Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5acf8905-c637-45a9-9d8c-f4defbe7a6bf.roa
File:                     5acf8905-c637-45a9-9d8c-f4defbe7a6bf.roa (raw, json)
Hash identifier:          lTiIQCfMVcrE4IYXyy3vf6ahFTlfE1Z7ESNCmCpikrc=
Subject key identifier:   AC:39:E1:DA:E7:D5:2A:11:CC:F2:FC:22:83:AC:B7:B5:B5:C9:AC:25
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2947D5C1EB12806A0352020F06943DC4AD1D853A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5acf8905-c637-45a9-9d8c-f4defbe7a6bf.roa
Signing time:             Mon 17 Jul 2023 00:00:00 +0000
ROA not before:           Mon 17 Jul 2023 00:00:00 +0000
ROA not after:            Mon 21 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:47:d5:c1:eb:12:80:6a:03:52:02:0f:06:94:3d:c4:ad:1d:85:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 17 00:00:00 2023 GMT
            Not After : Aug 21 23:59:59 2023 GMT
        Subject: serialNumber=2329c29107ef82fe4f2bb0838c53ba1ea03c7459a6ffb6b4ce7e9dc9aa58fefd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:25:30:6b:d0:14:c7:c5:f5:3b:39:d5:b6:
                    5c:6c:9e:62:ed:52:f5:0d:80:bc:d0:83:3d:29:1c:
                    42:85:6f:8a:92:c9:88:32:00:2e:20:95:fa:d4:18:
                    fb:46:a3:9b:7a:7a:0b:42:50:a0:b1:2a:f0:84:14:
                    3a:58:4d:96:e4:f1:78:2f:f3:aa:3c:98:c5:c3:66:
                    32:4d:f9:0b:7c:36:c5:2d:ea:90:8a:5a:10:1c:9f:
                    37:69:a3:19:ff:14:85:73:ca:b8:80:71:8a:24:79:
                    38:3b:b0:01:a5:a0:3a:09:23:43:35:df:83:6c:fa:
                    48:a3:3a:6e:dc:6c:01:62:f6:ac:04:17:6a:1d:c5:
                    e9:cd:1c:9d:72:b0:2b:2e:71:25:00:6f:04:37:3e:
                    66:3c:14:43:e1:40:68:37:f9:74:62:0a:f6:c9:61:
                    44:f2:14:a3:a5:3b:df:37:70:f3:06:24:c7:2a:f5:
                    1e:74:58:0f:05:98:40:03:c9:38:eb:9e:37:7a:e5:
                    cc:b7:d5:73:58:6f:fd:35:05:41:9d:fc:fe:a6:6d:
                    69:d6:cd:76:57:34:ae:cf:e0:1f:32:7a:4c:fa:54:
                    56:28:3f:a3:66:6f:9c:b2:16:9e:12:c3:b8:07:31:
                    76:da:06:37:bb:49:66:63:14:d6:86:6a:18:d3:68:
                    72:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:39:E1:DA:E7:D5:2A:11:CC:F2:FC:22:83:AC:B7:B5:B5:C9:AC:25
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5acf8905-c637-45a9-9d8c-f4defbe7a6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:39:8d:94:32:b8:6e:d7:fa:d0:7e:9c:df:02:c7:11:61:31:
         d1:91:c1:70:4a:4f:a3:57:c2:92:2f:03:dd:2b:47:08:99:b2:
         b9:44:2b:d9:71:0d:52:31:55:e0:04:57:01:70:de:bd:39:88:
         4a:9c:6c:78:53:ac:18:4e:24:59:7a:fc:52:35:6d:08:5b:09:
         8c:82:07:a1:5a:4f:5c:e8:a7:a2:f3:70:38:6b:58:c6:0f:12:
         30:3c:76:a0:a0:14:2f:b2:f5:a2:40:4e:6e:0d:32:a3:74:9a:
         74:be:be:33:fc:93:82:dc:f0:1b:21:99:cc:d3:85:b1:55:bc:
         6e:9f:98:88:04:85:10:16:7d:5f:b0:0c:38:8b:f1:cb:cf:27:
         b1:66:4c:fd:5f:57:07:a1:8b:cb:86:af:e3:cd:05:9b:14:a7:
         af:0b:be:65:09:fd:21:2a:d5:d3:09:b7:1d:41:04:ec:17:ca:
         70:64:01:2d:93:5c:fb:10:cf:23:4b:8c:ba:a1:10:bf:14:73:
         a0:18:48:59:fc:68:7b:39:24:06:5e:84:43:11:87:eb:8a:f0:
         65:7a:70:91:81:1c:b8:d3:ce:0e:e9:38:66:2e:f2:4a:09:8e:
         41:83:c5:1f:3a:cf:fd:d5:89:85:34:e1:07:4b:ee:e9:1e:ae:
         ec:a4:95:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----