Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f3616eb2-b0e3-4f41-af31-e4b19bcee4c3.roa
File:                     f3616eb2-b0e3-4f41-af31-e4b19bcee4c3.roa (raw, json)
Hash identifier:          noaKq1TEp1JlkzJoUdSPm0iKukIAAebgiXDKhH3hHag=
Subject key identifier:   7F:92:A6:1C:DD:D5:16:95:DD:95:74:9D:24:AB:9D:09:50:1C:65:19
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       19458AA50DC63D7162CC05AE4DA80D8A92DEC54A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f3616eb2-b0e3-4f41-af31-e4b19bcee4c3.roa
Signing time:             Fri 29 Sep 2023 00:00:00 +0000
ROA not before:           Fri 29 Sep 2023 00:00:00 +0000
ROA not after:            Fri 03 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:45:8a:a5:0d:c6:3d:71:62:cc:05:ae:4d:a8:0d:8a:92:de:c5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 29 00:00:00 2023 GMT
            Not After : Nov  3 23:59:59 2023 GMT
        Subject: serialNumber=4d77dde0f0df554907120a74fbbc9630f9b39a10b9fa1998d2ea19e45abfc4de, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:f3:81:2f:7e:46:21:ff:1b:48:ff:21:49:
                    05:1f:24:f4:36:3b:fd:0c:ce:33:6d:b2:a3:28:01:
                    6f:ef:a4:6b:64:fe:60:fe:e5:d5:14:7f:cf:69:52:
                    29:aa:6b:f8:46:e0:94:9f:44:da:36:d4:6f:f0:e5:
                    97:28:33:10:54:2b:ca:89:11:00:db:fb:b2:02:5b:
                    ac:9d:2b:c7:6b:7a:f2:e3:20:80:58:4a:dc:5c:d8:
                    bc:f6:fd:c6:79:50:9f:b3:a9:cf:9b:bc:fa:dc:2d:
                    93:ea:45:0b:e6:fb:b4:49:e0:ca:cd:b0:d9:67:33:
                    a3:1c:ae:14:6c:7e:30:1e:58:64:4c:42:03:a7:dd:
                    2e:5a:5c:ab:8b:fd:86:13:2b:45:fe:b5:d3:27:42:
                    ab:ed:eb:cb:a3:cf:77:de:3e:e1:e7:9a:a0:fd:9f:
                    b2:d5:2b:0a:09:a3:7a:23:dc:c4:1f:a7:cb:5c:0c:
                    12:8a:8f:20:22:42:f5:d0:22:34:9c:a1:ec:d4:ff:
                    a8:83:6e:12:3d:36:d8:a6:6e:94:d9:8e:3b:db:07:
                    f1:79:1e:ee:21:ea:7f:24:0a:16:7a:54:c7:48:50:
                    7f:21:ba:56:f0:d8:0b:6e:df:f7:8e:2b:5d:e5:c8:
                    bf:7b:e0:71:76:65:5c:80:38:4d:72:f2:2c:67:44:
                    50:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:92:A6:1C:DD:D5:16:95:DD:95:74:9D:24:AB:9D:09:50:1C:65:19
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f3616eb2-b0e3-4f41-af31-e4b19bcee4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:15:87:03:83:d8:69:26:a9:89:69:84:79:4b:45:03:a2:55:
         69:42:b0:39:bb:8e:9e:78:98:63:2f:02:dc:ee:d4:f9:21:7f:
         fb:55:ed:55:77:45:2b:6e:f9:f6:1d:43:f7:47:4d:e2:f7:7b:
         76:6d:95:34:69:32:cc:1a:71:2b:30:bd:16:a8:fe:5c:0c:3e:
         c9:e6:1e:9e:37:6c:fa:70:60:58:21:f2:e6:08:bc:09:7b:5b:
         a5:00:70:5b:d5:47:1d:f0:5c:52:45:dd:fc:61:94:d5:7d:1b:
         50:75:d8:b9:08:41:23:d1:48:45:89:21:f1:26:c0:04:65:47:
         9b:e9:d5:31:c0:4a:3a:84:68:d6:5c:2a:2c:c4:f7:7a:79:1a:
         db:46:49:d1:d1:29:d0:e3:9d:f7:e1:87:98:cf:b4:12:a3:cb:
         9b:0c:b9:3c:b6:38:86:6b:da:c2:3e:a8:de:19:85:34:38:28:
         fe:6b:89:a1:cc:93:09:e0:e1:bb:c3:7a:25:87:19:7f:29:6e:
         8b:11:0f:eb:99:bb:5e:44:1e:43:7f:c9:12:95:df:f9:2e:29:
         db:76:72:42:f3:98:53:ae:3e:68:b2:3d:2d:f3:b8:f6:01:97:
         2a:7c:e8:e1:27:d3:7c:85:2e:4a:9b:ac:c8:c3:fe:bf:f6:7b:
         62:82:8e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----