Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d10d3f99-c5f4-4f22-a6f4-f11d70a9455f.roa
File:                     d10d3f99-c5f4-4f22-a6f4-f11d70a9455f.roa (raw, json)
Hash identifier:          c0WGfKdbnv9s/fLdPjL8hqGuBTwb6fyrWHWZ7kbZ8ww=
Subject key identifier:   04:E5:6B:9F:6C:0B:96:E6:FF:4D:14:C0:29:9E:18:8D:8F:80:90:13
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       45841E76542E4237071F1A62988BA275E3743F30
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d10d3f99-c5f4-4f22-a6f4-f11d70a9455f.roa
Signing time:             Tue 02 Apr 2024 00:00:00 +0000
ROA not before:           Tue 02 Apr 2024 00:00:00 +0000
ROA not after:            Tue 07 May 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:84:1e:76:54:2e:42:37:07:1f:1a:62:98:8b:a2:75:e3:74:3f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr  2 00:00:00 2024 GMT
            Not After : May  7 23:59:59 2024 GMT
        Subject: serialNumber=25c30bb987e006f44f6dc573258f4dd2d80160fa861a89c681d253968757f850, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:0f:f0:ed:c7:8e:76:05:cd:de:c8:80:d8:
                    3d:39:0f:e8:69:8f:24:7d:66:14:c3:46:63:c6:b3:
                    5c:eb:eb:75:b2:15:b1:09:7f:e2:78:27:e6:d0:3b:
                    17:f9:58:19:82:1c:8d:54:b5:bb:ce:3d:1a:7a:31:
                    34:ce:8d:7f:28:53:76:62:6e:fe:8f:69:55:97:7e:
                    02:f3:52:79:a4:f0:cb:9c:dc:b5:b8:5b:59:55:ff:
                    74:8f:d2:16:7b:20:70:60:d6:1f:72:c3:4b:5e:98:
                    ab:6a:50:0b:b0:e7:18:a8:14:59:eb:86:84:69:26:
                    f0:0a:67:43:4e:5c:40:c5:6a:72:11:76:a4:31:d5:
                    a1:6f:47:21:c9:b9:09:8e:d5:b6:9a:9c:bd:10:0b:
                    d6:3c:73:3e:e7:9d:e3:57:8c:48:17:55:21:a3:d0:
                    7b:f2:11:10:b8:8f:69:48:04:b8:a9:95:ba:c0:5d:
                    98:1d:e2:b8:f6:d1:21:42:0a:0b:0e:b6:00:e6:37:
                    3d:74:6c:33:78:2d:3e:c9:04:f6:97:d9:cc:9b:f1:
                    83:c2:35:de:3c:34:bb:54:51:a7:4e:06:b4:ad:25:
                    53:a1:14:4f:14:bd:d0:ec:b7:bc:29:4d:18:22:b3:
                    e8:4d:3d:9f:b2:0e:cd:8d:f0:27:73:ac:b6:1d:d6:
                    65:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E5:6B:9F:6C:0B:96:E6:FF:4D:14:C0:29:9E:18:8D:8F:80:90:13
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d10d3f99-c5f4-4f22-a6f4-f11d70a9455f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:01:bd:2d:71:c6:2c:b9:ea:15:0e:7d:06:61:26:d7:d5:ad:
         2e:6f:8f:0f:ae:0f:d2:a2:34:1c:2c:e8:60:58:0b:53:92:a6:
         ed:e8:84:be:48:a3:35:2e:a0:f9:83:00:ff:2e:a0:a8:78:07:
         76:fc:2e:f1:92:99:0d:13:31:a6:9f:eb:5c:f8:05:2b:1b:3a:
         b8:df:c5:45:db:d7:63:ac:62:55:91:5e:79:f2:1e:01:5a:d9:
         58:3b:2a:12:b5:cc:ac:2d:7d:70:4d:ad:1e:ef:67:f5:b0:b9:
         a6:85:7d:87:69:47:54:08:d2:c2:5c:43:6c:16:7c:ab:86:5c:
         8c:cf:4f:1a:db:fa:ea:c6:12:23:f1:69:c8:29:42:5c:21:d7:
         e8:11:db:a6:e8:fe:a1:a1:ab:ad:97:3e:43:4d:82:ea:ba:b6:
         4e:d7:f9:97:c4:66:2b:6b:4e:64:a5:db:6a:02:8d:3e:93:47:
         a2:c4:81:b7:70:ae:38:2c:42:e7:28:fa:0c:db:17:b2:e2:db:
         ed:72:ca:b9:ab:d7:2e:34:e4:fc:80:26:08:4b:26:60:da:49:
         02:86:09:f0:b5:2e:ef:e7:4d:19:74:d5:cf:2d:fc:81:cc:51:
         44:6d:19:a8:06:d4:8c:b8:b1:c9:e9:80:34:dd:cf:a9:70:12:
         ac:9b:38:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----