Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1504ef24-13fe-44e5-b82a-0e374ebbfa80.roa
File:                     1504ef24-13fe-44e5-b82a-0e374ebbfa80.roa (raw, json)
Hash identifier:          6W95C7Wm2FahbhX2jqZt4uurfbZQ0NUQTv5SiPXAyI0=
Subject key identifier:   35:3B:5B:14:F9:99:1C:48:D5:4D:54:96:47:E0:43:6A:49:AE:38:DA
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       23DEF15D1E1FEB1EAD99D391737F2DE8B58FCA80
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1504ef24-13fe-44e5-b82a-0e374ebbfa80.roa
Signing time:             Mon 17 Jul 2023 00:00:00 +0000
ROA not before:           Mon 17 Jul 2023 00:00:00 +0000
ROA not after:            Mon 21 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:de:f1:5d:1e:1f:eb:1e:ad:99:d3:91:73:7f:2d:e8:b5:8f:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 17 00:00:00 2023 GMT
            Not After : Aug 21 23:59:59 2023 GMT
        Subject: serialNumber=d59af39de4a678e17d5e39b06bb886319a87a260d3960f1648376eb5c0242d23, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:32:73:71:d8:07:06:15:b2:d5:c7:6e:41:51:
                    e5:8f:94:ac:68:d1:f1:29:f4:b9:8a:50:93:75:ce:
                    3a:95:21:74:da:5d:ae:60:34:a8:0b:3c:a0:b5:14:
                    cc:c7:4d:38:4f:b4:9e:ed:54:b1:4d:63:b9:a7:b2:
                    2e:af:92:47:38:e1:18:f0:43:52:e0:42:a5:fa:88:
                    7f:02:3f:8f:53:5b:04:37:c3:78:be:16:d4:ee:dc:
                    bd:95:b7:09:c0:24:80:e3:8b:d4:93:58:b5:b5:24:
                    be:0d:fe:55:74:b8:88:f0:92:84:ba:e6:9f:6e:cd:
                    10:f3:62:48:e4:22:c0:22:64:c4:bb:f0:81:47:7d:
                    c4:43:be:8c:a0:35:7b:cd:1e:e4:f9:0c:2d:32:1f:
                    78:e2:8d:e6:fc:f1:31:c2:91:0c:8f:b4:77:1a:ed:
                    af:5e:00:f7:56:37:6d:b4:78:7a:c0:24:ed:0d:33:
                    91:3e:ec:ff:9e:e4:33:f1:1b:99:fa:74:bc:3b:c8:
                    74:5b:e2:06:8c:f6:e5:c0:89:ba:ed:bc:49:80:c8:
                    e7:e8:33:80:53:a8:ef:47:11:a4:0a:ae:51:90:5b:
                    e8:51:a3:70:1a:6d:bb:db:0f:4e:d4:36:39:b5:99:
                    32:54:bb:c5:dd:43:00:34:b2:3f:06:06:dc:fa:d4:
                    21:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3B:5B:14:F9:99:1C:48:D5:4D:54:96:47:E0:43:6A:49:AE:38:DA
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1504ef24-13fe-44e5-b82a-0e374ebbfa80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:b8:ec:53:26:93:c4:aa:75:0f:8d:31:6d:55:8b:32:00:3c:
         5c:49:3c:42:8f:3e:8e:bf:66:97:84:b3:0d:28:dc:dd:53:5f:
         ea:b0:4a:52:6a:f7:8b:ea:97:52:6c:40:91:ef:82:e1:71:fc:
         23:12:05:de:a0:1b:4c:03:0a:7c:88:78:03:38:3e:8b:32:72:
         99:fb:27:35:d2:f5:19:4b:f9:ff:f9:ca:49:93:b2:e0:3b:77:
         3b:1c:8e:24:07:a2:b2:20:9d:c4:34:f3:88:8e:a9:dd:60:1a:
         98:5b:47:92:f9:bc:d0:9e:67:a2:97:ec:f6:86:ea:3f:eb:97:
         65:31:8e:da:1f:13:3b:b8:40:18:5d:24:e8:8f:b3:b1:36:d9:
         5b:13:6e:58:dc:bb:2f:fe:11:f9:92:2d:d3:37:d5:ac:bd:c0:
         cd:6c:c2:4c:f2:c1:80:8d:5e:d9:d0:1c:c2:c7:15:f1:4b:f3:
         9e:fa:f5:d3:af:96:1a:c6:6d:08:7f:31:44:3b:55:da:4c:ce:
         bf:17:c6:a3:a2:9a:a5:5a:d6:40:3d:82:8c:98:0e:17:2b:0d:
         cc:c4:e1:2b:2d:e5:29:6b:bf:68:35:34:84:c5:54:e0:76:59:
         4f:74:5f:e7:3c:f4:e5:10:0d:ac:01:c4:ff:ea:72:f9:6c:c4:
         67:70:58:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----