Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2ae4dc7a-f361-43b0-915f-39c44203839a.roa
File:                     2ae4dc7a-f361-43b0-915f-39c44203839a.roa (raw, json)
Hash identifier:          HqLTHCwjt4+DKDKSiQX0FM70n6O1Sw1Y14A3yTQ2dIM=
Subject key identifier:   9F:31:38:04:F0:98:01:2D:1F:96:F8:5B:C6:A6:C3:8F:A6:51:9E:50
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6DCB4F8A3D17181111A70F6D050A05CF13F09C52
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2ae4dc7a-f361-43b0-915f-39c44203839a.roa
Signing time:             Tue 27 Jun 2023 00:00:00 +0000
ROA not before:           Tue 27 Jun 2023 00:00:00 +0000
ROA not after:            Tue 01 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cb:4f:8a:3d:17:18:11:11:a7:0f:6d:05:0a:05:cf:13:f0:9c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 27 00:00:00 2023 GMT
            Not After : Aug  1 23:59:59 2023 GMT
        Subject: serialNumber=1110b7b7c6f42c47ba156ac130c6a29e0ae084394486a13b6d7d339d0336e095, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:7e:8c:0c:44:43:23:4e:68:5c:f8:c8:bc:
                    83:18:21:e5:01:7c:0a:e1:31:8a:a7:9d:07:c3:9b:
                    2d:e5:13:2a:5d:f8:9b:4e:80:e6:2e:82:49:5c:54:
                    88:39:0d:05:7a:93:76:cc:1a:35:78:3f:c4:ea:24:
                    79:c4:51:a3:9a:61:33:c8:94:1b:a7:e8:c3:29:f9:
                    b5:4e:83:2d:1f:96:95:cb:06:d9:d8:ef:f0:08:2f:
                    4b:c4:0b:67:98:6f:90:2e:89:42:b3:80:c1:3f:69:
                    d2:99:d2:b9:56:45:17:30:3c:b9:1d:0d:a5:f1:41:
                    11:e1:96:b4:e7:97:9e:c3:e5:c7:01:6c:b7:e5:35:
                    44:e2:66:52:38:58:89:01:5a:b0:48:14:b7:c0:e3:
                    f7:50:6d:f4:3e:3d:fd:64:c4:cd:4d:ca:f9:bb:93:
                    1b:49:70:88:5b:11:4d:2e:aa:6b:b7:cc:fd:93:84:
                    e2:24:bd:83:b1:74:4c:02:73:c0:66:ff:42:17:43:
                    65:11:09:07:51:41:31:dd:fa:ac:fb:2f:6d:d4:7a:
                    83:1b:e3:31:4a:a3:4e:92:f8:36:6f:8e:83:5d:27:
                    23:02:18:88:08:07:4f:cc:11:bf:b2:0d:a4:34:f4:
                    e1:9d:81:1b:71:94:22:2c:c3:d3:17:13:8d:5d:dd:
                    eb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:31:38:04:F0:98:01:2D:1F:96:F8:5B:C6:A6:C3:8F:A6:51:9E:50
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2ae4dc7a-f361-43b0-915f-39c44203839a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:6a:7d:c7:a8:ee:4f:d6:14:7e:ea:61:d4:9c:33:ab:7e:07:
         35:57:c4:5d:64:12:f7:8d:79:39:9b:74:74:ab:31:ee:d2:86:
         9c:be:69:c4:53:aa:85:61:5d:7e:74:fd:ef:e4:4f:6e:df:4c:
         a9:83:74:9b:d9:e5:77:3a:fe:f0:46:88:a6:88:77:d2:eb:df:
         c3:c2:4d:4b:22:80:c0:82:8b:46:ef:25:81:54:51:64:64:4c:
         73:8b:b1:b5:3b:3a:2b:39:f9:16:dc:83:0d:d7:c2:8b:54:28:
         11:f7:b1:56:b1:40:fd:f4:2c:fb:63:50:f3:b9:17:3e:ae:1a:
         1e:df:57:8c:ba:f5:73:4d:5f:8d:82:26:e1:a4:16:ff:90:26:
         3e:55:9b:55:27:be:be:15:df:9b:e2:e9:69:ac:bc:63:4a:6c:
         cd:2a:39:27:03:81:3d:4b:3e:b8:7d:24:ba:fb:c5:90:93:62:
         4b:b6:38:e5:ef:84:69:eb:20:42:06:3e:ea:99:7b:40:89:a4:
         9e:54:9c:af:2a:52:98:5d:26:b8:66:2b:1f:6a:be:ca:65:48:
         26:21:b1:68:ad:28:32:1e:47:b3:9e:9d:b4:05:90:d3:f8:ef:
         2b:8d:e6:d2:75:2d:66:d5:58:81:84:69:a6:9d:25:c1:88:8e:
         bf:48:34:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----