Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1815d4ec-9fd0-48fa-8f4a-bd4da6753adc.roa
File:                     1815d4ec-9fd0-48fa-8f4a-bd4da6753adc.roa (raw, json)
Hash identifier:          +SXDIygcX6hPSQbLzffY+sPFq8PFOiL9OGGP+uWRp+E=
Subject key identifier:   DC:18:96:B7:F2:2D:C3:E9:22:9A:0D:37:63:19:F7:21:9E:8F:BB:47
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       13F521C7B6820B0250518B618FF0EDF3F062ECF3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1815d4ec-9fd0-48fa-8f4a-bd4da6753adc.roa
Signing time:             Wed 26 Jul 2023 00:00:00 +0000
ROA not before:           Wed 26 Jul 2023 00:00:00 +0000
ROA not after:            Wed 30 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f5:21:c7:b6:82:0b:02:50:51:8b:61:8f:f0:ed:f3:f0:62:ec:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 26 00:00:00 2023 GMT
            Not After : Aug 30 23:59:59 2023 GMT
        Subject: serialNumber=b3a90af4eeaddaf45395babf9ac179c4ccbed5158d93c9c141c8c85d43135a7f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:78:71:bf:67:fc:15:5c:0f:8c:c6:82:06:2a:
                    ae:96:a6:6b:2b:f7:74:67:3e:c5:a8:25:8c:84:1b:
                    e8:7e:b4:e4:17:39:11:ef:d5:36:3a:ea:c2:48:ef:
                    83:7d:54:57:6f:c1:0d:0d:b7:7f:9e:51:a9:1e:21:
                    9d:1e:d1:ec:98:ad:37:d7:0e:e5:7e:e8:39:14:35:
                    62:62:23:b2:e2:46:6f:32:76:bb:5b:e3:9c:a1:a3:
                    f3:4e:92:df:db:ee:76:c4:43:16:72:85:94:5a:43:
                    1e:6e:c7:b2:c3:16:19:fd:6d:d3:fc:e3:a8:69:47:
                    c3:73:0f:b9:77:48:da:39:89:0f:52:d0:b0:d7:05:
                    58:f5:e5:0a:c8:a5:2e:ba:5e:81:dd:de:6e:e7:7b:
                    7b:29:02:bb:88:78:3d:2d:5a:31:63:bf:83:da:e4:
                    e6:cb:07:f7:16:4f:fa:3d:fc:88:ac:e4:05:fe:2f:
                    95:3d:8b:d5:46:3c:9d:f7:52:2a:7a:ae:3b:2f:bb:
                    5e:e0:83:d4:77:ec:0a:3d:cc:96:2e:2c:d7:be:eb:
                    5c:ca:e8:88:1c:06:c9:b6:fa:0d:9c:9b:08:5b:8a:
                    6c:88:75:28:9d:e5:6f:c3:63:51:27:60:a3:37:10:
                    e0:be:16:66:d3:2b:72:6f:f9:b6:8f:dc:6f:f9:47:
                    df:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:18:96:B7:F2:2D:C3:E9:22:9A:0D:37:63:19:F7:21:9E:8F:BB:47
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1815d4ec-9fd0-48fa-8f4a-bd4da6753adc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:8c:ad:d6:8e:63:52:c9:f0:61:a2:16:29:52:31:58:04:0c:
         07:40:13:72:2c:90:6c:a3:1a:d6:56:1d:b5:58:f5:bb:47:fe:
         b2:e8:cb:01:f9:67:25:f5:43:a6:9e:ea:c5:6a:77:e8:a4:e9:
         35:73:bf:f5:b5:fa:cd:2e:78:a2:c0:da:30:b9:12:30:d1:98:
         e6:5a:f7:73:6d:dd:c6:22:e1:5e:7e:0a:a2:01:04:4f:e4:70:
         54:5a:00:db:19:eb:63:84:ff:af:5b:7d:2b:1b:1f:e1:1a:bb:
         e3:67:4d:d0:eb:2a:3a:1d:e3:90:50:54:8c:c3:78:9d:ba:d7:
         3a:49:76:f8:8c:65:f2:ae:4a:17:ad:d9:1f:49:0a:99:51:5c:
         51:b3:e0:af:64:5b:2e:7e:b4:d1:06:64:c0:0b:e5:46:51:f3:
         c8:00:33:f9:bf:c2:8c:3a:10:75:cb:71:5b:7f:24:c1:b5:10:
         77:c7:ca:d2:b9:b3:a4:7e:e2:c2:e8:26:a7:5d:91:f5:a5:5c:
         9f:1f:5f:35:a4:a4:ae:d5:16:ef:54:f3:4d:31:d0:7a:89:47:
         35:3b:76:8c:96:4b:9f:39:43:fb:11:5d:73:44:64:18:4e:db:
         d5:ae:26:ff:f7:b6:5b:ad:3c:11:76:dc:60:51:45:39:a7:48:
         e3:25:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----