Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c6d0d66e-cd75-4d95-8f1c-29ecd1e98017.roa
File:                     c6d0d66e-cd75-4d95-8f1c-29ecd1e98017.roa (raw, json)
Hash identifier:          yF+RJpgNjS5iKUqnu5+0M9aKjil2dTGFM71H0uPNhjs=
Subject key identifier:   5E:24:B2:3D:56:B5:51:5D:B9:62:66:C1:40:D2:05:A9:7C:D4:39:89
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       505EC0190CA5C72AAD3DD7C0AD955CC4A3B33C5B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c6d0d66e-cd75-4d95-8f1c-29ecd1e98017.roa
Signing time:             Fri 24 Nov 2023 00:00:00 +0000
ROA not before:           Fri 24 Nov 2023 00:00:00 +0000
ROA not after:            Fri 29 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5e:c0:19:0c:a5:c7:2a:ad:3d:d7:c0:ad:95:5c:c4:a3:b3:3c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 24 00:00:00 2023 GMT
            Not After : Dec 29 23:59:59 2023 GMT
        Subject: serialNumber=b5181edd93e06ce0b5aec1c465aed566d90294ef3bf1b1fd29b7d01853919ee2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0c:3b:d0:eb:f9:c7:90:7b:07:d2:40:19:80:
                    09:d2:95:99:b2:eb:b2:86:02:32:f3:59:bc:88:d2:
                    c5:5b:19:45:1a:12:50:82:18:d8:ad:dc:4d:38:b2:
                    e4:59:af:ca:11:a2:4c:ef:b7:00:5d:af:72:1a:81:
                    1c:09:7b:9d:db:9b:a2:3c:a5:78:ce:13:03:89:b0:
                    af:bf:e9:6f:f3:01:95:2b:2b:d1:ba:ed:d1:aa:2a:
                    80:46:df:40:40:fb:0d:61:86:0c:b8:32:f0:86:f0:
                    24:62:7f:e4:77:a5:c8:41:cf:e2:b9:14:89:05:d7:
                    cd:45:5e:cc:91:a0:19:1c:72:de:d5:84:df:db:bd:
                    ea:78:50:50:be:a5:c6:a8:e4:43:6e:c4:70:32:33:
                    7c:51:c1:ee:3d:6d:e5:9c:8e:fb:4d:b8:fd:7d:64:
                    87:7d:08:fc:1e:e2:5b:7e:ab:dc:38:24:d4:da:ef:
                    e2:e5:14:1e:f4:2c:ca:c9:0a:f1:33:95:9e:14:2c:
                    d0:e6:bc:ca:7d:ba:5f:fa:c8:9b:a9:25:36:60:65:
                    29:93:7b:1d:47:bf:0a:38:71:7c:70:06:7a:8a:93:
                    ff:c5:ac:90:5c:a7:ca:f9:a0:bc:1e:f6:26:a2:96:
                    d2:20:6f:bb:ec:1d:ef:79:50:5f:5c:3b:b2:9b:3b:
                    5c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:24:B2:3D:56:B5:51:5D:B9:62:66:C1:40:D2:05:A9:7C:D4:39:89
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c6d0d66e-cd75-4d95-8f1c-29ecd1e98017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:2d:9f:56:67:d5:a0:ab:4a:90:68:8f:b7:a0:47:ef:a5:ec:
         40:22:db:7d:f7:b4:82:72:1d:a2:e3:a9:5e:cf:02:a2:87:b9:
         d1:e5:48:e1:82:65:8a:71:44:30:79:19:16:a9:14:b7:59:3b:
         a6:d7:10:c7:a4:ef:99:65:d8:6b:7b:c5:b0:8e:5e:9e:0a:f3:
         cb:42:79:45:53:e2:11:85:79:0a:26:1c:28:25:9f:25:84:b3:
         74:38:7e:09:29:b4:e0:17:89:9d:26:a5:98:e5:af:e8:4f:b9:
         8e:8b:24:e8:e1:96:99:2a:9c:39:4d:62:db:65:e7:6f:0d:6d:
         c7:28:26:e1:f6:1f:3f:d6:34:4f:1b:93:47:9c:58:9f:29:8d:
         c8:fe:50:6d:b4:70:b7:1d:ce:44:83:bc:e0:16:ab:04:ee:64:
         49:74:5c:d5:9a:84:d7:d4:80:89:c9:4e:66:53:5e:30:9b:b5:
         58:f9:aa:3a:e5:86:6d:be:f6:87:84:ce:6f:03:d3:09:25:58:
         ac:4e:a5:be:75:7a:e0:5f:c9:dd:20:22:69:e6:bf:2d:77:dc:
         c6:30:04:c5:e7:c2:93:36:c0:bf:c5:cc:f7:17:16:52:ad:52:
         36:46:e7:9b:2f:26:f6:4b:6b:88:96:df:ae:39:2a:44:a1:a2:
         9b:70:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----