Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a44fd45b-0fa3-4c0b-aaaf-14dc423731f7.roa
File:                     a44fd45b-0fa3-4c0b-aaaf-14dc423731f7.roa (raw, json)
Hash identifier:          Ox/S+1+biUdT5WGXvZQtbRHtGARi7SKtHwlm5Btdhsc=
Subject key identifier:   E5:F7:2B:92:A9:3F:01:FA:8D:90:FC:56:FF:1E:5E:DF:68:95:A1:86
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       604748575C4E32A5CE480769C028F35776AE826F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a44fd45b-0fa3-4c0b-aaaf-14dc423731f7.roa
Signing time:             Wed 13 Dec 2023 00:00:00 +0000
ROA not before:           Wed 13 Dec 2023 00:00:00 +0000
ROA not after:            Wed 17 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:47:48:57:5c:4e:32:a5:ce:48:07:69:c0:28:f3:57:76:ae:82:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 13 00:00:00 2023 GMT
            Not After : Jan 17 23:59:59 2024 GMT
        Subject: serialNumber=01de21a3c0f7a079d98ec25b877318571a1be88d874cda2a3640aa53da492476, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:ae:ee:05:b3:d0:83:7f:8d:52:35:f8:1a:
                    0f:eb:b3:d6:b6:45:b7:14:bb:1c:2b:2f:71:64:21:
                    e1:2c:8a:a3:76:ae:6f:d5:e5:c1:a6:d4:fe:06:04:
                    f0:fd:4f:a5:19:cd:ab:14:57:b2:14:5b:d6:f3:9e:
                    c8:11:cc:db:b3:a8:af:de:6b:4b:1a:eb:34:58:fc:
                    5d:56:f4:2d:2e:45:0c:14:3b:99:ba:37:00:70:f4:
                    eb:3c:bd:c9:01:29:5c:a4:10:ef:3f:49:9b:6a:48:
                    0b:ad:18:f2:15:47:6d:83:47:77:74:01:f5:3e:92:
                    52:cb:60:ca:10:16:ad:a0:e9:a1:99:75:f9:ab:89:
                    34:d9:f4:c7:cb:b5:38:af:cd:70:66:97:a3:bf:de:
                    25:d5:18:1b:40:ff:45:2e:9a:85:ad:29:6c:25:f1:
                    78:0b:05:a4:9e:d5:bb:78:32:d8:85:a4:a5:53:dc:
                    c6:53:0b:29:25:66:ba:1c:d0:95:6d:8b:47:43:e7:
                    17:f7:c2:e5:b5:28:92:cc:46:6a:5c:50:61:02:7c:
                    ac:38:06:28:fb:d5:eb:78:99:2e:cd:f0:4f:e5:b7:
                    eb:a6:9d:76:4f:62:c2:b0:60:f4:59:86:79:0a:b0:
                    a3:2f:65:83:4c:b1:29:ab:5e:29:4f:85:ca:c9:c9:
                    be:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F7:2B:92:A9:3F:01:FA:8D:90:FC:56:FF:1E:5E:DF:68:95:A1:86
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a44fd45b-0fa3-4c0b-aaaf-14dc423731f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ee:e5:b7:a3:50:79:85:45:61:d5:30:ef:cf:1d:6c:84:79:
         84:04:05:0c:e7:9a:82:2d:94:2e:87:12:27:cf:0d:21:5c:ed:
         9c:ab:3a:e6:8e:78:ac:9b:95:10:4e:a8:37:01:5c:dd:37:0e:
         0c:47:08:a1:75:7d:e1:76:c7:09:d8:d0:f1:18:54:5f:9a:c2:
         66:33:bf:00:2a:31:d4:22:fe:52:68:7b:df:28:ff:6e:17:65:
         96:bf:ac:e8:ba:1d:a8:04:1d:67:68:88:e9:f0:3a:03:27:8c:
         b8:86:41:23:d7:7c:9f:ee:a4:0f:69:ac:4e:78:cb:c7:1e:2a:
         0f:93:62:de:36:05:40:c2:fd:5a:98:b1:ee:82:85:f9:94:91:
         71:7e:fd:87:6f:f9:c1:d4:fc:2f:bc:e1:7c:f9:4b:27:83:c2:
         e6:31:03:1d:9f:cc:31:7d:3c:ca:76:a2:5b:71:cf:b2:fe:0d:
         e9:08:6c:1d:a3:00:ce:cc:09:58:84:ce:3b:cb:2d:37:d2:68:
         c6:3a:e0:a2:ae:4e:5e:9d:68:83:4d:4d:62:e3:eb:f7:8e:d9:
         fd:23:16:48:6d:47:06:11:f3:68:bd:38:cb:06:5d:e3:0d:1c:
         92:d5:4d:a2:a2:d4:73:a4:3e:32:e6:b4:61:80:a9:84:7e:76:
         26:77:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----