Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3618cb13-9b8a-49ea-a6bb-3d72bbfafcaa.roa
File:                     3618cb13-9b8a-49ea-a6bb-3d72bbfafcaa.roa (raw, json)
Hash identifier:          zcf1LnBNvy7LLTnNWdkavknWFkfByyIaN9IdtwyANhM=
Subject key identifier:   E3:46:0B:67:2C:C9:E1:76:3A:92:DE:C8:01:DE:82:9A:19:1A:42:6D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       47CA266A873F1E1B98AB4CA841165192EA25EFCA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3618cb13-9b8a-49ea-a6bb-3d72bbfafcaa.roa
Signing time:             Thu 15 Jun 2023 00:00:00 +0000
ROA not before:           Thu 15 Jun 2023 00:00:00 +0000
ROA not after:            Thu 20 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ca:26:6a:87:3f:1e:1b:98:ab:4c:a8:41:16:51:92:ea:25:ef:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 15 00:00:00 2023 GMT
            Not After : Jul 20 23:59:59 2023 GMT
        Subject: serialNumber=1d410673b9dcbc2bcc5a631d53f3a8393085f7d11c96d4b014a15597c1202b54, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:ea:be:a5:43:16:cb:cf:61:15:74:a7:44:
                    da:1e:1e:f0:c9:c4:23:ac:11:8a:fe:7e:7e:9f:b3:
                    a3:3e:1c:69:d4:ea:1f:b8:ee:3d:0b:c6:00:21:c3:
                    a0:4c:67:38:2d:28:9f:1c:58:98:c3:b3:91:fd:1e:
                    6a:d1:58:11:43:19:f7:fd:73:ac:a4:d0:88:a8:ca:
                    57:1e:41:7a:7b:13:d2:5a:2b:d9:4c:38:18:50:78:
                    b2:03:f1:80:24:cc:81:5f:04:4c:fe:40:5a:84:30:
                    d5:97:ef:e1:0a:5c:4b:ad:a9:ba:a9:61:eb:99:7b:
                    25:63:a7:91:ac:2c:81:4d:30:5a:9b:6c:49:22:8f:
                    16:e9:c4:56:54:cf:9b:5a:d0:9f:cc:66:de:69:f5:
                    09:1c:02:03:34:a7:de:3a:57:40:d0:3d:ea:b6:0e:
                    2b:9f:9f:7b:97:66:22:8e:5b:6f:1d:ad:eb:3b:2b:
                    61:f0:c8:86:52:24:22:84:54:62:5d:81:8d:43:9a:
                    57:b1:81:78:19:b8:5e:60:c8:37:52:00:ae:c3:55:
                    5d:fa:48:94:c3:9e:4d:1e:42:85:4e:53:32:eb:a6:
                    ee:53:61:4c:71:3d:2f:21:4f:42:69:4c:87:50:e7:
                    d8:ba:a9:db:9d:a2:e6:da:03:c6:ac:05:c0:60:bc:
                    0d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:46:0B:67:2C:C9:E1:76:3A:92:DE:C8:01:DE:82:9A:19:1A:42:6D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3618cb13-9b8a-49ea-a6bb-3d72bbfafcaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:dd:a8:81:3d:95:d3:b7:5a:88:1a:5f:34:0f:e8:e7:1e:8c:
         de:be:f3:3c:69:3f:6e:24:28:d2:68:f5:aa:22:a0:cb:53:5a:
         53:3d:e4:b5:85:59:3e:06:78:ac:87:45:56:a7:e4:b5:70:2a:
         99:73:40:5f:c8:fd:3f:48:ae:10:a9:af:7e:ad:b6:b3:5a:52:
         5a:8a:5f:ad:65:a6:3c:e2:6e:a7:d8:18:72:e8:95:cc:ff:50:
         e9:31:35:0a:df:66:8e:3d:07:a5:89:f9:df:24:5a:ea:69:4d:
         21:98:ba:89:52:19:89:42:84:17:ec:41:6a:07:f4:ee:4c:ea:
         cf:e8:1a:0a:ea:d1:a4:9b:f6:bf:f7:ba:08:06:04:32:68:d9:
         06:3a:ef:cf:32:25:37:7a:7e:d7:d3:d1:84:42:78:99:ee:1b:
         21:c5:03:67:e8:db:73:d9:65:b3:8d:f7:fa:24:e6:a9:06:92:
         d3:0e:ef:4d:63:ea:8c:53:5f:21:a2:40:e3:4e:82:08:0f:9c:
         73:a2:f0:01:78:dd:59:41:c5:b9:c7:4f:29:16:45:e2:53:32:
         21:e3:60:7a:e8:4a:7b:4b:2e:90:8c:9d:d2:54:98:a4:32:df:
         7e:7c:6a:13:dc:65:d7:28:01:6b:d4:84:12:81:23:04:35:fc:
         a7:50:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----