Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d050968e-e07a-4586-a4b7-966f1a0e7f07.roa
File:                     d050968e-e07a-4586-a4b7-966f1a0e7f07.roa (raw, json)
Hash identifier:          CVpESTFRDE/1VhflSwU9UAOshqUCapxF78V1r0X1SLY=
Subject key identifier:   38:2C:67:7F:B8:9A:7B:EF:E5:2F:60:8E:8A:3D:10:1E:75:6F:26:FB
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1180D623C5AE07E2D66452CBB663221F80A9D15D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d050968e-e07a-4586-a4b7-966f1a0e7f07.roa
Signing time:             Fri 15 Dec 2023 00:00:00 +0000
ROA not before:           Fri 15 Dec 2023 00:00:00 +0000
ROA not after:            Fri 19 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:80:d6:23:c5:ae:07:e2:d6:64:52:cb:b6:63:22:1f:80:a9:d1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 15 00:00:00 2023 GMT
            Not After : Jan 19 23:59:59 2024 GMT
        Subject: serialNumber=a7b8070171aa7b53272173c7574ac35ce24e3b4b574e4b87d16bece5300fbd2f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:18:bc:79:69:d3:a7:ca:be:3c:ff:54:68:
                    71:ef:b0:00:f0:c8:0f:fa:0d:52:6e:9b:22:c4:45:
                    b5:1b:21:9e:ba:1c:d4:e9:3d:90:b5:d5:f8:51:52:
                    03:75:99:d2:b0:13:56:f2:b5:c2:c1:08:c8:78:93:
                    b5:db:2c:33:d5:59:19:c9:53:fb:86:23:11:6c:1b:
                    57:59:1e:65:70:a3:a3:12:8c:58:ff:b0:ae:0d:46:
                    20:fd:9a:07:b3:85:5c:0c:57:ad:1c:94:54:0e:e9:
                    d4:eb:b4:61:57:58:03:37:00:92:98:b1:4e:58:a5:
                    1c:b3:f3:82:4c:08:d3:a7:ae:54:38:98:50:fa:ae:
                    8d:ed:29:70:08:23:4a:6c:51:ea:04:04:e8:f8:f5:
                    15:63:0d:75:42:31:3c:9b:9c:e0:15:79:fa:44:d6:
                    7a:3c:02:47:e0:d0:f4:b3:90:54:cb:c2:95:28:58:
                    76:ed:08:93:88:22:f9:7b:97:b2:2c:7e:eb:fe:c1:
                    e2:10:9d:ce:43:ab:9d:c5:df:04:eb:87:7b:b4:e6:
                    ff:ed:29:e2:18:4f:e5:fc:e9:83:f1:ae:60:e1:70:
                    09:96:8c:fb:80:92:f9:ce:67:a5:df:d0:80:18:0b:
                    62:c7:8f:82:a6:69:ad:9c:50:6a:71:d2:0d:bb:b6:
                    48:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2C:67:7F:B8:9A:7B:EF:E5:2F:60:8E:8A:3D:10:1E:75:6F:26:FB
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d050968e-e07a-4586-a4b7-966f1a0e7f07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:3f:92:9e:4f:1e:00:af:9a:a6:14:fb:ec:99:40:f4:1c:e1:
         5a:1c:34:16:59:e7:3e:96:ab:38:30:f9:68:bd:d0:18:76:0f:
         d2:5b:b3:f0:11:fe:9c:78:42:1e:b6:49:a5:b1:6a:8d:e8:3b:
         54:a2:40:65:29:59:c2:04:33:54:8d:ca:58:55:b0:d6:9e:eb:
         cb:9a:8c:ef:e5:f5:a1:0c:e3:93:53:10:76:7d:e3:59:5c:71:
         64:99:1f:fa:8e:2a:97:58:cc:a1:18:a9:10:b4:e5:0b:a5:37:
         20:75:bc:23:1d:c5:6d:46:3c:f1:68:37:b3:f3:e5:f9:24:bd:
         2d:0f:38:60:87:c4:60:b7:8e:8a:8a:ac:c9:2b:cb:e6:24:e9:
         f3:ea:33:17:ad:15:56:5c:40:2d:f2:2f:47:62:0d:a9:49:b2:
         87:3d:b9:e9:d9:63:6d:75:74:c4:14:14:8c:de:52:dd:e5:ac:
         92:3b:17:95:c9:15:f7:44:8b:d8:b8:fa:a9:52:75:9a:6a:dd:
         d4:1a:b3:c6:ad:f6:0a:4a:a2:68:a9:dd:4f:86:1b:9a:f7:18:
         00:d2:ad:ea:36:f8:e7:d2:26:33:97:05:89:cd:26:48:ba:02:
         1c:63:bc:5a:55:90:eb:3f:cc:6d:cf:98:93:7e:76:ff:30:63:
         2c:bd:9e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----