Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5ba80e06-d4e3-4205-87fe-bc776415bacf.roa
File:                     5ba80e06-d4e3-4205-87fe-bc776415bacf.roa (raw, json)
Hash identifier:          bYXCNwkWqCbB5b1xHhH0h4tqoj2tUdmLXLnT1FUoYms=
Subject key identifier:   33:F3:28:5D:48:27:7D:A3:01:42:00:D7:97:8E:38:0B:0D:9C:21:F0
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       41C1436781335769C93005FAFBCC10038EFCBC24
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5ba80e06-d4e3-4205-87fe-bc776415bacf.roa
Signing time:             Thu 19 Oct 2023 00:00:00 +0000
ROA not before:           Thu 19 Oct 2023 00:00:00 +0000
ROA not after:            Thu 23 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c1:43:67:81:33:57:69:c9:30:05:fa:fb:cc:10:03:8e:fc:bc:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 19 00:00:00 2023 GMT
            Not After : Nov 23 23:59:59 2023 GMT
        Subject: serialNumber=f9d365bca7339484a0ffe0a1d0bbf7dbdd786a9e680cbba47c53addfb3b98992, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:86:04:0b:c4:79:a9:83:8d:3d:4c:cd:0d:81:
                    05:9c:5a:08:c7:00:04:ab:54:d9:d0:89:c9:95:2d:
                    66:86:58:a2:6b:db:14:71:eb:e3:4e:18:9e:c2:45:
                    dd:fa:d0:7e:9c:b5:59:9c:3e:e5:bf:5b:92:77:e5:
                    f6:6c:e5:b3:b3:34:12:cc:98:a7:47:d8:c8:4b:ad:
                    62:c6:58:02:c6:01:bb:29:46:31:fb:98:11:33:d8:
                    cb:89:10:83:00:19:10:a3:32:9c:d3:68:83:3c:79:
                    c7:47:b0:0a:fc:e2:b9:6f:b9:bc:eb:c2:ac:77:ee:
                    e1:43:18:3d:cf:00:00:dc:3c:9a:25:cf:82:9f:d3:
                    cf:40:31:0d:2d:e7:07:5e:fe:50:ca:0f:dd:95:ff:
                    c6:c3:39:64:23:e3:cb:40:84:3f:d2:cb:7b:1d:ce:
                    c4:ae:b8:31:c1:b2:98:fd:ef:1b:b0:fd:82:42:c0:
                    47:fb:cd:88:fc:bf:eb:eb:65:18:2f:41:ba:4b:6e:
                    eb:57:0c:9d:26:ae:42:ca:0a:7a:f7:82:09:85:f0:
                    97:80:1b:ad:c2:df:01:0b:79:f6:3f:55:8c:73:78:
                    d1:ae:27:8f:51:ae:f7:56:25:f1:d6:3e:94:0c:ae:
                    33:01:3c:0b:4c:c4:2a:88:84:49:50:72:19:fc:e9:
                    a0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F3:28:5D:48:27:7D:A3:01:42:00:D7:97:8E:38:0B:0D:9C:21:F0
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5ba80e06-d4e3-4205-87fe-bc776415bacf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:1a:b1:11:6d:a9:27:fa:83:46:9f:56:5d:df:b5:f6:c9:3d:
         d0:d5:ee:69:b5:46:5f:54:3c:a7:3a:d9:ca:51:7a:01:3c:d0:
         0e:9a:e3:87:d6:d5:ac:3e:16:ed:6f:ba:f3:e4:96:6c:8b:bb:
         2c:ab:5b:62:43:dd:44:24:8f:b5:03:d5:d1:6f:64:e6:3a:eb:
         a6:3b:cb:ea:14:17:07:84:ec:1a:bb:9c:5a:65:31:78:51:32:
         7f:45:b5:53:b1:0b:7f:0a:bd:d3:93:3b:7a:35:a5:d7:3f:cb:
         70:e7:13:8b:e9:82:e9:ac:f3:2e:82:49:3d:10:d1:0e:57:c4:
         7d:40:b3:42:11:60:5c:89:6c:c8:17:1e:a2:59:db:18:54:16:
         97:18:d9:b6:9f:ad:8e:a2:15:6c:bb:d6:f0:43:fe:dc:3e:ad:
         70:c8:08:9a:a4:95:0b:40:f6:12:ee:53:0a:94:d2:f5:5a:11:
         fb:1a:0f:95:20:0f:b1:32:72:ee:a6:e6:78:72:aa:af:39:bb:
         f0:63:2d:65:73:4b:e3:2f:aa:cc:5f:31:39:1d:be:4c:7a:34:
         74:15:ed:22:a9:ce:d4:ed:30:8e:eb:c4:8f:2c:f0:f8:63:7b:
         5b:e3:dc:e4:26:56:23:c5:61:c9:04:92:82:4a:f5:91:dc:e3:
         97:34:46:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----