Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1d1ebe4-6021-472c-b29d-edf8e895feaa.roa
File:                     a1d1ebe4-6021-472c-b29d-edf8e895feaa.roa (raw, json)
Hash identifier:          u7zHhBWOBR/1DURko2q4tg51Dnr0fEDq5wxdvT2Ox4M=
Subject key identifier:   14:C9:1D:6B:19:88:C9:A7:6D:8B:49:D2:91:C3:C3:BB:67:1A:E9:1B
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3CC1D5735167DFCB2C978EE98E0894A32191B30B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1d1ebe4-6021-472c-b29d-edf8e895feaa.roa
Signing time:             Sun 03 Mar 2024 00:00:00 +0000
ROA not before:           Sun 03 Mar 2024 00:00:00 +0000
ROA not after:            Sun 07 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c1:d5:73:51:67:df:cb:2c:97:8e:e9:8e:08:94:a3:21:91:b3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar  3 00:00:00 2024 GMT
            Not After : Apr  7 23:59:59 2024 GMT
        Subject: serialNumber=fb1669e1aaf3d203c2e27095cbbedb983ce4374c4b4a859487a9ae5cb3224129, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:99:fa:35:40:61:af:a9:b2:62:80:37:b5:
                    a2:80:40:96:ec:a9:7f:77:38:33:cd:d1:90:aa:55:
                    d7:32:e4:89:60:fa:c1:cf:6d:0a:cb:1a:ba:7c:75:
                    0d:92:03:cf:af:da:43:1f:10:62:1d:d6:bb:d8:de:
                    37:5f:2e:fc:c5:52:c8:f2:b5:32:79:49:d6:1a:bc:
                    6a:59:dd:6a:9c:2b:27:c7:10:6b:8e:80:a8:ff:bf:
                    71:1c:47:e7:cb:3c:d9:0f:c3:d1:47:c6:d3:b2:bd:
                    dd:fb:04:e3:69:b2:7f:2c:d0:f3:e3:ce:ff:49:c2:
                    a5:16:0e:3f:f1:23:5f:61:6b:dc:87:64:35:80:72:
                    a4:c6:d4:ed:11:ce:03:08:cf:8a:51:9b:8c:18:95:
                    4b:bb:17:dc:26:bf:7c:41:34:05:7d:65:8d:0d:a7:
                    3c:b2:28:98:ba:f6:5e:6f:4e:69:a3:0c:5b:90:1e:
                    9f:20:d7:fe:05:0e:db:36:2f:cb:1c:f8:91:d9:e1:
                    4c:0a:97:78:f7:0d:00:8e:76:2e:54:ef:cd:33:70:
                    e6:27:29:64:1a:19:97:b1:4f:b8:43:7e:03:67:86:
                    7f:03:96:9f:4b:a0:0b:c1:df:95:d7:d2:60:25:1f:
                    a8:58:bc:e3:11:1b:31:4e:2f:03:85:1a:07:f5:d9:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C9:1D:6B:19:88:C9:A7:6D:8B:49:D2:91:C3:C3:BB:67:1A:E9:1B
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1d1ebe4-6021-472c-b29d-edf8e895feaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:7f:e6:52:b5:2f:80:f3:e4:c2:1f:88:93:37:63:97:16:98:
         c0:0a:dc:da:62:be:c3:f3:a2:40:3e:c8:35:cc:60:6a:45:b5:
         21:98:ae:fa:ee:4e:ab:44:ef:82:10:d9:00:7e:d2:78:53:fb:
         6b:7e:dd:06:0f:ea:d9:9a:7f:66:37:3c:98:9c:6d:a5:74:39:
         6e:08:d3:3a:1e:c9:ce:b5:c6:18:e1:1c:ef:4a:f2:14:22:55:
         45:90:5c:d9:67:ea:ac:95:07:4f:2b:7f:d0:a5:11:db:47:f8:
         55:10:80:88:88:f6:e5:35:c8:b0:5f:b5:32:f0:46:1b:e0:d7:
         90:4b:86:5f:a0:ae:a9:71:4d:7f:08:c0:23:4f:25:da:e1:98:
         e2:8c:72:df:9a:7e:3e:dd:3a:25:11:42:38:ae:26:de:cd:4d:
         bf:d3:d8:96:c5:ef:39:7b:0f:07:86:6f:f0:68:07:6d:49:d6:
         ca:79:ad:61:aa:ad:99:ec:cb:2b:ea:bb:58:b3:2b:34:43:ad:
         f5:fd:25:bc:f6:34:8c:b4:45:ab:99:4f:c9:bd:49:56:c8:9d:
         af:ab:ed:c7:78:1c:7c:33:77:dc:3c:fd:d9:ec:7d:87:d2:31:
         79:78:85:f8:cd:1e:23:02:2b:98:dc:0f:cb:7f:c3:86:4f:d4:
         fa:48:55:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----