Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed232f0d-64fe-464c-818f-0b25fefc8b45.roa
File:                     ed232f0d-64fe-464c-818f-0b25fefc8b45.roa (raw, json)
Hash identifier:          I4u8XjDDeji/24vhAxI2WYeP+s2ouPxuOOigbAuN0o4=
Subject key identifier:   87:BE:D2:B9:F1:8B:0D:A7:D8:46:DF:33:A6:B6:0C:40:8D:D4:45:F1
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5A211C06444AC8134B8C6E6FA88B3C4A4D3AC62F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed232f0d-64fe-464c-818f-0b25fefc8b45.roa
Signing time:             Sun 17 Dec 2023 00:00:00 +0000
ROA not before:           Sun 17 Dec 2023 00:00:00 +0000
ROA not after:            Sun 21 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:21:1c:06:44:4a:c8:13:4b:8c:6e:6f:a8:8b:3c:4a:4d:3a:c6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 17 00:00:00 2023 GMT
            Not After : Jan 21 23:59:59 2024 GMT
        Subject: serialNumber=3cf119ef90d14a1b6a09fdbcf52a6b636c93921078cbd146d7748c1dc9dbbc2c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:67:44:9f:6d:d3:e4:49:0e:d6:b9:8e:5e:a8:
                    bb:76:a2:3f:ba:51:29:20:df:7c:52:ad:7b:89:77:
                    4f:d3:93:5a:6f:ea:5e:b8:4d:b4:f7:ba:fa:15:e6:
                    40:be:53:e3:b4:27:d9:32:60:38:98:39:13:66:6f:
                    8a:0f:45:41:ec:0f:ea:e5:8a:83:70:fe:d6:54:16:
                    87:a8:ba:94:2e:ec:2d:7b:7a:f6:d5:7f:0d:1b:94:
                    1a:30:80:78:43:75:a6:e2:15:be:e8:97:c4:03:a8:
                    da:4a:4b:b3:58:7c:00:ff:a5:84:73:cf:75:1e:ed:
                    c0:67:a3:86:87:fc:52:95:04:7c:e9:51:11:f8:90:
                    c1:35:99:a3:48:1b:4a:3d:d1:8f:87:50:6f:d5:25:
                    05:f7:1e:48:3e:30:c4:19:da:6f:b5:88:e9:57:df:
                    03:1c:12:e3:86:32:55:5f:72:9a:f1:fd:d7:fe:37:
                    c8:65:71:43:7a:91:7c:94:dc:d8:48:2f:63:9b:16:
                    04:fa:64:8c:32:4a:79:00:81:5d:2c:14:f0:db:f0:
                    c6:1c:da:99:70:5f:71:8b:16:4e:ef:d4:94:3c:43:
                    6a:5b:c9:71:11:98:95:f6:eb:c5:2a:67:b8:6f:fa:
                    0a:f7:8a:9b:30:8d:dd:fa:38:15:4b:6c:ff:b1:d8:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BE:D2:B9:F1:8B:0D:A7:D8:46:DF:33:A6:B6:0C:40:8D:D4:45:F1
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed232f0d-64fe-464c-818f-0b25fefc8b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:17:02:e6:81:c4:2c:91:90:e4:7c:17:55:05:5c:b7:46:c4:
         86:d4:7a:51:f0:ee:54:be:99:5b:21:e5:79:41:1c:45:41:59:
         33:92:20:10:d3:11:0d:43:83:e6:6e:36:76:20:d4:69:aa:52:
         3a:0b:88:fa:45:ea:3d:2f:7c:23:b8:90:06:21:50:1b:cc:8e:
         0e:fb:2d:e1:67:15:d1:b0:28:42:be:5a:b3:4d:4d:75:17:c0:
         f2:b6:da:f2:1c:a3:7c:20:aa:27:71:e2:4f:97:ff:68:aa:70:
         5a:8c:0a:07:8a:21:33:d9:d8:d4:bc:b7:c3:21:ea:44:9c:ea:
         59:bb:54:a4:83:ac:18:60:0b:d0:a9:25:ef:50:3d:54:a1:de:
         7f:50:b5:23:a2:8d:11:29:db:0e:19:7a:40:e3:e0:17:d0:20:
         14:4e:74:e3:e4:d6:fd:36:b2:60:9f:58:25:b8:3a:65:b5:7f:
         a5:e1:bb:4a:b0:61:7c:d9:55:e3:92:b1:4c:c1:1e:b5:32:f2:
         e0:92:1d:60:e8:bf:5f:9e:b6:65:74:28:1c:17:77:d5:23:0e:
         c0:e8:5e:02:ea:23:b2:7f:62:87:a3:71:82:c5:11:1c:4d:b4:
         6e:41:c4:c5:c1:95:b4:0a:e3:b0:2a:04:a3:fa:2b:2b:1e:55:
         5f:fa:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----