Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/71cee69b-7c14-43c3-8671-a15d7ce0108f.roa
File:                     71cee69b-7c14-43c3-8671-a15d7ce0108f.roa (raw, json)
Hash identifier:          zOecA7l5Icm1Rfeh/0hGDbznRsQSxjdDNfu6LZuVMbE=
Subject key identifier:   6F:99:5F:22:CC:70:9F:2D:CA:BA:D9:85:0F:A7:7C:77:CE:A1:9C:4C
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       11B89744ACC085356B03644AF4D104579B244318
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/71cee69b-7c14-43c3-8671-a15d7ce0108f.roa
Signing time:             Fri 30 Jun 2023 00:00:00 +0000
ROA not before:           Fri 30 Jun 2023 00:00:00 +0000
ROA not after:            Fri 04 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b8:97:44:ac:c0:85:35:6b:03:64:4a:f4:d1:04:57:9b:24:43:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 30 00:00:00 2023 GMT
            Not After : Aug  4 23:59:59 2023 GMT
        Subject: serialNumber=af96d79f162a7c35d78068fe8755dc9321fc940fa458207d1f578fa4aaef70d8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:8c:2e:c1:23:01:0c:23:a3:e0:20:15:4c:
                    95:5a:3c:53:a8:64:87:5e:5f:f0:d8:f7:7c:81:e2:
                    7f:0b:33:65:b0:e0:2e:ab:08:5c:3a:a0:31:25:6b:
                    63:1e:36:71:d7:5b:15:82:30:91:31:11:c5:ac:fe:
                    f7:f4:be:5c:f5:98:0c:3c:11:a6:30:39:1a:b3:84:
                    26:e2:02:12:32:81:34:39:9e:08:56:17:8d:de:b9:
                    2f:8e:11:32:3e:34:21:81:a3:69:86:ab:da:08:3a:
                    b5:41:0f:9c:8f:b8:d2:ae:52:56:ab:3a:0e:c0:ee:
                    94:06:b7:0b:73:09:22:9e:22:10:88:98:53:11:04:
                    49:e8:b7:7b:96:82:88:f2:1c:1e:1f:60:1f:6f:58:
                    f4:7c:1e:78:b2:6f:3c:de:64:c3:6a:e5:c5:67:c4:
                    f5:26:32:be:40:2c:62:0e:16:7f:dd:b8:40:28:c0:
                    8a:cf:d0:6b:c0:d7:9c:76:a1:3b:49:2b:f6:d8:f4:
                    46:6e:75:47:79:94:d5:60:d9:b9:2a:2c:31:83:4e:
                    eb:0b:22:a1:53:5e:fb:4f:31:6a:75:0c:98:91:3c:
                    37:b0:12:ee:88:16:15:96:87:04:7b:19:26:b9:a3:
                    4a:95:2a:0c:8b:ff:e3:19:bf:d6:0c:42:ed:af:5d:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:99:5F:22:CC:70:9F:2D:CA:BA:D9:85:0F:A7:7C:77:CE:A1:9C:4C
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/71cee69b-7c14-43c3-8671-a15d7ce0108f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:bf:b7:1f:3b:a5:3e:68:77:03:13:e5:75:0e:e1:4f:35:af:
         87:c8:03:ae:f9:08:a2:06:8c:2a:a6:28:96:63:ff:6c:d6:fa:
         0c:e8:ff:ed:f8:ae:9e:13:17:a1:1c:97:50:63:52:14:8e:4e:
         b4:f9:bb:65:a1:71:c0:b5:cc:1e:d0:d6:31:c9:12:90:e3:9e:
         80:fe:70:77:27:ec:c2:35:d7:14:fb:85:f7:1e:8a:e4:72:43:
         48:0a:ff:3d:d1:83:85:ad:40:ae:41:64:aa:05:88:de:91:5a:
         9c:dd:d6:9d:94:6a:4c:f9:39:1b:ff:c2:1f:5d:56:1f:7f:76:
         58:fb:ae:6f:2b:0f:85:25:41:1a:25:77:9c:46:e1:84:93:df:
         9c:10:77:a7:7f:eb:c3:6b:17:a0:22:f5:4b:59:10:8b:dd:d6:
         83:b7:82:f2:62:62:0b:f0:48:20:f5:4e:57:89:b1:59:3a:aa:
         1d:ea:66:81:27:2c:d7:f9:81:7b:26:76:e3:77:02:56:bb:f4:
         90:51:3c:fa:88:43:7b:20:3d:7b:70:92:70:cc:07:ab:53:8f:
         87:ac:22:4c:28:83:59:7a:c8:36:76:1b:df:55:d4:c3:9f:00:
         99:7c:1a:c6:c3:cb:35:80:d3:51:78:53:46:60:d4:db:b4:3b:
         9b:65:ce:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----