Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d2bbcd83-a744-48ef-88b7-a8f259e7604e.roa
File:                     d2bbcd83-a744-48ef-88b7-a8f259e7604e.roa (raw, json)
Hash identifier:          kWCpRhD7h+GL2rQxbSPtY1ysyadWlsSkKkzqk8zhEPk=
Subject key identifier:   03:5E:8E:18:2C:26:80:C8:95:F2:64:9E:07:22:EF:FC:DE:71:CF:0B
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5E04131A1CEBE271C65B2FAA6018DD7D8A4706D9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d2bbcd83-a744-48ef-88b7-a8f259e7604e.roa
Signing time:             Mon 18 Mar 2024 00:00:00 +0000
ROA not before:           Mon 18 Mar 2024 00:00:00 +0000
ROA not after:            Mon 22 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:04:13:1a:1c:eb:e2:71:c6:5b:2f:aa:60:18:dd:7d:8a:47:06:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 18 00:00:00 2024 GMT
            Not After : Apr 22 23:59:59 2024 GMT
        Subject: serialNumber=fbc2976dc3e89dff18c955e0d09e8fa7cba0a4670d2c31768d6ce150d58a0a37, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:c2:44:73:ad:2e:6a:c7:b4:e4:8e:b7:30:
                    39:ee:fa:04:62:a9:74:4d:cb:a8:43:3f:fa:5a:6b:
                    2b:a7:2c:72:89:07:ca:d8:95:dd:16:42:7f:d1:d8:
                    8f:55:d7:ce:59:f0:34:dd:34:42:40:56:1b:11:00:
                    eb:b1:fe:70:cb:db:30:19:fc:36:12:90:0b:3a:8f:
                    79:e4:9e:68:b6:87:e8:86:79:68:11:f8:89:70:3d:
                    f0:b1:40:ff:96:ee:bd:7b:b1:d0:25:8b:55:65:d7:
                    ff:b8:dc:59:e8:97:dd:f3:6a:68:c3:6a:03:86:71:
                    66:a3:9e:d9:19:75:e1:96:1d:29:6c:e1:a8:27:52:
                    1f:41:cf:97:f7:cf:01:b7:22:38:b5:76:28:88:a2:
                    aa:e1:3e:3d:71:4d:fe:13:9b:1f:da:e0:91:59:5d:
                    88:b4:31:f3:87:87:09:6b:9e:f6:43:fd:69:a5:56:
                    41:b4:89:1b:d9:a5:1d:a8:c4:7d:d2:e9:7b:bd:39:
                    1c:07:59:5e:8f:a9:1e:4f:9d:06:f9:c2:f9:80:87:
                    79:c1:d5:56:da:98:3a:8b:a8:10:90:55:75:bf:b4:
                    cb:07:ba:04:08:c2:8e:d6:08:9c:c1:57:aa:89:05:
                    86:de:a4:57:57:ec:dc:72:35:c8:68:46:14:5a:3d:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5E:8E:18:2C:26:80:C8:95:F2:64:9E:07:22:EF:FC:DE:71:CF:0B
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d2bbcd83-a744-48ef-88b7-a8f259e7604e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:b0:ee:01:19:ac:a8:74:ee:01:ba:a8:e3:dc:87:b1:67:61:
         aa:1b:2f:7b:ed:09:6f:67:1a:dd:c8:18:10:b2:7e:e4:da:49:
         24:c5:1d:97:26:5f:b4:7a:d2:6d:a7:23:57:ff:c1:51:98:5f:
         7a:f3:26:d8:e7:c3:f4:ce:1a:b4:d7:c3:fb:29:05:b1:28:ef:
         26:75:b3:01:eb:9d:69:29:62:5d:49:de:d7:7e:11:8a:5d:0e:
         75:bb:47:32:c0:b7:d7:e2:32:9e:01:3c:34:1a:de:8d:9d:c9:
         0e:1a:cb:d4:aa:57:36:48:46:00:d5:12:f1:b6:c3:b1:b5:6f:
         cb:b0:f6:3e:93:1f:ff:56:2a:6e:38:12:96:15:e8:12:31:a4:
         e0:a4:c7:f6:de:6e:4d:b2:51:bc:27:8e:e9:8e:b7:07:6c:8c:
         19:4d:1a:96:9a:01:10:01:d7:1b:48:81:07:f5:78:26:7d:59:
         8c:75:6a:46:96:e5:ba:24:90:12:96:c3:69:d4:4d:32:24:46:
         b8:b2:68:53:f2:fd:c0:50:1c:fe:82:6c:a7:4a:9c:5e:e9:0e:
         d0:c7:3b:42:12:aa:8c:a8:5a:b6:09:60:e5:4b:78:0a:d1:77:
         da:6f:83:89:ce:ef:bf:07:7e:9a:56:c5:ca:8e:a0:ea:bd:e9:
         c5:0f:ec:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----