Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/80c0b41b-a66e-4fec-88ca-f632a5f9047d.roa
File:                     80c0b41b-a66e-4fec-88ca-f632a5f9047d.roa (raw, json)
Hash identifier:          6CIJgLP4hiHHI21cxbHld5uoWc2kc/VunCkSub1RNFg=
Subject key identifier:   6C:D1:B8:48:65:A0:1A:0A:FC:F4:83:70:82:8B:94:02:38:28:C8:BD
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7A73056C9C2564D2CB3BB7305F9F3C33A0738C37
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/80c0b41b-a66e-4fec-88ca-f632a5f9047d.roa
Signing time:             Wed 20 Mar 2024 00:00:00 +0000
ROA not before:           Wed 20 Mar 2024 00:00:00 +0000
ROA not after:            Wed 24 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:73:05:6c:9c:25:64:d2:cb:3b:b7:30:5f:9f:3c:33:a0:73:8c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 20 00:00:00 2024 GMT
            Not After : Apr 24 23:59:59 2024 GMT
        Subject: serialNumber=88db839f171633e6d7092580cc31aeb46f1a229d3ed5e37f9bedb2a1729f9b3d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:39:ab:7d:db:56:e2:c4:89:7e:df:88:a1:82:
                    d1:0f:06:31:9c:0c:c7:81:95:22:c0:c6:4a:08:85:
                    c5:f9:4d:96:00:2b:fb:3f:f0:45:28:93:8b:e6:12:
                    17:79:1a:c3:f0:08:6e:28:d4:93:87:66:5b:7a:0f:
                    4e:26:6f:07:a8:10:de:85:60:07:91:0c:f4:44:79:
                    7a:13:bd:90:c9:f5:ae:eb:03:30:06:c7:ee:64:ec:
                    99:52:8f:a5:d2:db:50:21:0b:99:8f:32:be:78:f5:
                    47:57:36:18:db:9c:59:d9:bd:ac:62:55:af:95:f5:
                    bf:f7:4d:8f:02:51:90:3f:c0:e7:3e:fe:c6:26:ce:
                    79:5a:f2:b3:c8:dd:18:03:21:14:24:e6:26:56:c8:
                    8c:34:8b:c5:7c:f6:1d:1d:60:0d:86:ab:61:0d:76:
                    54:f2:fa:ca:df:ac:47:9e:23:d1:9d:d5:6b:3b:e8:
                    74:41:a4:f6:14:db:dc:6b:78:d5:42:a9:c5:8f:2b:
                    ff:0f:1c:14:27:b4:62:be:c6:b3:a9:96:b3:66:5a:
                    81:71:ad:02:b5:5f:0a:a9:53:4e:5f:1a:65:cc:df:
                    c4:a4:b9:b3:ad:36:89:7e:33:36:61:b1:5f:60:a3:
                    66:32:a0:69:c0:8b:43:fd:18:ac:f3:50:ce:6a:5d:
                    f1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D1:B8:48:65:A0:1A:0A:FC:F4:83:70:82:8B:94:02:38:28:C8:BD
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/80c0b41b-a66e-4fec-88ca-f632a5f9047d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:17:d6:69:96:1c:d2:97:b0:4d:3b:25:a2:b9:13:9f:ac:c6:
         fb:bc:3f:d2:1d:38:32:f0:54:be:60:67:60:a7:c1:19:ca:6f:
         29:14:29:11:a1:6f:8e:7e:d6:cc:8f:bd:08:ef:d3:50:cf:ff:
         a9:15:15:8f:c5:a3:be:d4:30:72:db:f8:b6:4e:c0:0f:58:eb:
         b0:67:9d:3f:ec:83:0c:18:5b:ec:66:f0:7f:0c:a3:0d:4f:b7:
         64:48:56:8c:4f:71:35:8a:b9:ad:73:96:9d:92:a6:9e:74:b2:
         b7:b8:c4:10:d8:3a:4f:b7:07:60:78:75:e4:27:99:67:a2:d2:
         59:1e:45:f6:2e:e2:2e:95:36:3c:5d:6c:59:4d:13:fc:2c:e1:
         16:81:34:7c:22:57:25:c8:76:b0:60:4c:25:0c:7f:b1:35:20:
         f6:da:40:4f:20:0c:07:48:fb:67:65:77:79:4f:18:b3:47:ee:
         0e:c7:b6:9e:e2:12:c7:15:c5:59:14:85:e5:39:3a:ab:9c:1c:
         8b:6c:37:11:d2:83:ea:25:cc:50:dd:7b:b1:3a:30:2a:de:9f:
         4d:da:ba:91:8b:19:c4:0c:63:f9:ab:5c:2f:a9:57:bb:4b:93:
         21:bc:66:fc:d1:7d:9a:85:62:22:ce:0b:70:98:cf:23:72:f2:
         f0:0f:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----