Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1dfa591c-8abf-4484-b2e5-747c61edc339.roa
File:                     1dfa591c-8abf-4484-b2e5-747c61edc339.roa (raw, json)
Hash identifier:          jN39n7T1Azoscareb3f+7XJOG840aKHAcEqfA1zdgqU=
Subject key identifier:   DD:EC:C9:9B:32:73:D4:0B:81:3D:CF:30:4B:62:66:AF:40:DC:21:8A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5399130E62D497948E8BDD7026046B7354898872
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1dfa591c-8abf-4484-b2e5-747c61edc339.roa
Signing time:             Tue 19 Sep 2023 00:00:00 +0000
ROA not before:           Tue 19 Sep 2023 00:00:00 +0000
ROA not after:            Tue 24 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:99:13:0e:62:d4:97:94:8e:8b:dd:70:26:04:6b:73:54:89:88:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 19 00:00:00 2023 GMT
            Not After : Oct 24 23:59:59 2023 GMT
        Subject: serialNumber=5f2faff08b3cd60bfb39de688314ca08c08660ed4a6fc7d8847f30b8e99c1007, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:11:2b:b3:20:78:be:84:d3:8b:64:de:54:fe:
                    a4:f8:ee:7e:23:72:a6:8a:00:ce:af:df:1f:1e:02:
                    a9:ef:40:f5:15:a9:eb:a4:56:5f:df:c3:b4:3e:9d:
                    53:68:d5:d3:78:96:42:ec:cd:a5:cc:89:c6:8d:fb:
                    73:d1:29:7d:9f:49:5a:28:0a:b5:fe:7e:be:e5:32:
                    7b:99:51:fe:78:88:dc:6e:89:3d:c9:5c:86:7c:da:
                    da:8c:dd:2a:e9:54:09:1e:21:57:e9:73:60:2f:68:
                    26:fe:0c:71:88:15:16:4a:f8:4d:0c:fb:9f:4e:e6:
                    7e:b5:85:9b:52:ae:69:0b:e7:21:a8:77:ce:5e:99:
                    d1:6e:75:49:34:12:8a:78:08:92:2b:c5:3b:38:e0:
                    26:4d:ac:e9:4d:73:8b:90:c8:fb:6e:b9:79:f1:51:
                    90:ad:83:9f:22:f5:5c:23:74:05:f0:48:c1:43:8b:
                    ff:45:a3:32:7f:d5:59:05:5e:1b:dc:d6:fe:d1:93:
                    43:a3:f4:e1:ea:e2:b1:3a:ea:b6:eb:d3:d1:ba:cc:
                    fb:02:f5:1c:0d:8d:99:74:d4:37:ed:b7:e1:bd:01:
                    12:6e:39:45:f9:98:19:ae:f3:a1:86:da:32:4e:6b:
                    58:13:dd:01:d1:bf:e4:a6:76:9c:b1:97:61:6f:87:
                    37:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EC:C9:9B:32:73:D4:0B:81:3D:CF:30:4B:62:66:AF:40:DC:21:8A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1dfa591c-8abf-4484-b2e5-747c61edc339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:67:81:37:8b:60:7c:96:4a:8f:80:ff:30:11:8a:1b:b8:ce:
         4e:cf:18:ba:da:52:50:64:93:20:7c:c1:fd:ac:cf:e3:40:2e:
         7f:b6:69:12:76:2c:05:d7:d6:ee:59:ca:c1:6e:3f:54:64:59:
         1b:95:1c:4c:2a:68:85:40:b2:50:46:9b:20:39:92:27:05:56:
         1a:fe:25:52:26:d6:ec:0e:6c:e7:0e:68:4a:43:cd:26:7b:da:
         f2:74:9b:1f:8b:7c:f6:e3:7f:72:81:e9:ba:63:45:92:9e:de:
         f5:b4:c4:06:ad:b5:40:a4:d5:ec:15:aa:d6:a9:9b:67:18:c9:
         f6:d5:bc:b6:01:31:8a:b4:98:b0:39:94:14:5f:b6:3e:19:87:
         5d:12:83:96:4e:b7:da:d8:94:01:4f:7a:d9:75:07:23:8d:7c:
         1c:8f:eb:b3:d4:50:eb:17:5b:1f:fe:73:df:25:cb:81:e9:3b:
         ed:f4:e7:4c:a5:de:47:d5:cd:af:af:e5:54:21:b2:04:12:6f:
         64:c6:eb:cb:1e:40:ce:29:cd:60:3d:df:5c:b3:f3:eb:b9:10:
         d8:d7:91:70:50:b9:70:cf:d9:9b:65:a5:5b:34:2b:b3:75:c3:
         4b:6a:0d:ea:f0:7f:dd:36:13:e8:0f:b2:e3:4a:79:86:d8:cc:
         9e:01:ba:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----