Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/843527bc-7698-4a6e-8cbe-988bc39d8d13.roa
File:                     843527bc-7698-4a6e-8cbe-988bc39d8d13.roa (raw, json)
Hash identifier:          mFSdl6ERm2rRjcxGPULxCuewvuDkKC90n99uR7vK0Ek=
Subject key identifier:   17:FF:87:11:E2:67:E4:C0:27:F5:34:F1:23:BE:74:7B:DD:ED:09:B9
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5AED408CFE817F397479E62ECE7348CE7315B114
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/843527bc-7698-4a6e-8cbe-988bc39d8d13.roa
Signing time:             Tue 21 Nov 2023 00:00:00 +0000
ROA not before:           Tue 21 Nov 2023 00:00:00 +0000
ROA not after:            Tue 26 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ed:40:8c:fe:81:7f:39:74:79:e6:2e:ce:73:48:ce:73:15:b1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 21 00:00:00 2023 GMT
            Not After : Dec 26 23:59:59 2023 GMT
        Subject: serialNumber=0cc3f75f4bd3e100de61ec9d0f32ed0d20680e5b23536632f99c0c67f4faa506, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5f:a5:60:c4:95:83:ca:65:a0:cc:b7:a0:ce:
                    28:63:77:8e:86:25:17:bb:25:43:28:91:52:30:96:
                    d9:9b:d7:cf:1f:ce:a2:90:e1:82:c3:09:93:2b:ac:
                    31:bd:ec:a4:05:63:7a:58:a4:b1:58:5b:43:d8:75:
                    c0:80:d5:b5:4d:64:39:9c:2f:33:c7:cb:d5:bb:62:
                    95:69:7d:d2:62:1a:67:8c:41:00:0e:06:6c:94:66:
                    5c:5d:f4:4b:14:71:43:6f:57:29:4b:5a:3b:ff:77:
                    d1:38:af:b5:72:71:3a:c7:ca:c2:b3:85:98:f5:99:
                    d9:75:22:36:ff:4d:10:0d:12:10:66:3c:11:26:1e:
                    eb:60:17:84:a8:0a:eb:ab:89:7d:f0:b7:ed:48:54:
                    ca:df:5f:ec:d4:da:8c:22:39:72:51:64:5c:3b:9e:
                    76:fd:d6:e9:4b:58:e4:16:b6:54:c2:68:16:10:73:
                    26:87:4f:b7:c8:03:22:d7:54:b7:ff:bb:93:bf:e0:
                    4f:e4:50:0c:15:e2:55:6d:04:a0:d8:f6:a9:fc:ff:
                    68:a6:89:af:32:5b:7d:1a:d5:ce:40:c5:d2:40:f4:
                    bf:a8:b3:96:a4:10:91:60:d4:dd:26:5a:c0:35:4c:
                    de:20:9d:8b:09:4b:20:d9:78:cf:da:eb:b9:c4:cc:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FF:87:11:E2:67:E4:C0:27:F5:34:F1:23:BE:74:7B:DD:ED:09:B9
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/843527bc-7698-4a6e-8cbe-988bc39d8d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a1:d0:7d:75:d8:41:a4:c1:93:47:91:94:ab:2b:f0:ed:32:
         8e:02:8f:e1:71:dd:46:b8:8e:15:75:7f:d5:d3:e4:77:9a:cd:
         4f:9b:81:44:d3:9c:bb:b5:bc:04:80:07:b2:9d:cd:af:52:66:
         4e:74:77:1a:a6:71:9b:d8:fb:b4:d9:80:1d:bf:3e:56:87:13:
         fa:c9:c1:1f:16:8d:eb:0e:4b:67:1b:a3:28:9e:10:35:28:2f:
         96:95:82:32:2e:d9:77:36:ba:63:98:bb:fe:15:3b:c5:c0:23:
         01:70:79:0d:5a:ef:e8:2d:c2:7d:38:75:9a:fe:98:90:31:20:
         b8:db:e6:74:bd:cb:e4:36:42:02:49:e6:88:3e:6e:c7:b1:32:
         11:6b:af:6a:74:be:02:a8:8d:23:a8:dc:a1:42:aa:30:2f:6a:
         48:d3:81:ea:16:bb:84:e1:42:c4:8c:88:8a:02:56:d6:3e:94:
         2d:a1:3c:b8:37:e5:06:8a:51:f9:48:6e:1f:4e:dc:23:f9:ef:
         44:e8:e8:72:0b:e1:64:ef:41:21:73:3a:de:ec:5f:23:25:2b:
         2a:f6:3d:c1:17:6f:d4:47:59:de:d4:b9:6c:f1:03:c7:36:f1:
         c1:6f:76:da:72:af:62:dd:b6:f7:6f:df:d7:dd:27:9f:d7:af:
         d3:08:f9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----