Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e419483-dca1-434e-98e3-cac2b3805da8.roa
File:                     9e419483-dca1-434e-98e3-cac2b3805da8.roa (raw, json)
Hash identifier:          ZDSCX0gNliLJ2r2jA6QnShPNLBeKCcWWfNLMNwF2xe8=
Subject key identifier:   7D:FB:E4:FA:DD:6E:97:D4:35:90:51:7D:C2:C1:95:75:72:CD:B4:A3
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4DF1C70170DA65D7C6AE54AC0183B27C93271B52
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e419483-dca1-434e-98e3-cac2b3805da8.roa
Signing time:             Wed 13 Mar 2024 00:00:00 +0000
ROA not before:           Wed 13 Mar 2024 00:00:00 +0000
ROA not after:            Wed 17 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f1:c7:01:70:da:65:d7:c6:ae:54:ac:01:83:b2:7c:93:27:1b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 13 00:00:00 2024 GMT
            Not After : Apr 17 23:59:59 2024 GMT
        Subject: serialNumber=ff1a70798a71385d5ba08105e2978a91f5ac09ab91a8c99039f3e0965044bfa3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b5:3c:28:64:ea:c4:4c:a4:de:f4:89:1d:2a:
                    b9:e8:4c:59:df:5f:4e:c0:2c:f3:b3:16:96:33:f9:
                    b8:b8:f3:be:1e:87:91:c7:17:cd:11:75:e2:e3:25:
                    e3:67:58:31:92:f0:a7:84:7c:2f:1a:30:89:51:fc:
                    a1:20:47:c3:fe:00:c1:ca:dd:b3:72:05:27:64:a7:
                    18:a0:28:a0:73:8d:83:98:af:cb:f2:96:dd:20:14:
                    e3:b2:ac:4f:04:a6:46:74:2d:d0:32:b8:49:48:cd:
                    d7:76:98:5a:d9:94:ff:88:e2:da:1c:cf:e3:82:73:
                    fe:fe:93:d8:ac:d6:15:ed:4e:db:4c:63:63:15:7e:
                    00:f8:45:74:9c:25:de:85:6b:10:8d:9e:40:f9:39:
                    97:ec:88:c4:04:5d:45:16:18:2a:cb:d9:4b:2b:99:
                    a8:ae:bf:02:ab:0e:90:17:e6:61:c6:a4:b0:74:65:
                    56:87:c5:2c:e4:21:62:fb:cb:80:3a:c1:e0:83:6f:
                    62:fa:d2:6d:e9:37:41:4e:c4:a9:13:31:16:ad:2e:
                    d4:e1:24:69:96:17:cf:c3:fb:11:ce:89:8d:8c:05:
                    2e:4f:e0:7b:a0:59:95:71:b0:4f:e8:06:4f:c5:56:
                    cb:ee:3c:dd:ee:10:88:4a:91:c0:ac:5c:3f:7f:06:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FB:E4:FA:DD:6E:97:D4:35:90:51:7D:C2:C1:95:75:72:CD:B4:A3
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e419483-dca1-434e-98e3-cac2b3805da8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:a8:c0:17:97:30:54:25:61:ad:d9:3e:8a:6c:93:e3:f6:b2:
         70:3a:b3:c7:c1:9f:2e:a2:32:3c:3b:c6:23:35:76:8f:f7:49:
         a8:63:7d:99:68:b4:40:02:be:9e:19:3a:53:30:2b:e6:f4:f5:
         cc:26:f1:be:d7:a4:60:4d:5d:c8:0b:57:74:a0:31:a5:2f:57:
         e5:47:59:ce:19:19:6c:c0:88:db:72:e8:c4:1a:87:c5:43:cc:
         ca:2f:79:e5:cc:60:8b:4f:a4:f9:e2:90:90:af:32:9f:73:94:
         73:07:25:25:6e:d2:88:f1:4c:3a:d1:13:6e:a4:f6:ab:d9:bf:
         d3:01:8a:7b:7d:83:5e:70:f6:22:07:91:10:1c:c4:0b:51:d2:
         ed:11:0d:ef:a9:84:d7:2c:29:3d:9d:79:5f:09:95:5a:90:1d:
         4a:cf:71:6c:a1:60:f0:15:2d:02:1a:86:a5:1d:e1:80:a9:f3:
         75:97:87:ed:cb:59:a8:aa:fb:50:bb:d5:a5:0b:04:23:7c:f7:
         96:ae:7d:2b:37:25:ce:9e:d8:a0:e0:c0:0d:7d:be:dc:dd:3c:
         9f:20:b3:59:1e:3c:68:1f:97:ae:3f:8d:86:8a:03:e7:2d:6c:
         29:22:1c:a7:d7:05:ab:96:40:48:b0:d2:7d:48:6a:fb:db:b3:
         2e:35:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----