Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aad8a4a9-f484-4a7b-b182-47e3edb22bc8.roa
File:                     aad8a4a9-f484-4a7b-b182-47e3edb22bc8.roa (raw, json)
Hash identifier:          rV/HiBwqSK/ijOb4am3AwgQD6mVEqyK9TQZQz18kKvc=
Subject key identifier:   D9:A0:0C:27:93:FA:8A:80:B5:6E:98:D4:9C:85:9C:2F:23:9F:08:20
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0C0789349EF1555BA0695C8AA85C19027B435E56
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aad8a4a9-f484-4a7b-b182-47e3edb22bc8.roa
Signing time:             Sun 07 Apr 2024 00:00:00 +0000
ROA not before:           Sun 07 Apr 2024 00:00:00 +0000
ROA not after:            Sun 12 May 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:07:89:34:9e:f1:55:5b:a0:69:5c:8a:a8:5c:19:02:7b:43:5e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr  7 00:00:00 2024 GMT
            Not After : May 12 23:59:59 2024 GMT
        Subject: serialNumber=3eda70eb926f0cb547001e81d24152087b93291f08e59240ccd98d69f452157e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5e:4a:35:4f:4e:77:27:e3:5e:af:9e:a8:7c:
                    e4:49:3c:dd:b9:e8:e9:53:d9:40:c4:7a:f7:03:6d:
                    47:02:02:d6:da:97:ff:ae:7b:d5:cf:46:ef:40:48:
                    47:8c:62:e9:6d:0f:ef:f6:53:9d:34:4f:49:d9:49:
                    9e:32:58:e4:9c:5e:cf:60:59:c3:0c:31:45:e3:6c:
                    de:c5:e8:5d:72:2b:a0:74:28:9a:9c:bf:79:89:15:
                    1d:6d:9f:08:b3:af:24:3a:f2:e4:49:8c:f1:5a:c0:
                    6a:e6:e5:ef:4a:ab:6d:ee:4a:e7:e7:f6:b1:90:38:
                    ae:90:a0:55:4f:c7:ea:66:33:b3:5b:70:94:65:63:
                    f0:b9:df:fa:26:df:71:d6:c7:ae:6d:44:52:d6:c3:
                    b9:a7:be:4a:de:91:dc:60:a6:f4:96:38:7f:e0:0f:
                    46:5c:2b:a5:cb:a5:99:86:96:14:71:d8:46:b1:51:
                    f4:e2:f4:c8:dd:a7:c1:9f:50:b3:83:1c:52:bf:bc:
                    21:07:3e:1b:92:1b:0c:96:5e:05:27:a0:0f:4b:3f:
                    2d:cf:08:75:6d:37:2c:54:1a:12:29:d4:25:11:87:
                    b0:53:3f:91:07:1b:7a:32:96:d4:fa:79:86:ef:5b:
                    a2:d1:18:80:fe:b2:63:44:bc:e8:9c:1b:87:da:28:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A0:0C:27:93:FA:8A:80:B5:6E:98:D4:9C:85:9C:2F:23:9F:08:20
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aad8a4a9-f484-4a7b-b182-47e3edb22bc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:f1:5b:55:b3:fc:fa:95:5d:3d:ae:66:94:95:bd:45:b6:13:
         e8:7e:90:94:fc:d3:1d:4f:83:3b:0c:ea:55:6d:20:f9:28:5d:
         e4:74:10:84:89:4c:db:49:ce:82:16:64:d3:da:a7:4d:50:eb:
         00:80:76:eb:22:4a:07:ae:3a:a0:20:20:5c:9e:ed:8f:08:3a:
         a1:ef:12:a8:01:f2:b5:56:c9:2a:45:2f:66:f1:0a:27:11:f5:
         c2:7a:67:31:71:14:52:69:ed:b8:4a:b0:cd:b2:c6:9d:ed:d4:
         4c:e9:0a:c0:ed:c5:01:1f:46:db:47:83:dc:0c:8b:b7:51:94:
         c6:ec:bb:05:f5:fb:4e:fe:cf:61:c7:db:1a:14:28:ad:f1:c2:
         4b:c6:fe:e8:aa:1f:e5:96:be:c2:75:f0:06:f4:b2:71:16:08:
         66:3a:46:14:dd:84:84:1e:dc:f1:71:f7:1f:7d:7b:77:24:49:
         26:f2:47:bf:9e:c6:75:b1:69:44:09:fd:a3:98:b0:5a:4a:f3:
         2a:b6:f4:09:68:2f:66:b5:25:d8:6c:bd:b5:7c:42:61:a6:34:
         b1:ee:4b:26:25:a1:e3:bd:83:2d:f4:e1:17:65:c2:80:a5:9b:
         16:4c:25:e0:77:e9:97:8a:67:cc:1c:8f:72:f0:7a:fc:61:f6:
         7a:30:e5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----