Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a83ad22a-cf5d-4462-839d-6c99c22a6e3b.roa
File:                     a83ad22a-cf5d-4462-839d-6c99c22a6e3b.roa (raw, json)
Hash identifier:          iZQE7tnhS8IdslMMa2nkZXYtkB1+3aNwzJ64VL/5WWM=
Subject key identifier:   76:CE:EA:BB:BC:68:A5:A5:2A:CB:26:1C:C3:EE:2E:E5:07:F1:8D:49
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4E130E9743439907CA0AE5AD6A665B0B77155981
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a83ad22a-cf5d-4462-839d-6c99c22a6e3b.roa
Signing time:             Sat 28 Oct 2023 00:00:00 +0000
ROA not before:           Sat 28 Oct 2023 00:00:00 +0000
ROA not after:            Sat 02 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:13:0e:97:43:43:99:07:ca:0a:e5:ad:6a:66:5b:0b:77:15:59:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 28 00:00:00 2023 GMT
            Not After : Dec  2 23:59:59 2023 GMT
        Subject: serialNumber=c051d6faf775b37c75846622db14acf9fb9663ff871e70ac031b18d132d2f8c4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:53:16:cc:8b:1b:f7:57:e7:97:78:af:6f:
                    6a:67:2a:78:7a:8a:cb:aa:8b:9a:d1:d8:59:cb:2b:
                    8e:41:e1:58:53:8e:99:0f:19:79:97:9d:f5:fc:cc:
                    da:f1:5c:a8:ce:9e:7c:e2:93:f7:b0:75:38:dd:e9:
                    3f:d6:a0:e7:b1:95:53:76:7c:42:56:b9:a4:96:51:
                    ec:03:77:2e:3b:71:cf:d8:51:e0:12:56:5f:9e:95:
                    99:27:11:03:42:0a:9d:0a:97:4d:a4:74:52:01:8e:
                    94:ce:38:7f:bd:84:96:7b:09:fa:21:00:48:14:de:
                    da:c8:b7:37:f1:cc:93:99:a2:d3:cb:0c:d8:ed:af:
                    7e:7b:b5:f4:a6:71:e4:e9:34:19:95:5a:32:f6:94:
                    a1:a1:b5:ee:6c:47:bc:8c:3c:22:bf:31:07:0f:3e:
                    22:b8:b3:24:4d:2b:15:9f:b6:69:4d:3e:94:e0:60:
                    85:79:67:f8:bd:28:3f:53:13:03:f9:7b:06:03:8b:
                    fa:14:9f:26:ad:35:d3:ec:56:68:f5:49:6f:3c:16:
                    03:19:24:07:fe:ed:aa:bd:0f:b4:3b:ce:59:9c:63:
                    3a:e1:a5:dc:38:69:b0:8e:16:b1:4c:f1:c7:f2:98:
                    54:7a:dc:de:fe:2e:b7:14:bf:aa:1f:c5:2c:dc:4e:
                    f1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CE:EA:BB:BC:68:A5:A5:2A:CB:26:1C:C3:EE:2E:E5:07:F1:8D:49
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a83ad22a-cf5d-4462-839d-6c99c22a6e3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:08:b4:39:62:19:4a:dd:18:db:c8:f1:ed:df:fa:a4:3c:36:
         f1:00:f4:f5:ca:b9:73:f7:cf:c2:61:fa:fe:55:28:89:56:92:
         c0:45:3e:f8:26:22:22:4b:c9:66:ce:26:34:ae:a4:e0:ef:32:
         16:08:da:32:b4:66:9d:20:eb:1a:12:ff:ad:76:91:d6:ac:15:
         57:80:96:e5:63:0d:cd:32:6b:18:79:dd:d3:13:a2:80:f9:1e:
         69:75:91:18:6e:72:63:9b:84:d9:a0:9b:9b:65:d1:42:6a:e1:
         32:fd:0d:3b:68:f1:9c:be:d6:7f:b4:9d:ce:09:d1:de:2b:ef:
         e1:9d:bf:39:bf:49:f1:16:d8:69:29:a3:90:b0:20:65:7a:58:
         f8:67:2c:1d:e3:85:27:cc:e6:0a:a9:52:53:4f:36:ac:6d:dc:
         63:f4:fe:8e:24:af:e0:0c:48:47:58:e7:50:54:99:13:70:e6:
         9e:61:bf:e4:78:bb:1b:94:da:95:25:de:4b:50:df:69:88:a5:
         f4:7d:5b:c1:63:ff:86:ec:7e:7d:1d:2c:ae:c0:fd:a7:c6:fd:
         2f:17:09:08:20:72:12:fc:98:87:f5:c7:b3:4a:61:cc:85:68:
         2c:e8:47:df:2e:7a:9e:96:73:2d:ee:2b:0a:04:e2:5c:df:08:
         cb:77:b7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----