Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5fac1175-a663-4549-a226-5599ab3a3da6.roa
File:                     5fac1175-a663-4549-a226-5599ab3a3da6.roa (raw, json)
Hash identifier:          YFm8YQA3Nvk2eG4gAXcZuCuLhxI0D8MZ92ENyDtoejE=
Subject key identifier:   CA:C0:FF:26:83:BC:4C:EF:7C:30:93:52:F1:15:E9:DC:48:BF:9D:AD
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6B3FAAFA03A9FF286D3B082F8F3EF0F33AC3C7A5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5fac1175-a663-4549-a226-5599ab3a3da6.roa
Signing time:             Thu 14 Sep 2023 00:00:00 +0000
ROA not before:           Thu 14 Sep 2023 00:00:00 +0000
ROA not after:            Thu 19 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3f:aa:fa:03:a9:ff:28:6d:3b:08:2f:8f:3e:f0:f3:3a:c3:c7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 14 00:00:00 2023 GMT
            Not After : Oct 19 23:59:59 2023 GMT
        Subject: serialNumber=1af98f6797566f2e43096065b63d576d981bdf4cd6f46288043e5687c15b96f1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:f4:fb:b5:63:f8:43:cc:fd:33:29:f5:24:
                    24:65:ba:78:48:a1:a1:fc:dc:1d:00:69:31:3a:9e:
                    b6:7f:94:17:0d:10:25:9f:31:57:0e:1e:d0:2d:38:
                    f7:5b:05:f3:d0:89:9e:d0:e2:11:36:e7:cb:1e:78:
                    95:0b:04:72:db:47:e6:d2:df:a1:42:8f:77:7b:be:
                    83:cb:8f:1e:5d:1a:64:29:3d:7b:d4:2f:e6:92:c5:
                    7d:ed:d8:f7:50:be:1c:d2:4f:ba:d2:57:29:4e:98:
                    d3:9b:80:33:f4:b9:e7:5d:e5:7e:f0:43:2e:24:ad:
                    f1:15:74:bc:86:f4:8f:5c:96:6b:63:83:2c:d3:1d:
                    bb:18:af:07:f0:87:02:fb:ba:40:9c:4a:8d:3d:f7:
                    af:bb:5c:61:35:56:02:7e:4a:a9:7d:16:a6:c3:d3:
                    70:2f:4a:6d:9a:7a:96:2f:13:1d:17:f4:30:27:54:
                    0b:0f:1a:9b:d7:89:6b:f2:10:dc:ff:e3:15:f6:cc:
                    25:27:3e:4b:51:5b:8b:f6:57:06:94:bc:39:2e:68:
                    df:4e:e4:3f:b0:b8:2c:fa:74:8e:f7:89:fc:e9:f6:
                    50:5f:dd:12:33:5e:31:d7:76:71:b1:d5:cb:ac:9d:
                    c0:33:7c:d7:8b:6c:76:80:36:da:8f:b8:8e:49:19:
                    09:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C0:FF:26:83:BC:4C:EF:7C:30:93:52:F1:15:E9:DC:48:BF:9D:AD
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5fac1175-a663-4549-a226-5599ab3a3da6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:60:4e:e4:af:3d:ba:6a:e0:a7:3c:6f:f5:e7:a3:79:d7:22:
         df:8b:c1:98:d2:0e:f0:10:d2:90:31:7f:47:e6:9b:36:41:17:
         46:9a:96:44:0c:e2:b6:28:ca:d4:8e:ae:25:4e:84:c3:16:3b:
         dd:e0:24:c4:9c:9f:0f:00:53:9e:23:5e:eb:8c:59:05:9c:9b:
         0c:bf:a2:72:d6:60:a2:7a:00:4a:54:73:1e:4a:4d:3b:6d:b6:
         13:3e:b7:4e:23:bc:84:14:47:95:f4:40:17:ef:99:7e:e4:3a:
         c6:74:24:ab:c9:cf:43:dc:ad:d3:a2:f8:55:18:d5:3d:66:41:
         a8:21:a1:4c:dc:65:be:81:5f:85:2f:84:f8:b1:77:57:a1:64:
         50:4f:42:71:d8:cd:fc:db:94:a2:1d:7f:aa:3b:10:c4:e0:8c:
         15:55:33:a4:95:52:72:37:d1:6f:e9:36:70:33:6c:ff:d4:4e:
         d3:d3:4b:2d:96:56:d5:de:cb:db:4c:2c:eb:3d:6b:90:d1:1f:
         76:9e:b7:39:d9:08:eb:eb:75:9b:16:4d:61:89:ba:8b:fd:88:
         36:2f:ae:38:16:98:aa:dd:ed:10:e5:f6:0e:3a:eb:39:2b:13:
         a5:59:4b:43:db:68:db:8d:9e:f8:17:50:cf:94:0a:ef:72:69:
         86:89:0e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----