Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0781f551-90ce-46c9-a6a6-c5b1fc6c9f15.roa
File:                     0781f551-90ce-46c9-a6a6-c5b1fc6c9f15.roa (raw, json)
Hash identifier:          J+jX1AhcErYasH4ak+oNvnMPh0ZAbEpK43/4s1DPAdQ=
Subject key identifier:   AB:4D:A2:9C:BC:D6:CB:2F:25:E1:AD:C6:E6:1E:07:3C:13:26:37:C0
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5C608AA086ED7BFED55FB2FEE47B8B2A23C02776
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0781f551-90ce-46c9-a6a6-c5b1fc6c9f15.roa
Signing time:             Wed 30 Aug 2023 00:00:00 +0000
ROA not before:           Wed 30 Aug 2023 00:00:00 +0000
ROA not after:            Wed 04 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:60:8a:a0:86:ed:7b:fe:d5:5f:b2:fe:e4:7b:8b:2a:23:c0:27:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 30 00:00:00 2023 GMT
            Not After : Oct  4 23:59:59 2023 GMT
        Subject: serialNumber=e88a08dc7a0a52fa96b1a13846f901f3bb69d177d8dc417aa5cad2161f67e598, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a9:e4:20:39:b1:d8:f2:3d:23:91:bc:a4:3d:
                    81:4a:9c:7a:ba:bb:16:db:55:db:55:f3:6b:fb:cf:
                    b6:94:92:ad:5f:92:e5:96:2c:31:60:c2:51:a4:52:
                    cd:3a:70:b3:96:ee:2d:59:5c:3a:83:42:48:94:d5:
                    43:26:d4:da:bb:c1:67:20:62:55:12:cc:49:aa:67:
                    24:d9:a6:ff:02:0a:a7:84:9e:4e:d2:54:78:e8:86:
                    15:83:da:d7:43:11:a7:f1:c9:ee:83:97:fc:a5:97:
                    74:10:78:31:ab:78:9f:89:c9:84:c5:58:9d:29:ee:
                    53:41:36:5e:81:5d:fd:7d:61:37:8f:1d:aa:6a:b7:
                    85:4b:55:c2:4a:9d:a0:42:59:01:b2:e2:3c:88:74:
                    5c:5f:e5:df:3b:3c:f7:36:a6:0f:87:fd:a9:14:b1:
                    2b:4a:cd:4c:1a:3b:4e:98:fc:6e:16:4a:51:e3:9b:
                    0f:e7:d5:0a:be:57:c8:33:f5:95:81:3b:dc:09:0e:
                    bf:1b:fc:34:7b:5e:7c:5a:93:61:a0:09:fc:05:62:
                    d9:de:d8:02:2e:28:66:b1:7a:0c:b8:c5:08:18:f7:
                    ff:3c:ea:e7:e3:cb:6e:5e:20:5f:99:0b:dd:0e:de:
                    c2:b4:b6:83:ba:bb:d5:24:7c:2f:57:d6:72:9b:95:
                    4a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4D:A2:9C:BC:D6:CB:2F:25:E1:AD:C6:E6:1E:07:3C:13:26:37:C0
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0781f551-90ce-46c9-a6a6-c5b1fc6c9f15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:ff:6a:f6:dc:24:cc:96:d6:48:1f:10:7d:a4:07:2c:71:49:
         9b:90:0d:48:e4:14:47:3b:32:19:8c:91:8e:4f:e7:9c:6d:6d:
         e4:77:e9:db:46:a2:2a:20:ee:0c:9e:ed:05:69:ae:27:b4:1d:
         2b:1e:00:ff:5a:82:28:1d:d7:c7:28:a7:9e:94:db:e6:fc:8d:
         ed:3e:7c:95:6d:84:ec:ed:28:00:02:2d:33:00:3f:13:a7:29:
         dc:b8:d2:6e:06:40:8d:c9:73:02:fc:b1:9e:5a:ff:46:e5:81:
         ed:ae:9d:5c:90:76:77:27:bc:21:79:57:07:88:ce:6f:20:be:
         a1:72:11:f4:58:72:b4:14:07:54:dc:5b:9e:e0:d0:54:98:b7:
         50:76:65:32:b5:cf:35:60:4c:71:33:c3:60:0e:90:f1:c5:d7:
         d7:60:73:63:f8:e1:7e:7c:52:6f:75:d0:84:24:4f:b3:16:b1:
         98:29:d0:c9:68:30:97:9f:0d:54:c0:7b:5e:4c:6a:a6:f4:89:
         77:fa:05:9b:ab:49:f5:9c:0d:f6:06:9a:0d:44:6c:54:18:67:
         d8:ba:4d:b8:d5:fb:76:ae:c0:17:90:df:1b:83:03:10:ba:2c:
         ea:ba:97:dc:9f:7e:2c:21:3d:0b:44:88:32:86:9d:01:3e:9e:
         89:80:17:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----