Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c07c9bc6-5bd0-4350-9780-917130403470.roa
File:                     c07c9bc6-5bd0-4350-9780-917130403470.roa (raw, json)
Hash identifier:          01NCrVay6gApHuhNpPaLJ1Ny0HKkNWVHjUd8ik1Lgkg=
Subject key identifier:   40:06:7D:63:9F:6B:D1:82:81:C7:38:66:19:5A:62:AF:DA:8A:B0:9F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4C75538AEC7F4CB3DC47F58A63DB80CE96B6EEA4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c07c9bc6-5bd0-4350-9780-917130403470.roa
Signing time:             Fri 22 Dec 2023 00:00:00 +0000
ROA not before:           Fri 22 Dec 2023 00:00:00 +0000
ROA not after:            Fri 26 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:75:53:8a:ec:7f:4c:b3:dc:47:f5:8a:63:db:80:ce:96:b6:ee:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 22 00:00:00 2023 GMT
            Not After : Jan 26 23:59:59 2024 GMT
        Subject: serialNumber=f6c51e40ee1edd6fcd0e816098b3bcc8d56065e05ad01aebfe53c8e27911567d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:78:04:4b:6d:fc:97:30:de:86:03:14:30:44:
                    3e:8e:29:4b:bf:c0:79:44:e1:4c:ac:ae:ff:df:e8:
                    e1:13:e8:75:88:ff:84:6c:93:b5:3c:dc:56:db:a4:
                    c6:aa:f1:1b:07:fc:5e:8a:bc:3c:39:b5:cc:bb:bd:
                    41:28:3a:0f:32:08:77:de:22:1c:6c:6f:27:00:0f:
                    ed:db:ae:dd:d5:9a:86:3c:38:40:c7:7c:26:96:5b:
                    f9:11:90:3f:eb:31:d9:ef:92:01:c9:19:74:e5:f8:
                    7c:11:80:a9:78:81:34:a2:01:c2:70:eb:07:44:f9:
                    21:b8:11:cd:98:4b:bb:85:f1:20:f5:c9:38:e7:70:
                    ec:e3:9c:1e:6f:14:5b:47:43:fc:b2:df:0b:1e:f8:
                    97:50:38:a2:6a:9b:b4:fb:93:8f:39:fe:d9:a6:fe:
                    c2:d5:98:ec:54:f6:65:99:39:07:dc:6a:26:c7:fe:
                    e5:b9:4e:be:a6:4b:00:e3:88:e9:36:f0:e4:31:cc:
                    c3:56:3e:75:4f:58:af:0f:a8:a8:c1:d3:93:aa:43:
                    fe:25:61:7b:17:b5:6f:6a:f6:c0:73:eb:10:a3:e1:
                    27:46:d6:14:51:16:78:80:bf:aa:96:a0:43:83:35:
                    40:f5:3a:91:44:00:9a:03:d6:6f:b9:c6:e8:93:34:
                    b4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:06:7D:63:9F:6B:D1:82:81:C7:38:66:19:5A:62:AF:DA:8A:B0:9F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c07c9bc6-5bd0-4350-9780-917130403470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:28:d3:84:38:10:dc:bd:fd:69:86:27:8f:a7:48:e8:c2:70:
         64:d6:a0:a3:5b:17:1d:d3:69:b6:27:27:80:bd:f5:88:b5:c7:
         45:3e:58:45:8c:20:d4:50:bf:eb:7c:a7:6a:48:0a:94:e0:bf:
         50:83:ab:fa:a2:2a:a5:fc:a1:e1:23:f7:62:fc:32:cd:f2:e7:
         d2:e0:30:ae:86:ca:e1:f2:38:09:65:1d:4e:c2:78:d6:6a:47:
         4f:8a:b0:4b:d7:2c:c1:06:2e:ca:d6:b5:2b:b9:b4:16:eb:b3:
         7d:bb:1a:ac:c7:c8:46:e0:72:5f:25:45:91:0f:a8:74:39:54:
         68:d4:61:e2:64:0b:e7:cf:fd:17:dc:16:25:9d:15:93:f2:f1:
         d6:16:64:b0:88:37:f8:8a:1a:a8:14:5e:6e:f6:f9:60:58:28:
         0f:3b:8f:c8:25:88:47:e1:5c:e5:f9:8b:6d:61:cd:08:0b:43:
         e6:5b:c8:34:73:ae:86:2b:f1:53:53:d1:a6:2f:1a:4d:e8:6e:
         22:ae:3b:8f:c0:da:d6:75:d6:b6:78:23:b9:02:52:3d:24:f2:
         b7:cb:4f:05:22:e1:f6:d4:b1:73:21:ac:f2:4c:d1:91:e6:ed:
         09:98:62:d0:7f:5d:d5:70:bb:b0:35:dd:64:69:13:d2:16:e9:
         f2:1d:ca:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----