Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/54eb4cbc-3ef5-4030-8d04-3a176d3b99c3.roa
File:                     54eb4cbc-3ef5-4030-8d04-3a176d3b99c3.roa (raw, json)
Hash identifier:          xsuyNSkodVilr68lYS95nMc/3YXzf0I/Kf2gYF0x4ks=
Subject key identifier:   08:3B:4A:9C:2A:3B:78:B1:0D:56:05:80:07:68:C0:FC:3F:74:01:4E
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       78C3B0F1F5426983E487442D6476590F28576B6D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/54eb4cbc-3ef5-4030-8d04-3a176d3b99c3.roa
Signing time:             Mon 07 Aug 2023 00:00:00 +0000
ROA not before:           Mon 07 Aug 2023 00:00:00 +0000
ROA not after:            Mon 11 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c3:b0:f1:f5:42:69:83:e4:87:44:2d:64:76:59:0f:28:57:6b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug  7 00:00:00 2023 GMT
            Not After : Sep 11 23:59:59 2023 GMT
        Subject: serialNumber=c5d88def1d685ed49d41e663c5b94947e83ef32bf0cba758a6888af62e16d2a0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:ab:ff:6c:2f:a3:d8:d4:fc:45:09:b1:4a:
                    56:18:b7:83:56:b3:25:af:8e:61:3f:ca:5f:79:b7:
                    b4:6c:a5:3c:2f:69:dd:09:5f:cd:02:c2:bc:fd:d1:
                    0c:23:10:22:ec:f6:db:74:70:50:cc:e1:0c:77:71:
                    51:10:71:6c:ba:99:43:39:7a:3c:ca:bd:9a:17:3e:
                    f8:aa:95:f4:57:24:26:f8:96:78:86:e6:2e:a1:e4:
                    67:38:7e:b1:03:38:71:32:35:c5:ef:e8:f3:1d:47:
                    fb:f5:ec:73:4b:95:74:c4:61:b8:50:46:ac:41:b3:
                    ae:f0:5b:5e:f2:b5:4c:97:3d:61:51:10:17:ad:c4:
                    db:cb:4d:e5:e4:19:c6:b3:e4:bb:03:99:e8:45:a4:
                    46:a2:ff:98:cc:62:8a:cd:a4:8c:04:63:ff:9c:27:
                    74:a9:18:5c:30:37:5f:0b:1d:8a:ee:32:c4:c2:bf:
                    0e:b4:81:32:fd:34:81:22:bd:02:ff:26:ab:6e:df:
                    8c:62:93:57:5f:f8:cf:a9:f8:a4:01:1a:d9:85:1a:
                    ce:23:22:b6:f0:aa:65:51:7c:39:2c:d9:99:d7:80:
                    f1:0f:98:ec:24:81:d9:3a:61:12:53:ef:88:51:c3:
                    15:d4:e7:3b:80:cb:bc:d6:94:71:86:b9:50:fb:be:
                    21:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3B:4A:9C:2A:3B:78:B1:0D:56:05:80:07:68:C0:FC:3F:74:01:4E
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/54eb4cbc-3ef5-4030-8d04-3a176d3b99c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:a5:88:8e:03:37:1f:e8:f8:5c:3f:17:5c:cf:bb:f3:97:53:
         56:8f:8a:17:d4:7e:51:bf:20:9b:be:df:fd:56:23:29:ab:ee:
         4a:d5:b2:a4:ab:c4:3c:0f:52:11:39:4b:71:5c:36:d7:65:b4:
         9f:4b:55:3e:94:ee:a0:eb:f7:b8:7e:91:53:c6:5d:f3:e8:e9:
         11:9e:f4:93:ad:8a:dc:80:a4:a2:69:e1:48:af:8f:22:97:a9:
         f4:54:f8:d6:db:f2:47:73:c1:c6:69:9c:4b:47:4f:85:49:7b:
         b8:fb:69:46:af:f2:63:96:85:02:2b:b9:23:3c:f9:e9:c1:f1:
         74:5c:1f:9b:26:8f:9d:9e:46:ee:22:00:10:f8:e4:b7:3d:51:
         e0:73:01:5f:d1:90:25:ef:a1:56:8c:45:e6:06:f9:32:65:02:
         6a:fb:67:ac:0e:58:e5:fd:41:16:f5:64:4b:5d:2c:40:03:58:
         f3:75:c4:fe:3d:2e:f8:96:68:8d:6a:6a:a5:b4:52:ee:ed:9d:
         a4:bf:92:17:e1:56:f1:f3:66:ef:69:88:9c:c7:a7:3d:68:e2:
         9f:88:e9:45:5b:ac:ca:d0:d4:84:99:83:67:30:a4:1b:ed:63:
         28:44:6b:31:74:23:f3:4e:d1:ae:92:fc:91:1e:51:02:36:46:
         26:2e:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----