Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e9e63dd-b0da-4f07-9b31-6bc1c6833f57.roa
File:                     9e9e63dd-b0da-4f07-9b31-6bc1c6833f57.roa (raw, json)
Hash identifier:          w/Pv8rj1b8M3mgYuMr00cvRsxBXn5potMWix16ulfY4=
Subject key identifier:   8E:68:5A:DE:5C:A6:FE:10:7D:1C:D4:A2:4A:2A:6E:7B:45:05:F5:A8
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       66090E7FE4517212F94B23C974EE68464644A602
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e9e63dd-b0da-4f07-9b31-6bc1c6833f57.roa
Signing time:             Wed 11 Oct 2023 00:00:00 +0000
ROA not before:           Wed 11 Oct 2023 00:00:00 +0000
ROA not after:            Wed 15 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:09:0e:7f:e4:51:72:12:f9:4b:23:c9:74:ee:68:46:46:44:a6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 11 00:00:00 2023 GMT
            Not After : Nov 15 23:59:59 2023 GMT
        Subject: serialNumber=5f9aa8f10cd71673078a868d56e067c8d5f43378e9bed9fb0c5a4c71ab46236b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:d1:ce:0c:16:a9:6f:8b:99:7e:4c:c5:cc:
                    3f:71:82:95:e2:36:30:d7:58:28:2c:14:21:2d:97:
                    bb:be:07:dd:ca:a6:d5:53:03:39:7b:d4:8b:17:1c:
                    51:db:50:43:60:32:f3:46:93:9e:37:af:6f:f8:02:
                    c7:bb:49:ad:9d:58:36:c2:7f:96:28:9f:12:98:e6:
                    2b:02:0a:09:3a:4d:3e:c3:87:62:5e:e1:3f:dc:b6:
                    4e:45:3e:88:b4:f7:71:8c:99:db:70:81:47:90:25:
                    68:b6:31:2b:13:4e:e7:1f:ed:c6:51:58:8d:6e:f8:
                    05:37:2b:b5:65:0a:42:e0:06:fd:e5:6e:1b:35:b1:
                    6d:21:d0:bf:8d:8b:94:cd:59:a1:af:08:7f:ca:ff:
                    d9:90:ed:ec:46:65:ee:cd:a0:58:06:ad:e2:f5:17:
                    40:78:4d:36:8d:2e:eb:ee:1e:45:c2:1f:42:b9:55:
                    5d:67:71:84:1f:0f:44:72:fd:83:82:e8:56:e7:63:
                    dc:b2:db:80:ac:9d:dc:47:81:4a:9b:bb:99:6d:e8:
                    a1:e7:b8:16:b6:67:22:7e:77:4d:b5:01:bd:8a:78:
                    20:37:69:c4:fa:91:87:c1:d4:d3:a1:27:83:34:54:
                    25:7f:9a:4c:67:96:54:da:fe:4d:e4:73:97:bc:78:
                    73:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:68:5A:DE:5C:A6:FE:10:7D:1C:D4:A2:4A:2A:6E:7B:45:05:F5:A8
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e9e63dd-b0da-4f07-9b31-6bc1c6833f57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:1b:20:04:26:9b:69:fa:4f:fd:ba:77:57:1e:d6:db:33:5b:
         ef:13:a5:c7:1d:48:96:3e:c9:4a:61:cd:6e:8a:24:06:25:71:
         05:75:5d:de:bf:10:ed:00:d9:e4:8e:8a:49:cd:49:9d:0d:37:
         38:e2:94:0c:27:da:c6:f2:2f:58:ed:0b:e1:6e:21:aa:07:06:
         de:2f:ac:6d:51:59:40:73:c7:91:3e:8d:19:eb:05:e5:a4:7a:
         fe:9f:91:14:8f:c9:46:40:c1:7d:bc:00:c4:47:67:4a:f0:8e:
         82:9e:16:89:a1:c8:a9:13:80:19:74:af:56:4d:6a:f6:06:ec:
         ab:23:d0:1c:5d:67:7e:92:98:5c:3f:19:0f:aa:d8:68:6b:c6:
         e2:87:a5:a0:0a:ca:d8:10:08:bf:42:86:25:61:45:b9:29:88:
         f6:cd:b5:c2:c1:45:ec:9e:e7:cb:bc:e7:b4:9f:17:3a:71:6d:
         9c:ca:f3:b2:1e:e7:d3:ac:17:d1:60:53:96:f6:76:c8:55:32:
         51:7c:43:b2:e8:a2:72:5a:16:1d:30:e9:de:1c:c3:54:b5:32:
         f4:48:9d:0f:e3:dc:b8:a3:74:15:af:91:3c:40:f0:15:c0:01:
         42:06:93:d3:8f:ea:17:25:87:ae:43:9c:a4:c2:ce:ca:d7:4b:
         c0:25:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----