Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0467255-bbc1-4089-b44d-c67147e0b672.roa
File:                     a0467255-bbc1-4089-b44d-c67147e0b672.roa (raw, json)
Hash identifier:          q7pv09z9N/vbZF3nsi9cFZ+BHKG/0uWsOOx/weXLT8A=
Subject key identifier:   7B:37:41:62:0A:F2:6D:F8:87:8B:FF:99:B5:E2:77:57:91:54:C1:68
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       495F70E7C6767F452BB8A8AD9E67C36880839446
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0467255-bbc1-4089-b44d-c67147e0b672.roa
Signing time:             Sat 04 Nov 2023 00:00:00 +0000
ROA not before:           Sat 04 Nov 2023 00:00:00 +0000
ROA not after:            Sat 09 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5f:70:e7:c6:76:7f:45:2b:b8:a8:ad:9e:67:c3:68:80:83:94:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov  4 00:00:00 2023 GMT
            Not After : Dec  9 23:59:59 2023 GMT
        Subject: serialNumber=00e3f8c7c29c2a4273248a3ab13cc14ed3539d7efbd9e07d00d5ab49b9d52b57, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:0a:98:59:80:d2:53:5a:e0:7e:3b:8d:2f:
                    0d:d7:9a:5f:61:ad:80:ca:d2:db:d9:81:39:87:2e:
                    a6:86:e0:6f:62:62:9d:c7:4e:f0:d0:86:d4:34:84:
                    0b:ac:73:1c:f0:f7:35:bb:07:73:15:0c:10:b2:06:
                    87:31:1d:be:b8:94:c5:57:93:9e:49:e6:e8:62:81:
                    c2:6a:98:7a:3d:00:fe:c7:d7:f8:4b:02:bd:7c:e6:
                    d2:bf:1f:81:3d:38:81:9b:d8:dc:2a:41:93:0b:44:
                    dc:63:64:5e:0d:b5:fc:e8:3b:94:54:3c:e4:59:ac:
                    a2:c0:8d:eb:97:91:e6:17:d0:3e:f3:36:4f:3a:e5:
                    3d:3a:29:9e:03:f9:55:d1:fd:78:c7:f5:76:6d:fa:
                    e1:59:a3:ec:2d:9a:e5:b0:13:ad:d1:5b:98:a3:d7:
                    84:fe:c1:b5:88:72:0f:79:3d:34:97:0d:46:6c:06:
                    8b:de:02:a6:1d:27:7e:84:59:4a:0a:a2:b4:37:be:
                    5c:ed:85:b5:4a:86:3f:e2:24:22:ff:10:e1:c2:8c:
                    95:b1:3f:2f:2d:26:c8:e8:d0:b3:29:0b:05:bd:87:
                    33:5e:0b:bf:19:6d:dd:8c:85:6f:66:96:2a:82:84:
                    fe:6f:cb:9d:99:52:87:7b:9b:90:9a:39:63:0c:8d:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:37:41:62:0A:F2:6D:F8:87:8B:FF:99:B5:E2:77:57:91:54:C1:68
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0467255-bbc1-4089-b44d-c67147e0b672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:68:0e:86:d5:d8:81:27:75:4c:34:ec:a9:4e:92:d0:a9:82:
         51:da:f0:25:4d:e1:2c:15:5c:9e:60:e0:58:e8:ab:22:d5:c0:
         7e:6e:1c:c9:60:7f:8f:70:79:76:bb:21:d5:7a:c0:ec:22:70:
         23:1d:3c:40:45:02:4b:63:dd:ae:79:50:ad:14:20:8c:76:cb:
         33:99:c5:d4:f7:dd:da:8e:22:72:29:36:bf:b0:f4:2c:d7:18:
         4c:c0:c8:f4:5c:2e:58:34:8d:06:e8:5d:b2:44:7e:18:a1:5b:
         05:b0:4c:45:c9:14:dc:05:a0:fe:e9:5b:fb:a5:d1:d7:2e:72:
         4f:71:5a:d5:b6:8a:af:94:e9:cb:bc:c7:31:bb:7e:e3:1e:05:
         42:93:b6:e1:a3:e7:d5:8d:93:73:f3:40:84:9f:d5:75:26:29:
         1e:bf:b9:07:d2:45:69:19:a9:b9:77:57:4d:e4:e0:60:e2:a0:
         e2:45:35:9b:04:1d:a0:a5:7a:cc:5d:bb:f2:50:35:6a:0c:c2:
         e8:23:2c:68:07:20:24:e5:5f:33:3b:99:76:7c:51:0e:4c:d7:
         08:ec:ac:d9:4f:5f:e3:78:46:3a:e2:d9:b2:b6:35:d2:74:93:
         07:ba:b1:12:ff:03:10:25:a0:2b:26:12:a7:94:ad:05:b2:f2:
         83:8c:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----