Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/84c1f331-4bb7-4ed7-aaf2-d7979a2f2cd9.roa
File:                     84c1f331-4bb7-4ed7-aaf2-d7979a2f2cd9.roa (raw, json)
Hash identifier:          GQa1Byr/nVdrJToDAG1AJUaW/mlU1YB5ZtHCfX0vcT8=
Subject key identifier:   D4:F0:5D:57:49:1B:08:17:F7:EB:C4:0E:8D:72:68:AE:1E:96:41:3B
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4A1C4430D11EC283B99638474A04859172B12554
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/84c1f331-4bb7-4ed7-aaf2-d7979a2f2cd9.roa
Signing time:             Sat 21 Oct 2023 00:00:00 +0000
ROA not before:           Sat 21 Oct 2023 00:00:00 +0000
ROA not after:            Sat 25 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1c:44:30:d1:1e:c2:83:b9:96:38:47:4a:04:85:91:72:b1:25:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 21 00:00:00 2023 GMT
            Not After : Nov 25 23:59:59 2023 GMT
        Subject: serialNumber=0e5cd32ba09c3eba8f82ee02a2f5bfec9a964d7a8aa232ff1aff09b15d5460ad, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:39:a3:1c:4e:31:1c:97:4a:21:18:fe:c3:b0:
                    4c:11:57:ff:fb:ea:fe:eb:9c:66:f2:2a:5f:d9:29:
                    ee:9c:89:b1:4a:ca:e7:be:eb:e5:9f:16:05:39:65:
                    c4:1d:6d:ee:a7:d3:b4:a3:1e:06:b2:8d:37:a4:08:
                    2d:19:f8:9d:8e:00:9e:eb:e5:d3:25:7e:c3:06:3b:
                    4b:aa:2e:0e:55:10:e0:14:97:97:c4:b4:a4:80:93:
                    5d:b8:12:22:3a:0c:ea:cb:e4:08:d3:2e:2d:ea:21:
                    2e:1a:fb:c4:86:17:d2:eb:c2:d7:d2:6d:2c:89:29:
                    c9:68:25:3d:ee:9d:10:45:0b:25:48:b1:85:dc:ae:
                    58:4f:50:57:01:45:65:b8:51:cb:dc:4c:86:99:a1:
                    81:44:f8:4a:7b:c9:68:0b:4a:5c:2f:6d:2c:f7:2e:
                    61:65:66:90:89:ad:8b:13:2d:f9:05:56:2a:01:38:
                    08:66:26:27:32:78:57:87:ef:46:5a:87:72:65:9d:
                    48:98:95:78:f2:9e:bf:89:7e:f8:ea:51:64:da:8a:
                    c8:08:1a:36:0e:a3:f6:f6:38:3f:d5:3f:20:e3:85:
                    9a:94:86:79:51:94:6e:cf:65:1a:56:7d:e4:43:26:
                    a6:73:bb:dc:fe:fd:39:4c:4d:8e:b0:ce:8c:51:ed:
                    99:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F0:5D:57:49:1B:08:17:F7:EB:C4:0E:8D:72:68:AE:1E:96:41:3B
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/84c1f331-4bb7-4ed7-aaf2-d7979a2f2cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:cb:96:66:ca:cd:ec:f4:54:3f:3f:70:44:8e:06:0a:78:01:
         f8:eb:ef:c1:f6:04:4a:42:b6:9b:6e:f3:24:61:17:f6:65:54:
         00:d0:18:ee:af:d3:f6:2a:23:b6:f3:a7:44:d7:1e:c3:5d:17:
         3d:86:a0:0a:b5:98:9e:c5:f8:2f:ce:ba:d0:a9:9a:a0:f5:e4:
         12:b1:e8:96:1a:c7:82:fe:b0:aa:e8:57:3e:33:55:d3:1b:f5:
         bb:c8:fc:f1:08:b5:ae:89:79:69:02:2e:cd:fe:34:9d:5a:df:
         36:bb:40:b3:14:39:51:70:c3:80:b4:28:38:7f:39:33:ab:3d:
         f9:5e:e0:3f:9e:87:17:73:16:26:4a:93:b5:11:79:73:b5:11:
         b1:4f:29:ec:ce:ef:33:de:7e:61:2e:c6:bf:db:7e:78:18:60:
         85:5a:c9:a7:36:2e:b2:d4:79:6b:25:d5:a8:59:8c:46:62:fc:
         69:72:7b:9e:d7:96:bb:7e:eb:13:de:91:6e:81:e4:db:1f:b2:
         3c:89:85:6c:8d:48:e4:d1:29:d8:0d:0c:7f:a0:99:23:a7:fc:
         aa:7b:f5:04:61:16:8f:ce:e1:af:99:e9:9c:c4:c6:47:6b:80:
         17:2d:c1:d3:ad:41:eb:12:e2:93:64:de:c6:79:41:48:e1:88:
         35:0d:18:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----