Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b45bf9d-b5f8-4672-8350-021e7d32cc4f.roa
File:                     7b45bf9d-b5f8-4672-8350-021e7d32cc4f.roa (raw, json)
Hash identifier:          T4n1RoatzQXo5sjFsCqDwcx59cSqDQTMPIudiPMGVeM=
Subject key identifier:   C0:9A:70:23:D8:F3:6F:0F:58:EC:1C:B3:A4:B9:16:48:EE:B7:B2:E3
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4F2F5F250511F387FE50B949D70947EC6C1D9869
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b45bf9d-b5f8-4672-8350-021e7d32cc4f.roa
Signing time:             Thu 16 Nov 2023 00:00:00 +0000
ROA not before:           Thu 16 Nov 2023 00:00:00 +0000
ROA not after:            Thu 21 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2f:5f:25:05:11:f3:87:fe:50:b9:49:d7:09:47:ec:6c:1d:98:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 16 00:00:00 2023 GMT
            Not After : Dec 21 23:59:59 2023 GMT
        Subject: serialNumber=ce99c69ebb2e417b86f00a149086f1c2d154b9b8736573feafa6265265636059, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cc:65:ed:64:4d:c4:e9:0e:5b:9c:f6:df:74:
                    ce:5a:7e:ac:64:c3:34:2f:4a:a0:11:d9:c6:81:41:
                    99:e4:c7:e7:69:b7:a3:59:20:3b:c2:1d:d6:ad:01:
                    ce:21:36:78:3b:54:f7:4c:68:87:83:e7:29:17:d3:
                    bc:aa:3a:0c:7c:94:01:f6:cb:a1:0f:96:9a:9b:9d:
                    dd:37:8f:4a:10:cc:fd:91:f9:4a:f8:5e:32:dd:dc:
                    75:6e:78:8c:6c:80:e1:8d:76:2e:ba:a6:62:43:92:
                    81:77:eb:89:52:ce:bf:50:b4:23:d0:d5:78:4b:c0:
                    fe:ff:5c:28:87:3f:12:cf:64:7b:ea:e6:f1:91:57:
                    b4:94:fb:a9:25:3d:88:55:48:e5:98:a5:88:18:11:
                    ff:67:b1:d9:e0:48:26:5a:ed:7a:af:48:7f:08:27:
                    32:8c:73:7b:94:46:26:b6:72:88:b7:3a:8b:23:0c:
                    ef:1f:02:4e:ba:93:31:d4:1f:80:01:80:f0:d4:aa:
                    95:65:10:5f:7e:ae:a8:ba:94:89:ce:80:86:d1:43:
                    e0:6c:cb:7c:5b:5a:ef:4e:36:a4:35:2a:69:01:f1:
                    58:db:37:e3:41:6c:33:fa:70:c5:98:1a:b2:73:0a:
                    c1:1a:f7:6b:69:1d:9e:98:51:72:99:68:05:30:f6:
                    c0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9A:70:23:D8:F3:6F:0F:58:EC:1C:B3:A4:B9:16:48:EE:B7:B2:E3
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b45bf9d-b5f8-4672-8350-021e7d32cc4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:71:6e:b6:ea:9b:d2:38:23:d4:05:15:75:af:30:d7:73:11:
         7a:12:7a:df:72:2d:42:68:3d:2a:b9:69:1d:39:5e:0a:50:f7:
         2c:ba:86:8d:1a:ae:3e:f2:1a:9f:93:c1:6a:0d:74:d2:57:0a:
         c9:2d:1f:f7:b6:72:b9:84:9b:31:03:7b:c1:35:a1:92:ba:4a:
         85:ba:87:f7:e4:12:dc:6e:ec:cf:54:60:b6:2f:bb:a3:9b:76:
         7a:63:80:db:ae:d2:a6:9b:8e:9a:f9:2a:c2:ae:ab:3d:1f:c8:
         f3:da:98:bc:73:a1:f5:02:87:9a:6c:ef:bd:51:49:c2:bb:8d:
         fc:f9:73:c1:ba:f5:8d:f5:38:90:5f:f5:e6:95:d2:b1:32:61:
         f1:61:53:f0:a7:ca:d8:e0:06:0d:1d:73:73:61:2e:e2:5a:35:
         57:30:cb:3b:e5:39:3b:e3:52:dd:73:96:f6:05:57:b0:5f:ba:
         ba:21:78:10:d7:ae:1b:bb:bd:dc:d8:e1:d1:f7:49:56:53:18:
         31:10:27:5a:96:df:77:d5:45:70:47:46:32:8b:23:58:ef:6e:
         d9:d2:6b:7e:7a:9f:f9:f7:8b:c0:ee:1c:12:0c:a8:a1:78:84:
         78:3b:f2:28:38:98:7f:52:60:76:03:34:48:db:ce:70:fd:ad:
         30:75:5d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----