Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4f54f4f8-2f7c-4c8c-893f-757a04b80eb7.roa
File:                     4f54f4f8-2f7c-4c8c-893f-757a04b80eb7.roa (raw, json)
Hash identifier:          wC8XYMmR35BuHYn1zqs0+xMEqb/n1epkyYkYJ+7plsc=
Subject key identifier:   AC:81:DA:06:7B:22:13:CF:FA:A2:6B:82:D0:E0:D8:70:B2:83:DC:8F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       38A7E4C9990C8C55D78325D42E15969D785BB83B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4f54f4f8-2f7c-4c8c-893f-757a04b80eb7.roa
Signing time:             Mon 25 Sep 2023 00:00:00 +0000
ROA not before:           Mon 25 Sep 2023 00:00:00 +0000
ROA not after:            Mon 30 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a7:e4:c9:99:0c:8c:55:d7:83:25:d4:2e:15:96:9d:78:5b:b8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 25 00:00:00 2023 GMT
            Not After : Oct 30 23:59:59 2023 GMT
        Subject: serialNumber=a3e5944843046ec3c9569eb8e85c083f0ccffefd8b63c22f755aaf1cafab560a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:de:68:6f:65:a2:1e:21:77:0a:97:91:ff:
                    57:cb:c5:ee:0e:c2:02:f2:72:3e:01:80:db:e8:6a:
                    ed:45:4b:2d:be:7b:2e:f4:f6:f2:64:83:41:27:a7:
                    4f:49:a6:20:7a:d5:e3:76:b1:ab:38:05:22:82:41:
                    3b:20:7e:04:15:ea:50:18:66:91:c9:8e:ad:56:46:
                    0c:7b:19:d5:62:6a:26:9b:18:74:4b:a5:a8:a3:7f:
                    3d:95:7b:ce:6f:9d:e3:2b:7d:71:76:77:36:b2:9b:
                    a1:64:4d:42:e1:ff:94:e1:b5:6a:3f:48:7b:7c:43:
                    7e:a4:82:95:7c:1d:6e:13:e7:4f:36:ba:e3:bf:92:
                    66:21:d9:30:b3:1a:a4:99:43:8e:a4:f0:89:7a:d1:
                    f5:fc:2c:59:2e:c0:79:51:63:4e:29:30:ff:59:96:
                    93:58:1e:69:6f:3d:7f:4a:28:ec:73:af:81:61:86:
                    36:9b:8c:0e:cc:50:ad:2e:84:96:59:50:e3:a9:4b:
                    a5:33:eb:e3:14:ee:e9:d0:32:0a:2d:3a:a0:0a:ed:
                    57:a3:72:da:a0:be:1c:e7:b2:24:47:af:44:25:07:
                    64:1a:36:dc:f2:95:af:2b:c4:13:8b:ff:a8:ae:70:
                    c7:c8:96:1a:b2:0e:cd:ed:18:4c:fa:d5:73:72:24:
                    23:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:81:DA:06:7B:22:13:CF:FA:A2:6B:82:D0:E0:D8:70:B2:83:DC:8F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4f54f4f8-2f7c-4c8c-893f-757a04b80eb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:23:be:17:e9:d7:8e:a7:fc:d7:64:56:36:25:d5:5f:f4:1e:
         ea:b2:9d:54:f3:ec:4e:e3:1c:59:0b:47:91:c9:64:fa:d2:51:
         75:a0:0a:66:a3:3e:01:a2:9a:02:67:54:d4:42:37:e4:94:08:
         fd:f2:b5:65:97:1e:94:cc:7e:39:70:74:21:e0:df:86:98:06:
         eb:cb:76:58:22:27:7c:23:2b:a1:8f:bc:b9:d5:8a:2f:f4:ff:
         d2:34:d9:93:71:f6:e6:e4:bc:21:a1:1a:21:41:57:f1:b1:fc:
         81:60:20:8b:61:31:03:96:dc:71:b3:a1:f2:ef:58:92:94:5e:
         bc:03:9d:a3:9e:49:d9:0d:00:9f:5b:de:e5:df:b0:80:e0:37:
         cf:5c:5b:7e:60:eb:53:b5:89:89:01:47:ce:fc:25:7c:38:4d:
         40:49:39:12:d9:a6:40:71:30:bb:39:61:b4:fd:a3:48:b7:66:
         c3:28:4e:dd:68:2d:8f:61:3e:22:03:cf:22:80:8b:2e:9d:06:
         b7:fe:0d:7d:06:a8:4e:2f:d7:8b:64:93:a1:e9:97:c9:ae:14:
         93:46:c1:8a:c1:5b:57:37:1b:50:29:93:52:ba:d4:6e:8c:df:
         28:03:f0:34:db:e0:31:83:bf:b6:93:e1:07:7a:a4:f6:9c:8e:
         c5:3d:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----