Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f035b556-51bf-4a61-ad0d-30328737cb5c.roa
File:                     f035b556-51bf-4a61-ad0d-30328737cb5c.roa (raw, json)
Hash identifier:          282MPzYM6ilG1jZgG9L4hgCrAI4UUq4r2x201dwKKFk=
Subject key identifier:   EF:C0:84:7A:54:45:61:62:59:AC:7D:C3:52:00:EB:D1:35:39:D7:83
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       57C8EC59E2F55822987BD7CBE88A2D90579CE086
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f035b556-51bf-4a61-ad0d-30328737cb5c.roa
Signing time:             Sun 12 Nov 2023 00:00:00 +0000
ROA not before:           Sun 12 Nov 2023 00:00:00 +0000
ROA not after:            Sun 17 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c8:ec:59:e2:f5:58:22:98:7b:d7:cb:e8:8a:2d:90:57:9c:e0:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 12 00:00:00 2023 GMT
            Not After : Dec 17 23:59:59 2023 GMT
        Subject: serialNumber=0faeec6aa7956a03ad5a746663556ceba3a58bb1345531cec2e262ea16854d1c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:d1:cd:8c:ef:4c:f3:a7:9c:e1:33:4b:94:
                    90:1b:c3:7b:df:31:35:41:1b:7e:a7:fa:db:22:3a:
                    cc:3b:52:2d:dd:aa:18:00:d8:8f:e2:ed:56:40:ba:
                    26:6a:21:37:d7:5d:92:5b:10:c7:63:09:5f:7f:3a:
                    1b:18:b3:35:38:bb:78:72:d0:ca:ca:7a:75:df:b1:
                    5a:bc:2d:fd:56:8f:d8:52:53:8d:25:e4:49:b3:de:
                    25:81:45:c5:19:43:5c:28:0e:ec:d2:24:be:65:51:
                    f1:81:69:9c:fa:f3:e7:41:39:62:db:f5:48:8b:e5:
                    8a:fd:b1:d7:40:de:af:dd:43:78:5a:c7:0d:d2:8c:
                    34:50:f6:4c:4e:72:af:b4:66:02:5c:a9:d0:f8:55:
                    19:bb:97:a8:8a:59:b9:67:73:dd:5f:99:88:8b:57:
                    a4:79:36:02:38:14:26:59:86:66:0b:7c:38:54:6e:
                    51:60:55:36:58:da:57:43:de:5a:b8:93:cc:ad:3d:
                    b1:a7:61:76:40:5e:db:ee:a3:e1:3a:5b:c3:79:c4:
                    41:ce:a3:28:d6:0c:e6:86:47:fc:40:5a:aa:25:86:
                    10:36:19:d2:70:1c:44:22:b0:17:de:e7:f1:1e:2d:
                    ec:b8:3a:0a:70:13:f3:47:74:a1:34:11:2d:d8:4d:
                    d1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C0:84:7A:54:45:61:62:59:AC:7D:C3:52:00:EB:D1:35:39:D7:83
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f035b556-51bf-4a61-ad0d-30328737cb5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:12:51:5c:76:49:d5:06:2f:0e:61:cf:04:c7:f8:ca:74:5e:
         8d:74:c1:0e:a3:5b:ee:7e:55:28:88:23:3b:47:5a:fe:1a:db:
         db:b0:e3:79:30:06:c8:a8:64:c8:0a:d6:ad:55:13:c8:de:62:
         e4:f9:cd:51:32:65:fc:6a:3e:3f:d4:50:f3:72:ca:6f:00:ef:
         5a:11:fc:74:2d:b1:89:8d:50:b4:f7:a9:16:4b:18:a6:36:d9:
         08:11:82:9d:cb:42:7a:ea:8e:2a:0b:e8:fd:07:41:c2:e8:b2:
         00:9b:ae:83:be:f6:9d:6b:f3:1e:ad:c7:0c:ff:ed:8d:8b:85:
         b9:3c:c6:59:1c:60:04:33:56:95:08:22:0e:74:08:bf:1b:35:
         cc:be:6a:eb:13:ce:af:98:e2:3f:f8:13:6d:23:a8:79:94:35:
         33:78:3a:64:8c:87:fc:45:7e:2d:e3:a1:80:b2:84:b4:df:87:
         06:59:3e:2a:86:b9:7c:9f:e7:4c:fe:af:97:d8:74:87:b1:d3:
         69:f0:74:70:da:26:69:f2:98:31:ea:42:49:38:17:98:63:68:
         09:35:e6:bd:83:93:99:94:33:e5:d9:8e:19:85:b6:dc:70:c6:
         4f:d9:0b:31:9d:bb:45:c1:f8:8b:e8:c3:0f:e9:12:a6:12:07:
         69:b6:4c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----