Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e77ebb6-38bf-43af-a608-4b23c8b81225.roa
File:                     9e77ebb6-38bf-43af-a608-4b23c8b81225.roa (raw, json)
Hash identifier:          GUBhSEBGmThmN1lEJg6UQuhUgut2bem0qCxoWff2dVY=
Subject key identifier:   6D:AE:9D:1D:09:6E:49:D6:24:C7:CD:E6:2E:F5:C3:51:80:4D:A9:91
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7EFECDE3C0D953B29772A6668CEF43FA10C36338
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e77ebb6-38bf-43af-a608-4b23c8b81225.roa
Signing time:             Sun 31 Dec 2023 00:00:00 +0000
ROA not before:           Sun 31 Dec 2023 00:00:00 +0000
ROA not after:            Sun 04 Feb 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fe:cd:e3:c0:d9:53:b2:97:72:a6:66:8c:ef:43:fa:10:c3:63:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 31 00:00:00 2023 GMT
            Not After : Feb  4 23:59:59 2024 GMT
        Subject: serialNumber=2dc1d372d22b5e468f06d7d77a101697dd853e1d660feb8917004ef11b93f80c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:2e:ec:36:85:33:68:c1:fc:03:b0:58:04:
                    2e:df:92:5e:f5:a7:b9:d1:b6:94:49:2b:b5:64:d7:
                    b6:f1:91:b1:d4:75:1a:58:4f:fe:d1:6f:54:f8:c0:
                    47:39:18:df:0f:0d:0d:17:80:b5:b6:af:99:5c:12:
                    47:2d:bf:2f:4c:18:95:52:c2:9d:5f:cb:dd:b2:57:
                    68:c7:4b:56:63:f9:2e:15:db:e2:d1:b5:1b:5d:85:
                    57:d8:ae:af:f5:6e:22:4b:5f:f8:8d:35:a1:0a:ec:
                    9a:c5:03:0a:8f:02:48:f4:69:62:5e:c7:8e:fa:5b:
                    88:ce:30:00:44:3d:56:6b:02:6d:50:2a:fd:ed:37:
                    fe:44:8e:99:a9:ee:25:50:71:e1:03:23:fd:7e:13:
                    ad:87:e5:d3:54:6c:45:8f:dc:dc:7c:18:40:17:52:
                    0c:f6:d1:6c:0e:c1:62:fc:76:0c:d0:86:d5:bf:07:
                    ea:16:b5:28:09:5e:66:9d:bf:f4:cd:a4:92:1e:09:
                    8b:e3:49:7c:33:a0:c5:00:82:7b:4e:8d:69:80:43:
                    5e:ba:8e:4c:5b:72:31:ef:7f:c4:e2:7d:e9:4a:1b:
                    3f:c1:b5:19:44:f8:c5:64:4d:e4:bd:b8:31:19:bf:
                    d9:dd:bc:da:ac:80:1b:46:3d:a8:fb:0b:45:71:1e:
                    4c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AE:9D:1D:09:6E:49:D6:24:C7:CD:E6:2E:F5:C3:51:80:4D:A9:91
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e77ebb6-38bf-43af-a608-4b23c8b81225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:8d:42:d3:3e:d0:b5:d8:7f:75:e7:84:0d:93:67:4f:91:
         b8:80:a4:dd:10:d1:84:5e:47:65:79:9d:ab:5f:34:05:0f:d1:
         9c:46:b5:52:57:07:ed:fa:69:cd:69:3a:1b:2b:b8:03:68:ad:
         54:35:ea:d9:a1:ad:e1:ef:ab:d5:51:d6:c1:0a:ce:cc:65:ca:
         6c:29:3b:9c:aa:3c:30:28:76:70:c8:7e:5e:49:8d:18:85:8a:
         8b:ef:60:c0:f3:4c:87:32:76:a8:3b:95:9a:b7:71:7c:99:bd:
         7d:4e:f9:60:7b:9b:e1:27:09:3c:75:5d:f2:a5:34:93:43:6b:
         40:1a:55:29:80:b5:d1:fb:f7:a7:80:8c:8c:44:21:52:6e:30:
         58:65:65:3c:28:27:08:4f:97:97:b8:41:e8:6b:12:ba:4b:b5:
         ce:a0:0c:a8:7a:ea:c3:b6:fc:f7:76:d5:eb:45:c6:d2:ee:ed:
         08:84:d0:71:ff:4a:45:62:24:4e:4c:68:bc:e5:09:d0:81:66:
         4f:30:55:66:a2:67:73:74:81:c6:d5:65:1b:6f:af:98:7a:ff:
         8f:d5:59:49:20:a3:d6:87:7f:b0:16:38:b7:0f:25:66:7e:1b:
         0c:7f:13:cb:ff:fd:4b:81:d6:b5:60:99:fa:ce:23:de:96:49:
         9c:6c:6e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----