Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6eda9a2d-d3b2-43b0-a2b9-74c44d1e5c23.roa
File:                     6eda9a2d-d3b2-43b0-a2b9-74c44d1e5c23.roa (raw, json)
Hash identifier:          2xpW6doVSFORZXxHZrvklTVHK8BRn8hnvKrT6sLcnIA=
Subject key identifier:   13:A4:5A:16:40:BB:4C:66:44:BD:C7:97:D0:52:31:A8:87:81:48:74
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1E70B9E57CB12960FF81EC57AEA6D24D099DEBE9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6eda9a2d-d3b2-43b0-a2b9-74c44d1e5c23.roa
Signing time:             Sun 18 Jun 2023 00:00:00 +0000
ROA not before:           Sun 18 Jun 2023 00:00:00 +0000
ROA not after:            Sun 23 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:70:b9:e5:7c:b1:29:60:ff:81:ec:57:ae:a6:d2:4d:09:9d:eb:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 18 00:00:00 2023 GMT
            Not After : Jul 23 23:59:59 2023 GMT
        Subject: serialNumber=bcddb3b1e2ed894400809593b8221728d8fc6d09945a556e5dccb625de27e064, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b4:92:30:a7:0f:a2:50:97:4c:2d:ef:3b:75:
                    59:24:c6:d1:93:88:20:cf:87:2b:b4:60:94:d5:7c:
                    d6:a5:14:f5:ff:73:1e:c5:d3:c3:88:b9:ac:ea:1f:
                    05:05:64:48:58:9b:3c:81:0b:87:57:70:fc:6e:77:
                    f1:48:e9:a4:5e:15:85:ae:de:1b:16:d9:c6:b6:5e:
                    87:d4:5b:64:ae:a0:8b:73:72:94:ca:f7:8f:38:f5:
                    7e:e2:3b:bb:60:ec:3e:92:f0:c1:34:4f:a7:2e:97:
                    ba:35:60:cd:6e:b3:aa:bf:b7:e3:d0:2b:5f:f8:8d:
                    57:9a:55:b0:49:ec:87:fb:fb:12:cf:0a:21:61:b1:
                    5e:9e:c0:5c:4f:6a:4a:6a:e0:45:a4:5c:14:0e:30:
                    e5:17:a0:ec:4d:a3:07:ef:3c:9d:a9:2f:0b:22:c9:
                    25:94:5c:56:01:86:8b:eb:a8:cd:37:dc:f2:99:b9:
                    72:ac:82:c1:1c:bd:4d:b7:03:d9:00:67:a2:6a:71:
                    11:f4:7a:32:29:cf:d2:1e:03:18:36:48:fc:1a:59:
                    85:1a:e4:0b:1c:42:1a:ec:a3:f3:b7:98:8a:da:55:
                    a8:b3:ee:d9:32:a9:3f:e5:24:1f:80:f7:e7:43:01:
                    28:1e:f6:58:4c:94:65:bf:fe:66:78:cc:42:ae:9c:
                    53:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A4:5A:16:40:BB:4C:66:44:BD:C7:97:D0:52:31:A8:87:81:48:74
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6eda9a2d-d3b2-43b0-a2b9-74c44d1e5c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:5a:55:a3:02:81:26:04:c7:e2:b9:06:6c:0c:72:3d:d7:6b:
         8c:d6:ee:9a:fe:ca:1b:25:ee:8a:4e:83:a1:e9:d6:cb:39:e8:
         7c:2e:c3:c9:10:3c:a8:fa:34:40:23:ff:b9:22:5d:79:d6:94:
         33:c2:9f:1d:e6:aa:77:e7:c3:f7:75:7f:49:82:91:85:23:9a:
         b7:3f:fe:52:05:5e:d2:1a:32:1f:5c:6c:f2:93:0c:9b:c3:9d:
         73:97:2a:70:13:5f:a8:24:97:39:5e:c6:07:c6:a5:2f:b1:35:
         6b:2d:18:6b:39:ad:00:1c:a7:ca:ec:39:c5:42:83:dd:e4:67:
         24:41:12:53:6b:cc:3b:2c:52:7f:3e:fb:34:96:57:94:32:da:
         3b:8f:42:89:09:5f:82:a5:45:04:62:f4:c1:64:21:97:5a:61:
         6e:38:e5:9a:2e:03:be:dc:94:92:17:35:b6:95:b4:fd:20:d4:
         cd:2b:5b:a5:1c:9a:9e:a1:5e:83:7e:e5:4c:e9:7b:a7:91:48:
         1f:20:93:cc:5e:e8:be:66:80:6c:7b:cc:68:20:af:d5:0c:98:
         ab:2a:5f:54:c3:58:3a:fd:31:01:50:99:d9:d9:a4:f2:ed:3e:
         6d:f9:0e:35:f8:48:46:ce:6b:6b:6b:31:85:47:55:18:81:3d:
         f1:05:66:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----