:5c:2d:10:b2:68:09:
                    f8:74:34:1a:0b:9b:1a:04:28:63:6f:16:05:bb:cb:
                    8d:b0:a7:83:1b:cb:ff:6b:07:27:97:28:6d:9c:d9:
                    14:b9:ad:56:ad:e9:ec:d1:69:6e:9b:b4:ca:1a:d3:
                    35:5f:88:3f:dd:ed:71:3c:75:aa:e8:f1:3d:f2:64:
                    f2:a6:48:12:5a:f4:38:57:c9:f0:d8:79:49:c1:2f:
                    9d:a6:20:ba:89:96:b9:cb:4f:f6:b1:e5:2e:be:39:
                    51:f6:56:82:30:cd:08:12:b8:81:56:fa:96:d4:d7:
                    da:ea:bf:4d:f3:46:aa:11:c1:db:b2:2a:f6:ae:5f:
                    a1:b7:2e:4d:d5:a1:9e:46:c3:be:eb:98:80:d8:dc:
                    64:95:e5:3d:d7:ee:a3:96:62:e5:b5:63:01:82:25:
                    bd:86:19:33:fb:49:f4:31:dd:16:c6:e6:0c:eb:52:
                    72:ac:f2:c4:7c:38:80:f9:fe:06:81:dd:10:64:00:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:48:38:98:61:EE:67:2C:EC:86:BA:FA:E3:B0:5C:CE:4B:34:1B:53
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c6f9d74-e982-4027-bafa-878732d1de3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:49:73:b6:db:2f:3c:00:99:12:f2:c4:d4:fc:40:bb:61:d7:
         81:c0:9d:df:9d:e6:cf:5a:07:6c:e6:88:55:80:49:34:00:20:
         38:61:28:c0:8c:4b:56:5f:58:bb:4e:74:26:3f:2f:4b:12:4d:
         ee:c6:0e:d5:48:e3:58:59:de:9d:7a:de:59:df:3e:eb:9a:63:
         be:5b:f6:bc:83:8e:6c:90:f4:d8:d3:73:88:43:a0:0b:18:7e:
         e2:96:f1:d1:7d:82:24:ce:73:34:81:d5:5d:d5:57:fe:2c:dc:
         21:60:c3:79:4c:18:c9:d9:3f:f3:ea:e3:e4:58:d2:c1:bf:0f:
         7f:36:43:f0:69:b4:d7:21:ba:d3:33:8f:ee:00:6b:3b:4a:d4:
         11:b3:e3:7e:62:c3:8d:c3:30:0d:d8:d1:4e:1e:6a:e2:b4:ef:
         ec:9b:ef:cf:81:42:38:75:94:94:47:e1:e1:4f:7a:8f:c4:6c:
         08:a4:5e:11:45:46:b5:6c:fc:54:f6:16:5b:d1:04:cd:b7:16:
         b3:ee:a8:67:9f:66:6a:bf:32:e5:7e:ab:14:78:50:ec:d2:fa:
         34:08:1c:e3:bd:87:14:a9:ff:e9:5a:da:2f:60:9b:1f:cf:3f:
         62:df:eb:40:2d:3d:07:6e:33:66:3f:6d:ba:c6:7a:48:4a:4b:
         21:45:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----