Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e30e663-8a31-4a46-93fb-f93e4b53c78e.roa
File:                     5e30e663-8a31-4a46-93fb-f93e4b53c78e.roa (raw, json)
Hash identifier:          naZpJ1FHmt5Ko3Kwc++3+MSv6Fyon6CFpLmwUjHz4TI=
Subject key identifier:   F3:49:FF:74:03:E6:E1:07:63:5C:6D:E7:30:52:7D:F0:52:EF:2E:8F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       742E3E3B458F638112F126F89D6BB9B6400CEDAB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e30e663-8a31-4a46-93fb-f93e4b53c78e.roa
Signing time:             Thu 03 Aug 2023 00:00:00 +0000
ROA not before:           Thu 03 Aug 2023 00:00:00 +0000
ROA not after:            Thu 07 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2e:3e:3b:45:8f:63:81:12:f1:26:f8:9d:6b:b9:b6:40:0c:ed:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug  3 00:00:00 2023 GMT
            Not After : Sep  7 23:59:59 2023 GMT
        Subject: serialNumber=f3a6103597161ec49ce24e1bc65303a844cfb851b1441669c259a0a29d9ff75a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:82:45:5f:1a:c0:5e:51:98:2e:3e:ed:6c:
                    50:45:ca:39:02:d3:91:d7:08:8c:46:74:a5:27:cb:
                    a5:35:ca:b6:2b:3e:21:72:71:cf:42:e3:ac:bb:42:
                    0d:c9:0a:f1:33:09:9f:b4:aa:2a:24:62:50:7d:52:
                    19:d1:d3:11:d9:32:35:71:80:e5:d0:3f:60:ff:bf:
                    68:e1:51:02:de:10:1d:c6:09:8f:0f:91:55:8e:22:
                    8c:d1:31:d8:75:ee:ef:f4:34:08:f1:c1:4b:a6:b0:
                    da:f2:24:ef:73:60:e6:50:de:fe:52:58:31:d4:f3:
                    47:2e:29:95:63:e7:a7:8b:07:86:7f:97:c4:60:92:
                    ae:8f:26:3f:16:35:06:39:cc:5c:4b:c9:44:d3:78:
                    66:b0:d5:a0:2f:64:9a:a3:80:77:a1:cb:89:a3:6e:
                    e7:ea:b1:be:f9:55:eb:2e:ff:bc:01:48:b7:ea:26:
                    1d:e0:1f:67:4e:dc:4b:5c:da:01:87:28:d7:b8:30:
                    a7:f1:a6:20:76:33:c4:eb:32:80:88:d6:92:d8:66:
                    78:ec:fb:eb:d6:5e:95:3a:fd:25:d2:94:0b:98:6e:
                    90:cd:0e:71:44:59:a7:7e:33:db:76:e3:66:78:4b:
                    d7:01:7e:18:30:bd:4a:d9:52:56:73:ae:21:1b:16:
                    7c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:49:FF:74:03:E6:E1:07:63:5C:6D:E7:30:52:7D:F0:52:EF:2E:8F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e30e663-8a31-4a46-93fb-f93e4b53c78e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:82:9a:ad:f3:71:1d:06:0c:27:f9:c4:d0:fb:68:9a:ad:28:
         d8:b8:8c:be:b9:35:d9:ac:e9:d5:e8:d3:dc:f8:56:a7:da:93:
         5d:83:a9:ae:4a:18:51:70:22:3f:47:4a:8f:8b:4b:9a:3d:8a:
         86:b9:78:9b:9a:6e:d8:e2:76:cb:8e:44:f7:4b:cb:01:26:ae:
         94:ff:93:e6:19:2b:1e:e9:1b:63:07:8b:5e:35:78:60:ce:97:
         e8:09:44:51:7e:ca:f6:bc:4d:26:a6:f3:eb:47:8a:83:bf:b4:
         c6:9a:e1:b5:81:6e:80:2c:d1:b6:b6:91:3d:ea:35:ad:b1:cb:
         df:f9:58:9e:56:b7:f5:9c:a2:03:cb:cb:35:d4:9c:46:b4:21:
         44:ca:d0:81:2b:3c:61:91:f0:7a:eb:34:b8:d5:88:c3:77:9e:
         6d:75:e9:e5:86:1e:03:24:2c:22:9f:02:8f:fc:bb:0a:ca:87:
         ae:cb:bc:89:97:1f:cb:2f:74:81:e2:29:53:08:f0:04:5c:4d:
         15:9a:a6:de:29:e0:34:f7:ec:95:33:e9:e4:b6:10:4f:68:26:
         db:08:2f:d1:f6:bc:b9:ac:92:99:7c:6b:e8:e1:a9:84:51:46:
         27:86:aa:78:a2:bb:3d:9c:39:a9:78:e8:5a:6f:81:ba:9e:fc:
         ad:58:3e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----