Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4eab08b2-d0f4-42a7-bed8-dba25afe884a.roa
File:                     4eab08b2-d0f4-42a7-bed8-dba25afe884a.roa (raw, json)
Hash identifier:          3Qw7+V1FLomLkhUHe51DizpfW4MjOuHjnPIsJcmLTuI=
Subject key identifier:   68:AC:8A:BE:DD:7F:50:06:4B:C8:1C:D3:92:5A:9C:0B:47:55:E6:3F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4856149FF4A129D0CE095BD330964EC473BE4FA3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4eab08b2-d0f4-42a7-bed8-dba25afe884a.roa
Signing time:             Thu 13 Jul 2023 00:00:00 +0000
ROA not before:           Thu 13 Jul 2023 00:00:00 +0000
ROA not after:            Thu 17 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:56:14:9f:f4:a1:29:d0:ce:09:5b:d3:30:96:4e:c4:73:be:4f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 13 00:00:00 2023 GMT
            Not After : Aug 17 23:59:59 2023 GMT
        Subject: serialNumber=3962e740d9f2fb126983fef5919ca6c48aad573560dd4b7f10878e7d22a5330b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:37:76:1b:46:12:f1:a1:d0:03:74:c3:d9:
                    18:19:68:b0:af:3b:49:cf:c0:59:7d:38:b3:32:dd:
                    d7:2e:6c:1d:0f:65:ab:89:c4:8f:5d:be:6f:9b:a4:
                    ed:8b:cd:28:c3:75:b7:4b:ae:36:48:6e:32:ba:04:
                    33:02:ef:c0:27:3b:0c:96:81:f8:8e:c6:c0:52:11:
                    a4:e0:9a:44:54:56:ea:0a:76:f8:e4:0f:53:e2:c8:
                    20:ef:a8:73:52:61:93:5f:3c:fd:ea:c0:56:67:fa:
                    d4:44:e4:76:fd:3d:5c:db:73:bc:b7:d8:cf:ab:4f:
                    b9:fe:ff:c7:38:28:0d:7f:94:24:fe:81:aa:7f:af:
                    00:71:95:23:07:b2:95:90:93:a4:9b:34:79:4c:33:
                    a9:99:70:e5:bd:ef:52:40:a8:07:ec:95:b8:80:24:
                    5c:cb:22:a8:03:99:07:e1:26:4c:84:a5:9c:bf:d6:
                    6a:d5:e7:9f:2a:0f:12:e1:a0:4a:76:98:fc:ae:bc:
                    64:1d:d4:d1:18:f4:47:fe:b7:04:62:0f:7a:ae:9f:
                    d5:9b:42:f4:c1:2c:35:62:99:bb:35:ab:7f:e0:f2:
                    70:79:47:ff:2b:00:83:28:5f:6d:76:61:5c:ad:e1:
                    bf:42:c2:fe:86:f7:ad:bc:5d:dc:f7:19:b1:38:f4:
                    6e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AC:8A:BE:DD:7F:50:06:4B:C8:1C:D3:92:5A:9C:0B:47:55:E6:3F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4eab08b2-d0f4-42a7-bed8-dba25afe884a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:81:c1:b1:29:89:4c:28:43:5d:17:5a:e6:91:09:99:6a:19:
         e5:cb:f3:11:a1:9d:e2:8c:c3:e4:94:7b:23:52:83:89:16:53:
         6e:bb:bc:da:17:0f:fa:4b:be:69:e9:31:af:8b:ad:a2:ae:62:
         5f:ae:c1:62:16:d7:09:8e:68:1c:2f:b3:07:c8:91:d1:b6:23:
         e3:2a:fa:cd:e3:81:a1:2c:46:c3:5b:c2:4e:6a:22:42:41:99:
         3b:c1:a1:d7:9b:8c:ca:2a:95:7d:c6:e6:0d:23:a4:15:31:27:
         6a:9c:e5:47:a6:0e:17:29:72:2b:5d:6f:d1:0e:f0:ac:15:ed:
         fa:0f:b3:e0:a1:d0:7d:95:be:ed:5b:88:9a:31:e1:a6:70:f2:
         03:1e:d5:f9:80:90:3a:02:03:32:a5:40:fd:7a:f0:33:56:e1:
         9d:aa:b6:7b:c0:35:3c:6c:29:5c:ec:96:4c:12:d1:96:6b:1d:
         4b:d6:97:f8:67:37:d9:1d:dd:0b:b1:2b:17:f0:8a:95:bb:f8:
         9b:3c:1f:05:0d:66:e6:ee:ba:66:8b:30:61:6c:68:1f:ef:a7:
         17:95:ef:95:4e:d4:de:75:a1:e9:3e:ad:ae:33:86:10:44:ab:
         06:38:14:a8:89:a7:95:e7:a2:ee:cc:1b:73:95:ff:ed:37:bc:
         7b:14:93:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----