Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4e949fc7-ee38-4872-85a3-0ebdd9d6b012.roa
File:                     4e949fc7-ee38-4872-85a3-0ebdd9d6b012.roa (raw, json)
Hash identifier:          Wq7N9VGWpbJvX8x3Dcbb9YsGdjjJPDfvnZZQr8+iZdM=
Subject key identifier:   D9:CB:45:53:2E:E7:EC:5A:8A:66:C9:4B:82:6F:A2:EE:F7:D5:9E:7D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6C8202CAABFD9E1D7FD38C6C3B6E866651EF4C5A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4e949fc7-ee38-4872-85a3-0ebdd9d6b012.roa
Signing time:             Sun 15 Oct 2023 00:00:00 +0000
ROA not before:           Sun 15 Oct 2023 00:00:00 +0000
ROA not after:            Sun 19 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:82:02:ca:ab:fd:9e:1d:7f:d3:8c:6c:3b:6e:86:66:51:ef:4c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 15 00:00:00 2023 GMT
            Not After : Nov 19 23:59:59 2023 GMT
        Subject: serialNumber=ac7f5a4a2041064eefd85fe469e7f0bddc37dc3763a270b851485cec02a2e286, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:59:9a:47:7a:cd:c7:01:1c:2b:41:41:95:c4:
                    fd:69:40:af:aa:a1:eb:67:0a:3a:1b:42:13:98:4f:
                    9c:1e:3c:4f:51:cc:ce:61:2b:7b:2d:05:65:9c:25:
                    02:05:3d:68:bb:83:f7:8b:4e:7e:65:12:b1:a9:d5:
                    cd:52:7f:ec:83:8c:1d:2f:59:87:1b:1c:68:ce:f9:
                    85:5d:7f:3c:84:33:12:90:c1:54:7d:aa:b0:9b:75:
                    c2:ce:fb:6a:74:b9:b7:85:cb:ea:87:0d:83:ec:3f:
                    08:0d:06:07:82:ca:87:3c:51:67:bf:fe:17:0d:57:
                    ec:a1:b1:31:77:e8:c5:5d:67:35:d8:d6:f4:f3:6f:
                    5c:46:bd:1f:40:0c:c8:9d:82:5a:aa:0b:0c:7d:33:
                    95:41:94:2c:f9:17:ba:62:45:40:5a:01:9f:3b:bd:
                    ee:62:dc:6d:45:3a:a2:ec:60:0f:e0:53:37:28:59:
                    6d:00:ab:f9:16:46:25:f0:b5:01:ee:ef:e8:28:92:
                    5d:be:d7:dd:a2:22:c9:0d:5b:f3:ec:e4:c4:2e:77:
                    47:06:e8:a3:07:c5:88:38:02:c5:de:91:d4:cc:53:
                    f8:6d:75:9d:e5:8d:c3:0e:1d:94:38:b0:0d:0d:f5:
                    29:b5:98:23:10:d1:3a:4a:ce:bd:6a:e4:7d:8c:9a:
                    65:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CB:45:53:2E:E7:EC:5A:8A:66:C9:4B:82:6F:A2:EE:F7:D5:9E:7D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4e949fc7-ee38-4872-85a3-0ebdd9d6b012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:c0:62:da:63:c9:56:a1:0c:97:3c:b8:53:4f:90:1d:51:c2:
         6c:53:2e:b4:7f:b8:22:57:3f:b2:cc:2f:96:b0:ed:57:22:f2:
         bd:3b:bf:a4:c2:4a:ec:70:54:be:a6:8b:35:fe:ba:36:2a:93:
         8b:ab:ad:02:e4:ae:5f:f5:de:c7:87:98:13:21:8b:8d:94:5e:
         2c:ff:1b:07:07:26:db:d9:97:9e:ba:e4:2a:7f:61:48:8a:40:
         27:4d:47:a1:d1:50:78:5d:05:a2:96:eb:52:d1:fe:61:0f:3a:
         4e:4a:c7:3a:33:a4:05:2f:a1:01:c5:ad:32:7e:92:83:d5:64:
         24:28:7e:77:e2:c7:de:cd:31:76:30:eb:c2:b6:c1:98:4d:c5:
         bb:b4:ef:1d:ef:c0:fc:48:71:43:ca:f2:7e:08:83:66:b2:9b:
         8d:ba:a4:08:7c:f4:b0:e6:cb:d6:91:51:c2:2c:36:ce:7f:43:
         da:4b:b0:97:ba:11:26:cb:4f:05:93:a3:49:c6:92:7b:68:63:
         b1:31:84:96:f2:63:7d:b0:09:46:f1:14:10:fc:1d:54:3f:88:
         2b:5f:ba:15:91:ba:4d:60:45:a0:bb:6a:49:c3:4c:b0:41:e8:
         7d:c8:b3:ff:cc:fe:67:0f:d7:73:59:54:e6:96:a0:b9:c4:43:
         cf:a6:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----