Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44aedc32-e2d2-4de1-bb59-51566747ef92.roa
File:                     44aedc32-e2d2-4de1-bb59-51566747ef92.roa (raw, json)
Hash identifier:          sNoUQjfLG+oOZrB/CHpCgayu9NFkyj8erX3vodrzfvM=
Subject key identifier:   B0:BC:38:4C:3B:0F:DC:0C:C7:2D:12:6E:24:1C:3B:BC:E4:BE:C7:01
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2EB5231C0EB755B040F01B1A3F47CF467DD21314
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44aedc32-e2d2-4de1-bb59-51566747ef92.roa
Signing time:             Mon 21 Aug 2023 00:00:00 +0000
ROA not before:           Mon 21 Aug 2023 00:00:00 +0000
ROA not after:            Mon 25 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b5:23:1c:0e:b7:55:b0:40:f0:1b:1a:3f:47:cf:46:7d:d2:13:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 21 00:00:00 2023 GMT
            Not After : Sep 25 23:59:59 2023 GMT
        Subject: serialNumber=b7cc258628c84142454a10d30b8d2d2cb12cedff3b007af1d0eca3224e6f5ba7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:2c:0e:b7:92:9e:5f:b6:14:1a:fa:34:72:
                    16:6e:af:0f:f0:66:94:08:c8:40:23:85:72:17:23:
                    29:14:52:f2:a9:64:97:78:c2:94:b1:d0:e4:c8:0d:
                    b1:01:62:c0:51:12:06:5c:c2:19:84:77:fc:f3:68:
                    44:bf:c4:bd:40:d4:95:10:fb:35:08:df:b4:04:e6:
                    c0:12:98:00:b2:b3:af:c3:f2:87:b6:9e:75:aa:f5:
                    70:03:55:69:3d:de:bf:05:23:db:14:82:1d:fe:90:
                    56:34:85:07:95:ee:81:50:b1:8d:e2:f0:2d:cc:50:
                    1e:35:9e:96:91:03:29:26:4c:03:43:9e:62:a6:3c:
                    97:22:a8:07:f8:86:13:87:5b:8c:61:7c:89:61:91:
                    70:bf:25:a1:25:95:f2:2e:45:2c:1d:a3:c9:39:6e:
                    e6:98:cd:71:12:5e:55:cc:18:9f:5d:83:71:8c:6a:
                    50:6a:65:ab:94:70:21:d0:04:00:92:5a:aa:39:bc:
                    5e:e8:50:a7:7c:c7:71:ba:c5:9a:3e:af:7d:68:57:
                    3e:eb:ce:93:e0:2b:25:94:a6:5d:64:f2:96:f7:85:
                    47:1d:e9:7b:bf:1e:9f:76:41:d8:8b:27:3b:1a:f0:
                    73:e4:c6:c7:2c:cf:60:c4:cc:34:55:30:7d:61:bb:
                    36:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BC:38:4C:3B:0F:DC:0C:C7:2D:12:6E:24:1C:3B:BC:E4:BE:C7:01
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44aedc32-e2d2-4de1-bb59-51566747ef92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:1d:e6:ca:8f:55:f2:c2:02:9b:0c:99:99:9e:09:86:76:
         93:64:df:a5:d9:79:77:67:64:24:a0:4a:ca:68:5f:c6:46:bf:
         70:71:bf:d6:c3:9a:cc:91:9d:9e:ae:8d:8e:bd:4f:77:14:50:
         18:33:be:bc:e6:ab:26:8e:fd:bd:23:be:f8:b0:13:38:86:ee:
         f6:fd:b3:19:6e:54:87:e3:cc:3d:ba:24:80:c2:43:ae:4c:ef:
         c7:23:3f:f2:42:ef:7b:ab:ca:55:45:20:58:77:1a:eb:f4:9d:
         da:04:88:b6:b3:b4:f1:02:d2:f9:94:8a:fe:1f:99:b9:f6:f2:
         fd:3a:d9:ee:a7:c7:c6:61:18:14:74:83:c5:84:42:8d:29:c4:
         c9:4d:00:02:b8:2d:1c:4f:2c:2d:9f:49:4f:1d:21:56:2f:93:
         5f:7d:7f:41:d8:92:0a:4d:43:c5:b1:fc:bb:1a:04:47:e9:fa:
         09:da:1e:6d:2f:96:72:fd:53:ce:bc:5c:26:ed:7d:e8:df:51:
         92:d4:f2:2b:cc:90:8e:4d:53:b3:5a:46:ba:b4:49:5d:c1:1b:
         dc:cd:f0:d4:ae:37:57:79:9e:18:fe:43:56:4b:2f:83:11:4f:
         7d:b3:1b:f6:98:d8:ed:29:dd:83:88:39:cf:ea:cb:72:20:cb:
         4a:05:41:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----