Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c9a35796-6871-4456-9497-4654f754b713.roa
File:                     c9a35796-6871-4456-9497-4654f754b713.roa (raw, json)
Hash identifier:          xkQBEF696iNuDaYAdqqmiw48p35egaB4DUU/DD/8mbc=
Subject key identifier:   76:A0:8C:1D:22:8E:A9:3C:EE:C3:40:26:56:80:20:4B:56:E6:94:6C
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2B8AA9F30B0E32CB0527284FBBD455BBAC9BB05B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c9a35796-6871-4456-9497-4654f754b713.roa
Signing time:             Thu 19 Oct 2023 00:00:00 +0000
ROA not before:           Thu 19 Oct 2023 00:00:00 +0000
ROA not after:            Thu 23 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8a:a9:f3:0b:0e:32:cb:05:27:28:4f:bb:d4:55:bb:ac:9b:b0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 19 00:00:00 2023 GMT
            Not After : Nov 23 23:59:59 2023 GMT
        Subject: serialNumber=2a0265724ebd17f02a790173df519cfa138284f217bc87371957b01384226a9a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:ff:83:c6:06:b6:d0:6b:26:75:28:69:ff:
                    ba:5b:9f:47:07:e2:f3:03:1e:16:53:74:23:0d:b5:
                    b3:6d:22:f0:4b:db:84:a3:26:77:da:55:b0:24:13:
                    be:6d:12:5a:3f:c7:fd:b1:fa:95:e6:76:29:ac:bb:
                    f0:eb:ce:21:14:5c:97:2d:bb:d9:a4:ea:ce:be:32:
                    b2:68:dc:81:8a:d0:a9:2d:1e:c9:79:63:2f:8b:87:
                    a8:9f:22:27:eb:9e:02:83:f0:d7:28:cc:5e:48:0e:
                    8c:32:ba:0b:15:93:87:34:de:7f:27:f1:4e:ac:81:
                    ec:6d:dd:56:d2:9d:85:33:0c:6d:1c:da:46:ab:de:
                    aa:d8:39:a8:8b:f2:8d:03:85:03:c9:83:9c:94:ce:
                    3f:25:fd:3e:24:eb:6f:be:77:dc:11:3e:c3:46:40:
                    a9:84:4e:d8:06:f6:c4:f2:1f:24:43:61:bb:1b:1d:
                    40:65:9f:35:54:24:f3:a5:02:10:60:07:eb:e5:bb:
                    ee:05:e1:48:2a:1b:51:c5:6d:44:a3:7d:d2:a0:de:
                    34:14:04:1a:be:13:3b:1b:a7:ef:70:34:f6:cd:fe:
                    e7:4c:12:c5:c4:97:f5:fe:c9:fb:9b:36:51:94:89:
                    79:ea:e5:3c:b6:50:29:70:78:29:34:47:47:7e:18:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A0:8C:1D:22:8E:A9:3C:EE:C3:40:26:56:80:20:4B:56:E6:94:6C
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c9a35796-6871-4456-9497-4654f754b713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:49:9f:61:b3:d0:19:0f:ff:c4:c7:61:a9:ef:23:c7:14:5a:
         b7:46:bb:3a:0c:43:bb:65:98:51:41:84:00:1a:c8:ee:6a:b8:
         c4:fe:24:c1:7a:b7:f3:54:50:2a:cf:4e:64:b8:02:c6:70:1f:
         0a:9d:2d:1e:0b:eb:ba:a8:dc:d1:a6:97:b9:d0:83:24:e0:e7:
         36:dd:84:0c:e2:c8:ba:45:c0:72:79:6f:0d:96:1c:a0:66:d5:
         5a:44:cd:8b:f7:17:9a:87:e9:de:f8:26:9e:88:a2:72:b4:db:
         bc:4b:e2:64:90:d7:b6:f6:61:f4:5d:b6:31:73:52:ae:60:43:
         bc:f9:2c:6c:6f:30:db:27:12:2e:89:bd:b6:4c:94:6c:7d:ac:
         00:3e:10:e2:ac:f4:38:fe:42:53:02:39:42:7b:9e:31:da:c5:
         fa:60:b2:4c:cd:05:21:11:86:4d:70:06:d9:d3:6a:36:2b:02:
         5d:19:5d:b8:ff:d2:c2:e7:82:8c:80:fb:50:3e:cf:dd:b6:ce:
         58:4f:49:3e:ec:00:3d:43:20:f4:c0:49:47:85:c5:0e:c2:e0:
         72:22:a7:c9:5f:ee:00:e5:e4:c3:8d:8b:8e:27:a7:05:89:36:
         60:27:1c:25:cc:a8:87:9a:ec:08:8a:89:c7:ea:2b:18:b3:e6:
         42:63:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----