Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/797f7bdd-2b8c-4980-a7f2-40594c735a7c.roa
File:                     797f7bdd-2b8c-4980-a7f2-40594c735a7c.roa (raw, json)
Hash identifier:          l8o2cq9itw5qwSR/WrOMeav5jNcL8fHa0DjcLDxLqRA=
Subject key identifier:   F8:77:92:4E:44:42:77:70:74:25:1D:CE:C5:B6:D3:46:26:9C:98:98
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0D0DEE084F8E684C98FDFCA62E216C1106E669AD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/797f7bdd-2b8c-4980-a7f2-40594c735a7c.roa
Signing time:             Fri 14 Jul 2023 00:00:00 +0000
ROA not before:           Fri 14 Jul 2023 00:00:00 +0000
ROA not after:            Fri 18 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0d:ee:08:4f:8e:68:4c:98:fd:fc:a6:2e:21:6c:11:06:e6:69:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 14 00:00:00 2023 GMT
            Not After : Aug 18 23:59:59 2023 GMT
        Subject: serialNumber=2cf2cc64db57b5ce1cff65a0bacbb9b793f149db607e0a0c1236d29c4c18ebac, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:02:d1:97:64:d9:ff:be:32:ac:d8:75:28:80:
                    14:6d:d1:9e:2d:b5:e1:f7:02:17:3a:09:b4:9e:3f:
                    66:85:61:f0:a4:ff:5e:c7:d2:69:55:01:5f:d4:40:
                    76:fd:09:bb:79:26:d2:46:b0:6a:a5:d4:1c:6a:c6:
                    54:e2:65:b9:c7:79:93:a4:19:b0:af:52:53:7d:94:
                    e4:0d:69:b1:0a:b0:0d:6e:d5:e4:b3:65:97:91:c9:
                    16:1f:e2:c9:25:d5:75:b6:a7:50:a9:63:10:67:71:
                    4d:58:99:13:f0:cd:e2:fa:7c:32:aa:c4:5c:57:48:
                    b9:a2:2b:00:9c:94:5c:ef:cc:2c:da:6d:a5:31:b4:
                    f4:56:41:b9:74:94:8a:af:39:94:67:81:45:39:1b:
                    78:db:94:e5:bf:eb:44:1b:f6:38:1c:15:80:c9:d9:
                    22:c9:18:8e:ea:9c:e1:e7:92:c7:74:e7:d2:d6:1e:
                    cd:28:20:76:fc:62:99:f6:d2:9f:48:6d:f5:de:2a:
                    d0:40:be:71:8f:12:dc:88:1d:a1:36:a4:be:c0:73:
                    56:ae:9e:31:e3:1f:56:4a:4b:f6:d6:d7:b6:3a:ff:
                    b1:ff:72:3b:9a:f9:a6:fd:e2:8e:cb:34:c8:ff:e0:
                    37:8d:83:68:c5:31:bc:ab:b5:b4:29:ce:fa:c1:96:
                    99:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:77:92:4E:44:42:77:70:74:25:1D:CE:C5:B6:D3:46:26:9C:98:98
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/797f7bdd-2b8c-4980-a7f2-40594c735a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:29:6e:a7:f1:4c:14:1e:55:cf:6a:f0:f3:ed:21:48:89:c0:
         0d:59:d6:3c:2d:ed:51:15:25:70:0b:d5:4d:ef:25:1e:6e:e8:
         af:e4:9b:48:9f:d7:41:75:e2:77:a9:bc:e2:03:e6:34:01:a6:
         92:93:35:2a:7d:2d:46:7a:7a:2f:ea:51:51:4a:dd:68:d2:35:
         b9:64:81:89:31:23:41:74:20:50:8c:ca:5f:7e:cb:72:d5:58:
         19:a4:86:2d:ab:93:e8:47:44:bb:51:6a:3b:91:06:c5:f3:8f:
         f0:ca:30:83:22:68:6b:5d:cb:02:53:6e:59:c4:f3:59:63:cf:
         96:69:ac:53:42:67:58:d2:26:93:b2:02:63:11:7e:8a:d2:7b:
         85:51:30:a3:08:a6:ca:ed:0c:c2:4e:28:71:46:49:6e:c3:ce:
         36:fd:15:f0:b6:62:e6:7c:83:fe:64:95:f4:01:59:bc:8d:7e:
         82:78:5c:bb:15:05:20:a2:fe:25:ea:03:71:15:95:80:3d:16:
         b4:28:59:bc:1b:d0:98:38:57:cb:9a:ef:2b:48:44:27:1b:b7:
         12:88:ed:87:d0:6a:35:c6:fd:48:74:87:a0:b6:14:2b:27:62:
         5d:33:00:76:d3:96:f3:18:ee:ba:b8:3f:4f:45:c8:66:4e:fc:
         db:45:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----