Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a2088ea8-5f13-4725-9bb0-760529e069e8.roa
File:                     a2088ea8-5f13-4725-9bb0-760529e069e8.roa (raw, json)
Hash identifier:          jYHmKHyU3esEWDotnrHp+u2BEpNksm2UP7DkAF6LQEQ=
Subject key identifier:   36:58:DA:72:FB:49:FC:7C:F6:1D:32:5D:C2:DA:C4:2E:B1:83:39:20
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5D954EDCC3F1E63F3606984BB57835AF099B93EB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a2088ea8-5f13-4725-9bb0-760529e069e8.roa
Signing time:             Sat 23 Mar 2024 00:00:00 +0000
ROA not before:           Sat 23 Mar 2024 00:00:00 +0000
ROA not after:            Sat 27 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:95:4e:dc:c3:f1:e6:3f:36:06:98:4b:b5:78:35:af:09:9b:93:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 23 00:00:00 2024 GMT
            Not After : Apr 27 23:59:59 2024 GMT
        Subject: serialNumber=ebf487102e5f009e892e5ffc8d6edb2d490ab474171273523f28c9036bf1f86f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:27:37:76:66:c4:74:a0:a3:90:25:84:2d:
                    1c:29:87:bc:9e:ee:d0:f1:15:02:e0:c1:a2:40:fa:
                    e7:22:2d:0b:1e:b2:df:61:fd:99:71:41:6c:9d:dc:
                    ac:c7:3a:b0:48:a2:78:9e:2a:e9:12:5a:8a:e0:74:
                    00:63:6b:98:79:9c:e6:97:f1:4e:fb:ed:a5:99:dd:
                    c9:4d:a6:c2:43:5c:62:ac:1e:30:53:24:cb:fa:b4:
                    14:35:aa:c6:cc:db:53:23:bf:5c:43:33:c3:a0:f9:
                    ee:7b:19:d8:fb:65:41:f4:05:07:cb:4d:cd:e6:f7:
                    d0:52:1f:4b:46:42:a1:62:9c:58:fe:30:59:c5:c9:
                    b0:82:18:ca:e3:cc:9c:3a:e1:e6:2e:17:a2:fd:a5:
                    d6:01:ed:6a:5e:6d:bf:f7:2a:95:b2:b8:6e:16:0c:
                    b9:4a:74:8d:25:2f:27:33:24:f9:08:44:05:96:e3:
                    8d:d6:11:44:16:a9:5f:3c:97:e4:6c:fd:5e:7a:33:
                    55:50:c9:c3:10:54:ca:da:16:d8:fa:70:4c:ce:43:
                    17:4b:f6:50:7a:0a:51:84:3c:05:8b:74:ec:68:e3:
                    f5:ff:71:8b:6a:3e:de:96:e3:12:6c:26:d3:2b:22:
                    6f:ef:40:52:e2:f4:04:4b:62:16:41:6f:f5:8f:e4:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:58:DA:72:FB:49:FC:7C:F6:1D:32:5D:C2:DA:C4:2E:B1:83:39:20
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a2088ea8-5f13-4725-9bb0-760529e069e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:fb:9d:5a:5d:a0:31:60:eb:f2:8a:aa:19:5d:4b:80:8e:96:
         14:62:c1:e2:fe:38:14:ec:40:97:f3:b4:09:8c:7a:f7:00:7f:
         35:cb:68:45:6b:5b:8e:40:46:95:78:59:55:e5:6e:eb:8d:cf:
         38:b8:3f:bb:14:12:82:e9:be:24:33:e4:9a:6c:bf:98:7c:57:
         18:4c:39:ce:03:b8:de:3b:81:dd:a4:a7:03:4b:75:2b:95:6f:
         76:a3:eb:ec:53:6d:ee:ae:65:68:74:e9:1f:0b:bd:c8:c9:6b:
         3a:c5:3d:a6:6a:92:1b:c6:dc:7c:15:b6:0a:a7:7d:43:2e:c8:
         29:87:27:25:c8:8b:25:8f:3f:cc:72:30:13:c1:03:d7:46:66:
         54:eb:e9:d0:0a:d6:85:7b:53:dd:d5:29:dd:94:fb:29:74:9b:
         1d:7a:42:ed:8d:5f:45:20:0a:0e:0c:e5:39:15:68:bb:6e:16:
         59:0e:21:8d:ec:57:78:60:78:3a:02:e9:f4:e9:1c:ba:b4:2a:
         65:4f:16:13:68:5a:d2:24:92:58:ea:8d:0c:e1:a2:44:78:d4:
         0b:4c:27:c4:98:73:e5:6f:17:09:8a:e0:9f:39:86:19:01:a2:
         1f:e3:26:ad:79:f1:23:2b:0d:14:66:1e:37:c9:5b:35:68:89:
         a5:ac:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----