Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6acbb116-64d9-4e8c-b91a-dcf67368c4d1.roa
File:                     6acbb116-64d9-4e8c-b91a-dcf67368c4d1.roa (raw, json)
Hash identifier:          Myx/TRoVRaUOaHMk03vY9rTRcrGUzAnQSNBGVSBc7bg=
Subject key identifier:   0C:C6:A7:F3:94:DB:AB:61:87:B5:84:89:6C:C7:3A:7A:E7:A5:E2:85
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3DE2B498B70DD29A13EE1C4B43C54482DF511C2F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6acbb116-64d9-4e8c-b91a-dcf67368c4d1.roa
Signing time:             Wed 18 Oct 2023 00:00:00 +0000
ROA not before:           Wed 18 Oct 2023 00:00:00 +0000
ROA not after:            Wed 22 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e2:b4:98:b7:0d:d2:9a:13:ee:1c:4b:43:c5:44:82:df:51:1c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 18 00:00:00 2023 GMT
            Not After : Nov 22 23:59:59 2023 GMT
        Subject: serialNumber=cebd588d7408ee8b836dad20e59f003a26bd1552d5d87568792be2891f485e0c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:01:78:26:12:3f:5f:77:d0:10:67:41:4c:3f:
                    07:d6:ce:a9:a7:80:89:71:ab:6f:59:06:31:67:ad:
                    60:bd:cd:d8:1c:42:a1:eb:72:2c:9d:83:e9:90:8b:
                    a3:ae:f8:b9:46:d9:9a:82:2a:4c:28:3a:7f:61:d7:
                    58:fc:fe:eb:37:a3:c9:33:c6:ef:c7:db:85:6e:73:
                    d0:b2:38:8d:73:24:15:c9:37:39:0d:f4:f9:5d:a3:
                    95:7c:c1:8b:83:ad:9f:04:b5:4b:16:c0:89:06:4b:
                    c7:9e:5f:12:34:88:9c:02:f6:72:3e:8e:f2:61:ee:
                    95:bf:a2:d2:b9:83:bd:ff:59:81:07:23:43:b1:db:
                    80:3a:f8:39:d5:63:3e:3b:da:19:c6:52:8e:45:ae:
                    2c:53:0d:1b:98:c1:4e:39:fe:9b:9d:66:52:82:d9:
                    7b:de:50:81:2e:b9:ca:fc:fa:b4:89:90:1d:03:58:
                    61:29:b7:d7:f8:6b:db:14:e1:53:aa:3f:79:a1:06:
                    5e:ca:c7:fb:be:7a:e9:a9:75:19:64:88:af:d2:70:
                    03:b4:98:46:03:5a:f4:3a:84:77:94:a5:6c:83:e2:
                    7d:9b:9e:c8:89:15:9f:04:ca:77:15:cd:d1:2e:2d:
                    29:5c:2e:03:c9:9d:de:0c:18:f8:11:51:86:e5:30:
                    98:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C6:A7:F3:94:DB:AB:61:87:B5:84:89:6C:C7:3A:7A:E7:A5:E2:85
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6acbb116-64d9-4e8c-b91a-dcf67368c4d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:aa:8b:57:90:4e:9d:57:13:79:03:db:c6:82:e5:3e:17:6a:
         5d:d6:0b:09:38:22:26:b5:64:bf:5d:46:2e:72:6d:0e:6d:42:
         28:2a:8b:39:50:e0:91:cf:bb:58:a4:e0:97:39:dd:1c:b3:5f:
         a6:b0:e0:e8:02:30:ef:f4:bc:0b:62:77:c5:b4:5e:31:3e:68:
         c8:47:5d:ab:d1:2e:35:64:c2:41:0d:ed:c3:f9:00:d7:ca:48:
         11:4c:da:e0:f1:d6:42:09:8e:12:b0:70:af:0a:c0:43:73:fa:
         e7:e9:f2:90:ac:5d:64:dd:0d:f6:d2:ef:71:77:03:e2:04:23:
         c3:ea:76:e9:7a:96:84:2a:0f:0a:b7:06:9f:81:fe:68:24:37:
         79:55:af:1b:d7:39:a5:1a:ab:43:f0:d8:47:ab:df:7a:dd:12:
         13:e6:15:25:e5:80:60:7b:fb:d9:3e:ee:0c:53:5d:36:99:b1:
         81:b3:f6:57:8d:b8:37:f9:de:a0:5d:48:3f:f1:ef:7c:3b:48:
         87:b7:c9:a9:eb:e0:3e:31:0e:92:11:59:53:a9:cb:05:b3:d2:
         36:5f:f4:4b:c3:7e:7d:8a:40:ed:7d:47:e5:7c:64:36:0d:00:
         52:94:f7:60:0d:1d:10:ba:f6:3e:3a:2c:5d:b1:76:05:e5:50:
         57:eb:b6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----