Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3f51b285-1d88-44b8-bba5-80c938689814.roa
File:                     3f51b285-1d88-44b8-bba5-80c938689814.roa (raw, json)
Hash identifier:          USkvz2smjBj+jpTW5NN2noNXaVpHgKF5xD7NI+ak2cw=
Subject key identifier:   49:2C:E4:98:E8:F1:9F:6D:94:62:62:E8:CF:1E:BA:86:92:EA:04:F3
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7E2AD378C64D6E7CC0A4126711AE0434C03099DC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3f51b285-1d88-44b8-bba5-80c938689814.roa
Signing time:             Fri 11 Aug 2023 00:00:00 +0000
ROA not before:           Fri 11 Aug 2023 00:00:00 +0000
ROA not after:            Fri 15 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2a:d3:78:c6:4d:6e:7c:c0:a4:12:67:11:ae:04:34:c0:30:99:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 11 00:00:00 2023 GMT
            Not After : Sep 15 23:59:59 2023 GMT
        Subject: serialNumber=0d099e4563ebb67d202368997a1e889189f25be9e5674ab2b2fdf2974978a679, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:34:3b:09:b8:4e:a4:7e:b8:6b:a1:17:d5:
                    77:8b:59:b8:94:3a:05:cc:da:89:55:7d:6e:0e:6a:
                    62:4f:6d:5a:30:c4:b7:5f:92:b9:0a:fa:9c:24:bf:
                    f1:c6:4d:29:a6:52:34:65:48:9d:fd:6a:73:a6:be:
                    ab:0f:e1:6f:8f:3e:1f:98:9e:68:5c:37:00:51:89:
                    94:0a:15:d8:68:32:b4:b3:e8:eb:7e:70:a9:bf:19:
                    42:db:3c:d7:74:13:1b:66:0d:be:04:91:e4:8d:14:
                    e5:19:b9:cf:27:91:af:21:5a:a3:99:3c:f1:57:41:
                    92:4d:b8:05:0b:7f:27:a0:ce:e5:bd:b6:d4:96:42:
                    90:6f:28:58:43:98:03:04:b9:f3:23:7e:c1:6c:54:
                    f5:df:de:b1:45:97:aa:b9:80:76:ba:26:c6:fd:df:
                    bb:44:41:97:3a:f5:b6:89:fb:6a:d6:db:c9:7e:f3:
                    5f:3e:7e:71:9c:a0:89:04:79:5d:5f:fe:18:50:a6:
                    c4:18:ac:93:14:77:92:e9:04:96:60:84:b6:2f:4e:
                    1e:17:63:74:cb:a1:03:f1:b0:be:04:1f:9d:9f:1b:
                    01:21:99:06:8d:05:fe:4a:87:b8:37:8d:33:be:12:
                    7b:c0:71:93:47:85:25:2a:b2:4c:a7:0b:d4:8a:cb:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2C:E4:98:E8:F1:9F:6D:94:62:62:E8:CF:1E:BA:86:92:EA:04:F3
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3f51b285-1d88-44b8-bba5-80c938689814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:bf:f5:90:a9:e7:2f:af:ec:b9:8d:97:62:1a:25:94:1b:bb:
         66:2e:2b:34:de:63:42:d7:c9:b1:84:a1:7a:46:d1:da:97:34:
         02:01:3a:be:6f:43:b0:a8:b2:c1:f2:a1:e7:d6:be:e5:d9:26:
         ba:f8:78:c1:6b:5d:e5:52:23:cf:4b:e8:b2:99:cc:77:af:c5:
         35:59:cd:d1:a9:50:7a:e8:9e:ea:d6:79:ef:ce:f0:35:a4:43:
         74:10:c6:78:0f:66:ee:38:76:6c:63:41:5c:d2:0a:dc:dd:38:
         27:db:32:60:13:68:96:b6:f3:63:3a:b2:0e:d3:7e:1a:ff:a4:
         4f:ab:7d:15:d9:06:42:b9:b4:3a:01:c5:a2:6e:ae:67:3a:ea:
         c3:2c:00:61:35:69:eb:7c:03:ff:00:fc:ec:04:a3:86:f7:ad:
         4e:73:69:77:de:b7:15:1d:2c:ce:af:ff:7d:4f:a6:63:48:2e:
         f2:c5:0d:7c:1d:74:c0:ac:d8:4b:da:de:ee:0a:62:ed:7a:8f:
         f1:67:f2:be:f0:60:96:d1:75:d7:c9:75:fa:72:cd:31:ed:1e:
         e0:3f:63:66:27:80:9b:b8:73:de:ee:66:68:18:7a:18:e6:73:
         d7:0f:53:a9:53:76:c4:a7:d5:be:28:7a:23:53:ed:f3:b5:cd:
         89:45:89:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----