Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d65eae4-e6aa-430e-957f-52ac75313cd4.roa
File:                     6d65eae4-e6aa-430e-957f-52ac75313cd4.roa (raw, json)
Hash identifier:          kBbt52ylJ+duMVXf3G8oSBishh76hDH8lc486Zd+VmY=
Subject key identifier:   C6:DF:9B:C5:BF:2E:C2:F1:E1:A1:92:5C:52:F1:36:11:E2:BC:AA:30
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1C818FF01F6EE6C8CE3711AAE7B7D4F21509BFD8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d65eae4-e6aa-430e-957f-52ac75313cd4.roa
Signing time:             Thu 24 Aug 2023 00:00:00 +0000
ROA not before:           Thu 24 Aug 2023 00:00:00 +0000
ROA not after:            Thu 28 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:81:8f:f0:1f:6e:e6:c8:ce:37:11:aa:e7:b7:d4:f2:15:09:bf:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 24 00:00:00 2023 GMT
            Not After : Sep 28 23:59:59 2023 GMT
        Subject: serialNumber=447e37fefc1823d1e1603c45ae075db72f9ad1bd3ea265440feb6462e416be6a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:83:98:94:31:bd:14:14:e7:0e:78:79:9f:
                    d9:d9:31:0c:87:04:7a:dc:6e:0e:09:d8:ca:ad:a6:
                    10:dc:1d:12:15:bb:1e:ff:a8:11:41:1b:cd:4b:bf:
                    2e:91:f4:98:51:23:8e:5e:6e:97:43:27:7f:8e:34:
                    9a:61:ad:14:e4:54:07:a1:c1:71:ce:23:ef:3b:bf:
                    69:89:b7:75:be:e1:84:f6:fa:f8:72:ec:ce:d1:ec:
                    3b:8a:2d:a5:7f:5b:84:cc:c9:88:7c:fd:4b:36:7b:
                    3a:9d:82:02:98:f3:25:24:8d:aa:92:4f:1c:ec:48:
                    68:17:28:e9:3e:93:44:40:07:48:58:f5:f6:c3:68:
                    b1:a8:80:e2:50:c7:3c:11:2a:a2:55:e9:54:a6:82:
                    76:06:7e:78:98:7f:0a:24:a6:c5:42:93:0c:10:fd:
                    a8:89:89:89:6b:4c:02:18:3d:2b:05:98:96:57:66:
                    ec:84:cd:1e:49:8d:a0:a9:00:5f:29:50:25:e5:1f:
                    1a:a3:2a:30:ed:12:c2:9b:d4:36:7b:2c:25:dd:23:
                    da:07:5f:00:8e:b4:65:b0:ba:19:67:bb:62:3f:fb:
                    1a:62:ce:83:d1:ba:20:8f:87:fa:23:f7:7a:90:11:
                    ab:7d:70:a8:91:16:e5:08:d3:8e:c7:ed:77:62:d3:
                    72:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DF:9B:C5:BF:2E:C2:F1:E1:A1:92:5C:52:F1:36:11:E2:BC:AA:30
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d65eae4-e6aa-430e-957f-52ac75313cd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:34:f2:c3:d6:bd:87:54:7f:3c:87:42:79:28:be:bb:17:aa:
         d6:4c:d8:3e:ed:6b:bf:e2:0f:28:6e:c2:ae:1d:dd:0b:f0:23:
         21:c3:2f:ac:d2:1e:88:7b:e7:f2:71:c9:00:c7:79:f5:fd:b2:
         15:d2:30:cf:91:ff:77:5e:0c:13:ac:43:cd:19:5d:84:81:f6:
         60:f9:27:65:45:c6:9c:df:33:01:8a:1e:6c:bb:b6:04:79:5c:
         7b:7a:88:3e:94:94:b2:80:86:98:bd:9f:6d:ed:4f:a1:88:7f:
         f6:c7:32:8b:cb:f6:49:b2:f5:bf:38:46:71:00:ca:2c:2a:07:
         3b:5f:cc:ce:f2:fa:0c:a9:a6:7f:39:da:c7:f5:12:ac:7d:70:
         cf:f3:f0:21:9f:4e:86:57:2a:4c:8f:67:f6:5a:ea:56:e0:ac:
         4c:bc:25:2d:66:67:1f:91:e0:72:18:66:69:9e:28:b0:08:eb:
         d7:a4:78:8d:64:09:d1:e7:d1:d3:19:e8:49:60:ee:2e:0d:a5:
         13:ad:4d:f2:4f:ec:cf:16:c1:10:7f:f5:23:f0:76:08:1a:4b:
         6e:c0:2a:e8:01:8b:f7:ae:26:e4:b4:20:38:f5:19:49:a7:1f:
         d7:83:ed:ea:d5:88:78:5c:ae:f2:c3:0b:c3:2b:af:29:c4:50:
         a2:ec:88:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----