Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7e9b129f-30d8-46ee-b731-2c77443ad8b0.roa
File:                     7e9b129f-30d8-46ee-b731-2c77443ad8b0.roa (raw, json)
Hash identifier:          i3t3+wfD0gzUjqpRLEaV9QIPWwgZnPvkHuK6BF3Z5EI=
Subject key identifier:   5D:E3:D0:36:49:5D:C5:1F:D6:B8:04:3B:B8:77:50:06:17:F6:C0:0D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4DF9F5F7B60F9D4C1EF42C29E1CA54DB0108E820
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7e9b129f-30d8-46ee-b731-2c77443ad8b0.roa
Signing time:             Mon 21 Aug 2023 00:00:00 +0000
ROA not before:           Mon 21 Aug 2023 00:00:00 +0000
ROA not after:            Mon 25 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f9:f5:f7:b6:0f:9d:4c:1e:f4:2c:29:e1:ca:54:db:01:08:e8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 21 00:00:00 2023 GMT
            Not After : Sep 25 23:59:59 2023 GMT
        Subject: serialNumber=71146c22fc19e19c1a3a00301b06a6980efc8a5720cab46bbe8a651fe36977dd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4b:87:c9:5b:c3:d5:54:3b:55:cd:df:6d:95:
                    68:d1:8f:20:bd:2d:d9:f1:3e:e9:26:d5:ab:46:db:
                    a8:fe:b4:37:f1:3c:76:4a:06:16:3d:4d:fb:8b:46:
                    70:e5:d8:54:3c:3f:6d:cf:51:61:e6:42:b3:67:87:
                    2a:13:92:34:e3:f0:d8:9b:8d:e7:e9:da:84:3c:08:
                    0e:14:f4:2b:b6:1f:c4:9a:0c:ef:cd:10:c2:cc:8a:
                    15:da:34:f6:98:fb:d0:79:1b:3b:db:ea:ff:49:e8:
                    e1:1a:1f:0a:88:76:54:13:bd:48:f1:17:a4:38:9e:
                    8f:13:2d:01:b3:fe:26:c9:3d:a4:d3:8f:8d:19:a8:
                    73:f7:f0:25:68:e9:31:08:e5:2e:8c:56:a4:0c:d7:
                    24:5e:6f:b5:f1:f2:3d:d0:54:b9:1a:6c:35:00:dd:
                    c7:77:db:c1:e6:37:44:de:b1:07:9d:61:9d:3f:13:
                    38:36:7f:cc:88:51:01:02:99:2a:8f:37:4e:51:53:
                    cc:de:c2:02:cf:0a:26:30:78:36:59:0a:6b:83:26:
                    76:23:06:d3:ea:74:42:4f:8c:8d:fe:c6:84:bf:13:
                    f9:a9:02:76:32:3e:92:cf:23:2c:16:e7:fe:fe:52:
                    94:4b:6c:53:23:f8:f2:84:1e:22:ef:f4:07:0c:3a:
                    4f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E3:D0:36:49:5D:C5:1F:D6:B8:04:3B:B8:77:50:06:17:F6:C0:0D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7e9b129f-30d8-46ee-b731-2c77443ad8b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:11:74:f7:35:c4:e4:02:62:ef:d7:aa:cb:27:aa:a0:2a:3a:
         bc:68:3d:e5:ff:80:64:b9:d6:cf:85:45:52:dd:99:91:5e:eb:
         69:e2:7b:52:e3:2f:1e:e7:11:bb:e8:77:0a:3c:e4:51:31:db:
         83:74:72:14:80:25:78:63:69:c0:38:30:15:48:f9:24:89:88:
         9c:cf:a3:13:78:3c:a6:62:d9:60:03:3f:c9:76:49:3f:9c:8e:
         72:94:d1:e2:99:53:ea:e5:4c:af:1c:35:72:31:90:0d:31:8c:
         3c:4d:43:c7:74:87:b3:46:da:b6:02:3a:20:9d:ee:a4:89:79:
         06:9f:2e:5b:2e:37:47:e2:a5:f6:5b:37:c6:6b:0e:9c:0d:ec:
         6b:86:1d:3c:8e:c6:ca:29:2a:49:3b:82:e3:69:1c:96:0e:13:
         3f:14:4e:24:a8:bc:0c:1e:41:1b:30:8a:28:ad:b8:55:61:e4:
         99:b5:fe:70:b4:49:ea:61:cd:f1:28:26:ab:2d:c9:51:37:43:
         3e:ed:a9:6a:7f:a5:61:df:ab:6f:7f:60:a1:98:9a:08:32:7b:
         4a:15:e4:e1:67:40:22:74:ac:cd:82:b0:02:fa:fa:8e:65:25:
         c2:96:29:81:94:ae:67:07:ef:ec:b3:ed:04:a4:d6:48:e6:98:
         8a:2f:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----