Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5b49fb79-314f-4f50-b9cb-0f0f7760172b.roa
File:                     5b49fb79-314f-4f50-b9cb-0f0f7760172b.roa (raw, json)
Hash identifier:          cyDpye75IIHZy07eRRlVRBFZEzkZs1g7FqIE4W6K20w=
Subject key identifier:   A1:E6:B0:19:1D:A0:14:FA:84:A7:A4:7B:D2:D8:CC:34:9E:52:6E:67
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       38749821E10C9FC87A92331676992D301BC70A4A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5b49fb79-314f-4f50-b9cb-0f0f7760172b.roa
Signing time:             Sun 20 Aug 2023 00:00:00 +0000
ROA not before:           Sun 20 Aug 2023 00:00:00 +0000
ROA not after:            Sun 24 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:74:98:21:e1:0c:9f:c8:7a:92:33:16:76:99:2d:30:1b:c7:0a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 20 00:00:00 2023 GMT
            Not After : Sep 24 23:59:59 2023 GMT
        Subject: serialNumber=4ddbd9b7425066326cbb9869eec66e86f44bfd5f12fa6b26b8ff9d955a5c8faf, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:91:99:5d:f0:60:75:19:38:d0:ee:d3:98:78:
                    00:d3:63:5d:d1:39:54:a4:d3:e7:26:c2:6a:94:4a:
                    85:f7:b2:12:62:8e:e5:89:84:35:b8:4a:a6:5c:98:
                    d8:b8:0b:e3:2a:8a:4a:7a:c9:31:6e:b7:4f:9e:66:
                    2f:40:a6:07:6c:5d:7c:06:f4:ce:d4:d1:f9:9a:f3:
                    7e:cb:2a:7f:15:23:98:a8:05:9f:4e:79:87:03:29:
                    6d:6e:a3:c5:9d:91:9a:f4:75:70:7a:da:f1:0c:0a:
                    9f:2f:23:51:ed:5b:7b:dc:da:bc:32:af:22:32:70:
                    fa:75:ce:de:31:1a:93:d8:bc:6d:c9:54:e5:08:8d:
                    be:b6:74:62:51:83:8d:c7:eb:4b:01:89:b5:55:8b:
                    09:cf:f8:15:ea:24:74:2d:7c:7a:8f:cd:45:87:63:
                    50:f8:b7:03:3f:5f:f6:92:8b:29:8f:94:84:34:ae:
                    68:9c:37:8a:5a:81:e6:c6:be:2a:2f:39:26:a1:a7:
                    b3:9e:a7:dd:fa:b2:80:d7:04:82:56:a8:79:84:3b:
                    98:01:be:05:ee:5a:45:02:ab:e9:56:c0:ff:79:2a:
                    29:b8:97:bf:36:ea:87:7d:76:ec:bf:66:41:e4:76:
                    f9:d9:c7:81:ca:d0:6b:65:42:b7:b2:52:bd:23:05:
                    f1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E6:B0:19:1D:A0:14:FA:84:A7:A4:7B:D2:D8:CC:34:9E:52:6E:67
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5b49fb79-314f-4f50-b9cb-0f0f7760172b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:90:d4:0c:98:74:89:e1:ec:6e:86:1e:2a:0b:c7:ee:5f:bd:
         0e:84:f9:89:89:52:40:2f:a8:1b:e3:38:0d:76:44:52:e2:4a:
         fa:ec:0a:b8:2e:80:0f:52:bf:68:27:89:0b:31:e9:25:2c:26:
         4b:01:71:4a:fe:60:3e:c4:7e:6f:6a:bf:39:69:47:7f:69:f2:
         60:bc:6b:4c:05:d0:6e:62:45:6b:24:ce:88:2f:cd:b1:41:e1:
         cb:af:43:c4:4b:02:3e:1d:6e:3f:69:32:49:dc:a0:46:dc:04:
         4a:a9:00:be:0d:47:26:98:c8:a2:d1:28:0c:1d:e2:d4:1e:1d:
         f8:65:21:84:ad:50:d4:eb:73:64:67:c8:e4:9c:85:5c:93:53:
         06:ad:86:9e:73:3c:6f:ef:1e:67:70:c9:2f:c4:7c:6d:20:2f:
         73:43:2c:7c:ee:76:40:62:b2:c8:f0:1c:37:bc:47:03:0c:31:
         68:17:89:a1:e4:90:6a:70:2a:e7:49:85:e0:c7:d5:df:14:a5:
         ff:ed:ca:f4:cd:d3:44:91:0b:b0:75:21:f2:51:47:6b:97:77:
         60:10:57:55:19:7e:1b:15:72:9f:62:e0:34:70:e7:96:31:d0:
         d0:63:01:9a:d2:d1:7e:54:b6:65:32:7a:1d:82:13:c2:49:aa:
         3b:58:c5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----