Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6ec064e8-d2cb-46bd-bb76-e7e3753eb60b.roa
File:                     6ec064e8-d2cb-46bd-bb76-e7e3753eb60b.roa (raw, json)
Hash identifier:          mh6zP2+i0p0cuU1eip/e5eKYj2/yutfzMivTh8oKlqk=
Subject key identifier:   7E:40:34:5D:FD:EA:6E:0F:94:73:A9:BF:A6:8A:26:0F:03:88:56:57
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2A927744A4BD944766CE19CABD05F551E688E194
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6ec064e8-d2cb-46bd-bb76-e7e3753eb60b.roa
Signing time:             Mon 09 Oct 2023 00:00:00 +0000
ROA not before:           Mon 09 Oct 2023 00:00:00 +0000
ROA not after:            Mon 13 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:92:77:44:a4:bd:94:47:66:ce:19:ca:bd:05:f5:51:e6:88:e1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct  9 00:00:00 2023 GMT
            Not After : Nov 13 23:59:59 2023 GMT
        Subject: serialNumber=3621b306e6a3e210328ce8e86b5036db697330a7c5c8b0f2325224931a02f01d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:cb:12:3e:98:bf:9a:f2:10:b3:e5:14:db:
                    aa:9a:85:c5:1e:64:fe:14:63:7e:04:bb:45:87:02:
                    92:01:22:d9:ad:5f:4d:c4:fe:a2:a2:a6:28:2e:35:
                    82:65:04:e7:b0:e7:74:95:61:15:83:90:33:06:93:
                    be:de:08:f0:55:84:c7:b3:d4:91:9c:fc:d9:f0:ed:
                    7c:c4:d4:9d:74:da:ac:b3:36:c5:53:7f:14:f4:75:
                    87:18:69:41:09:8d:ef:d0:77:69:71:92:28:2c:06:
                    10:74:16:e8:cc:50:36:fe:e0:b4:60:f1:85:e7:5a:
                    06:dc:1f:ec:6e:21:a8:d1:ec:de:34:0a:f0:1e:1a:
                    c0:bf:8a:bb:cc:8d:fa:25:07:39:88:d7:ff:c6:ee:
                    83:59:53:90:ff:a4:a8:12:b3:a1:01:a5:98:b5:8b:
                    8a:91:8a:3c:62:2b:24:48:f3:fe:04:65:9e:4a:26:
                    09:63:09:eb:87:9d:5d:a4:0c:e1:bd:eb:a5:a0:06:
                    bd:8a:cb:5e:4b:72:78:37:92:96:69:db:88:88:cd:
                    e6:56:b0:e2:92:3d:8b:45:ae:6b:eb:44:9c:49:2d:
                    63:fb:0a:cf:3d:fd:2c:0c:87:f6:5e:12:7c:1f:de:
                    8b:31:77:d9:9b:17:61:09:64:59:5d:51:9c:55:a7:
                    b3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:40:34:5D:FD:EA:6E:0F:94:73:A9:BF:A6:8A:26:0F:03:88:56:57
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6ec064e8-d2cb-46bd-bb76-e7e3753eb60b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:52:63:32:4a:ab:4b:ee:1b:6a:4b:f7:93:e0:16:3a:7b:e7:
         81:6d:8c:7d:9e:9e:19:0c:c4:5b:83:fa:76:9d:c8:35:a4:64:
         ce:36:13:11:4a:af:b1:e4:6c:c4:30:50:0b:04:47:d9:48:cc:
         06:9f:d2:e9:d3:1a:0e:9f:61:f6:84:e0:15:3b:23:5a:bc:a2:
         4f:63:0e:42:a0:0e:6c:51:9d:e3:a5:c8:4b:58:4d:85:f3:8c:
         29:e9:64:1c:54:fd:bf:b7:c0:4b:62:16:14:1f:28:24:b8:9c:
         60:0e:bd:a7:25:50:5e:23:3e:17:26:02:6b:9b:9b:dd:19:b8:
         93:4a:e7:22:ce:bf:17:a2:af:7a:39:92:69:16:de:17:39:d2:
         2e:21:95:e0:f1:1b:98:3a:d2:20:d1:a5:12:66:e2:62:e3:80:
         20:37:09:0b:9c:9f:e9:4d:83:21:55:20:35:f4:4d:07:d1:51:
         70:6e:aa:83:46:5c:d1:ed:48:6f:4f:43:00:06:de:ea:38:ac:
         0b:46:57:1f:30:72:ae:99:84:51:37:08:44:ae:fe:b3:d4:ac:
         a6:b4:cb:bb:ee:22:50:1b:bd:6c:39:08:ae:80:2e:5c:c3:5e:
         0b:76:3e:bd:1b:e2:5a:f4:69:3e:ea:80:d9:42:e3:7a:49:94:
         47:ea:4b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----