Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cbee0587-d0d9-4f03-97e5-f2ee7b075ff7.roa
File:                     cbee0587-d0d9-4f03-97e5-f2ee7b075ff7.roa (raw, json)
Hash identifier:          oBMKd7uS7NBx3rLuvm9FhncvoHeXutzJJROlLJRkD2s=
Subject key identifier:   29:80:E6:D7:74:3E:CA:AC:B7:2B:3F:6B:91:AE:6E:96:F0:8B:85:EC
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6B2CCF03404491FB2F5CEFA2B8C475F6BDF4CDE0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cbee0587-d0d9-4f03-97e5-f2ee7b075ff7.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2c:cf:03:40:44:91:fb:2f:5c:ef:a2:b8:c4:75:f6:bd:f4:cd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=46b06ad2bdcb29159586c262abc0d44ad5cfdfa271ab5d103fec2d9df2eb794a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:0e:74:1f:dd:9a:af:2e:0b:fe:91:7a:fa:
                    23:74:9c:87:c9:92:ff:fd:a5:ab:91:73:4e:26:bd:
                    8b:ef:c2:a7:4e:72:71:c6:ed:55:29:ae:7f:54:a8:
                    75:dc:36:63:b0:8c:c0:1a:b8:d9:c5:46:24:4f:91:
                    f9:e9:c3:56:be:97:37:df:e8:64:c0:d9:b9:4a:54:
                    de:d2:52:9b:73:c5:4d:b5:46:c1:67:c2:72:1e:5a:
                    ab:fa:61:4d:94:5d:03:01:85:e9:a2:37:09:de:c8:
                    fe:92:3b:36:29:65:f2:c9:cc:22:6c:66:6d:e3:9b:
                    d9:14:2e:77:f9:c6:d4:40:05:60:01:1a:bc:19:40:
                    00:cc:c4:25:ec:47:f9:b2:29:2b:05:e4:94:9b:17:
                    cb:d4:a0:a0:80:35:02:42:93:79:a3:f0:a0:2b:a2:
                    73:26:7b:06:ff:4a:f8:7d:86:ba:d2:93:c1:44:54:
                    45:c3:09:fe:57:73:4f:09:da:0b:47:1e:01:3d:c4:
                    a9:d4:7e:80:de:1a:ad:6a:96:8b:9e:e9:c9:85:0e:
                    f6:72:9c:8a:c2:c0:d6:68:84:1c:f7:72:e1:c8:db:
                    6b:06:4d:84:7b:e0:c7:65:12:a0:b3:5c:41:ee:95:
                    f5:f7:de:ef:a0:88:c3:59:a4:ee:1f:2e:76:9a:20:
                    6b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:80:E6:D7:74:3E:CA:AC:B7:2B:3F:6B:91:AE:6E:96:F0:8B:85:EC
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cbee0587-d0d9-4f03-97e5-f2ee7b075ff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:15:e8:c8:4a:22:57:ae:60:c9:bc:a1:bc:5c:99:dd:2c:6b:
         01:2a:77:cc:21:10:b8:50:50:0c:cf:34:87:56:5d:2e:29:7c:
         d3:bb:9b:66:b8:9b:79:f0:b6:e4:22:03:d4:87:70:b4:16:8c:
         ee:c2:bd:3a:6f:89:9c:67:b7:16:7e:27:4a:1d:06:30:08:7b:
         ab:36:3c:4b:22:bb:8c:b3:a9:97:17:e2:b0:48:6f:c1:43:45:
         1a:35:ec:4d:26:f1:4c:0b:7f:4f:97:ba:a9:c7:df:5f:45:64:
         1b:60:b5:0c:6f:8a:37:c1:d0:56:55:65:6c:00:c7:ed:5c:00:
         4b:44:f4:78:26:e0:37:92:be:81:9e:a9:d4:e2:2e:27:4f:3a:
         16:80:e9:0f:de:c2:d9:e9:f5:0d:65:6a:e9:80:fe:fc:e7:d9:
         d2:92:58:e5:86:40:aa:c8:7c:f0:57:50:0f:ce:11:41:60:9e:
         4a:f2:1e:58:8d:90:2f:5f:42:41:6e:37:ee:9c:be:ba:ff:93:
         e0:bc:65:70:9c:89:51:d8:6d:ef:58:42:e4:23:f2:68:8b:b2:
         e4:f9:71:c6:44:9c:88:8f:89:6c:88:fa:84:42:4b:32:16:d7:
         b5:cc:22:c9:fc:6d:d8:a5:b8:40:2c:c5:d4:fe:86:83:e0:b6:
         ef:fe:af:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----