Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01c60021-63fc-448e-bd05-89f56dae0f69.roa
File:                     01c60021-63fc-448e-bd05-89f56dae0f69.roa (raw, json)
Hash identifier:          99rIrsGooiHeyhm3PGXKbtcBgAUf/IVppHYEcFX8N9M=
Subject key identifier:   62:05:6A:A5:5F:9F:A1:3B:8E:3C:A6:AF:2B:3F:8F:3E:76:31:99:97
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4BDCBC6BECE0B2AEC556A27F1A328FCB0485CE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01c60021-63fc-448e-bd05-89f56dae0f69.roa
Signing time:             Fri 13 Oct 2023 00:00:00 +0000
ROA not before:           Fri 13 Oct 2023 00:00:00 +0000
ROA not after:            Fri 17 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:dc:bc:6b:ec:e0:b2:ae:c5:56:a2:7f:1a:32:8f:cb:04:85:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 13 00:00:00 2023 GMT
            Not After : Nov 17 23:59:59 2023 GMT
        Subject: serialNumber=b0e507a0714b3053d608bc718ae96eb9e82125aac6d7072ce126010037d32083, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e8:d7:79:dd:d2:32:7c:37:b5:c1:1b:4c:b2:
                    4c:a5:8b:7f:fa:0b:8a:8f:0d:78:67:54:5b:0c:67:
                    ee:78:b0:4f:30:b0:9e:68:0f:4b:3b:cc:84:cc:ee:
                    15:bb:38:df:a8:3e:fa:bb:38:13:50:cb:d4:5d:bd:
                    cc:3e:fb:0b:4c:cc:14:88:c1:1e:df:7e:91:c7:b5:
                    c4:98:07:e6:33:fe:95:6b:54:9c:b8:11:53:6b:a1:
                    71:32:d7:b5:bc:e2:7d:30:f9:9d:5d:8b:9c:bb:07:
                    ec:e2:70:b9:7d:38:af:d5:6a:f0:45:52:bc:42:56:
                    14:b2:49:08:8d:82:f6:b0:a1:87:e0:c4:40:07:2a:
                    36:ab:b0:76:0c:98:49:f9:fe:bc:29:f0:f1:aa:e3:
                    cb:29:1f:b3:53:b1:1a:71:8b:47:38:0a:85:f8:45:
                    93:e1:79:8a:8b:f7:bc:c0:52:02:b3:48:a1:e0:5d:
                    c5:8b:9a:9b:3f:a6:ff:e4:18:e9:19:9b:7a:ae:36:
                    10:79:95:c8:c6:bb:ea:0a:80:19:71:d1:ec:6c:79:
                    7f:a2:17:db:64:66:ce:7d:37:b7:5e:d0:0e:19:6b:
                    a7:26:b6:54:d7:9c:86:76:35:51:1d:05:09:7e:f8:
                    9d:3b:c3:1f:7e:0b:cb:bd:b8:d7:1d:86:87:42:d0:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:05:6A:A5:5F:9F:A1:3B:8E:3C:A6:AF:2B:3F:8F:3E:76:31:99:97
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01c60021-63fc-448e-bd05-89f56dae0f69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:56:1d:fc:3d:4f:a4:35:c9:bd:35:d6:0f:9e:dd:15:fd:72:
         9f:d3:19:b7:69:60:f5:da:21:fc:c3:2a:10:3d:f3:fd:1c:fc:
         da:ab:b3:c3:63:9b:67:fe:53:53:38:e8:0f:b5:f6:83:03:13:
         0d:74:79:5c:d1:1f:31:2f:f6:ad:4f:f8:d1:87:13:46:f9:97:
         b4:d1:ea:81:14:07:3f:99:bf:0d:93:4d:79:e9:25:a8:49:e9:
         6e:9b:0b:22:29:44:d3:7a:5f:f2:65:21:b9:b1:33:40:8f:95:
         bd:82:67:45:18:4d:dd:cd:52:0f:ea:ed:77:64:4e:5e:8e:8a:
         40:53:8e:ba:7f:5d:41:56:1f:15:0c:4f:d2:07:72:e5:dd:79:
         3f:a3:fa:6d:93:1a:9c:98:f5:cf:d0:42:13:02:74:f1:81:4d:
         37:14:3a:eb:a4:1d:97:95:48:5b:a8:92:0d:a1:c1:af:e1:b1:
         28:2e:e6:aa:c0:58:31:d2:0e:85:b9:19:35:dd:c2:db:76:bf:
         a7:05:46:fc:08:d7:28:53:60:43:a0:5e:2f:53:e8:91:2b:69:
         1f:7d:a7:f5:1e:94:dc:dd:47:e1:11:97:85:93:43:e1:fe:f4:
         9a:a2:9b:dd:34:a8:45:76:34:9a:20:8c:43:7a:ad:57:d4:cd:
         17:47:42:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----