Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7fd91644-7fc3-4c9c-a75f-fd13c8f6d936.roa
File:                     7fd91644-7fc3-4c9c-a75f-fd13c8f6d936.roa (raw, json)
Hash identifier:          LnQxXVSlFjJO8dH8NvgH6x6WGGUtBnGWelyRLcTVc+E=
Subject key identifier:   8F:4F:7A:4E:77:93:1F:52:43:30:BB:72:D2:DC:FA:4C:B9:AD:56:1F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7336C7FFC98BD6FD4044C42DC57393F4592FD0E0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7fd91644-7fc3-4c9c-a75f-fd13c8f6d936.roa
Signing time:             Thu 20 Jul 2023 00:00:00 +0000
ROA not before:           Thu 20 Jul 2023 00:00:00 +0000
ROA not after:            Thu 24 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:36:c7:ff:c9:8b:d6:fd:40:44:c4:2d:c5:73:93:f4:59:2f:d0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 20 00:00:00 2023 GMT
            Not After : Aug 24 23:59:59 2023 GMT
        Subject: serialNumber=86e85ecba6234b1704accc069122cb3abb283f50e322062b299ed99aaf9917d7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:00:6f:de:43:a1:07:05:b2:f5:6c:6b:b3:1f:
                    fc:92:ca:16:5f:7b:53:04:ac:29:73:c2:52:0d:c4:
                    94:f8:e4:8c:31:f6:32:97:bd:f0:c5:57:1a:f6:39:
                    84:99:6e:b0:f8:8e:52:27:e5:54:92:55:77:59:e1:
                    b8:7d:d4:8c:43:7a:ac:9b:2c:96:f6:33:84:67:80:
                    94:dc:c3:8c:09:aa:89:2d:34:bb:65:5e:e2:c0:4b:
                    cd:dc:74:6b:4a:8d:62:68:3b:03:92:5f:10:7d:20:
                    5e:16:c7:ff:8a:1c:b0:fd:71:d9:c0:6b:4b:b6:64:
                    4f:55:9c:12:ca:34:8a:06:fa:97:14:b9:28:5d:cd:
                    b8:d2:5a:e0:32:87:7e:64:75:95:ef:b3:8f:69:7f:
                    ec:6e:c1:c5:5d:83:32:49:49:2d:88:f1:c7:e8:d8:
                    e4:f1:86:8d:1f:cc:e1:d1:53:56:93:6a:29:f2:34:
                    bb:ff:3f:6f:50:9e:02:7b:54:cb:4d:41:90:06:6a:
                    1e:e8:89:3d:eb:39:40:bd:10:5a:64:cd:ed:0d:b0:
                    e0:6f:c1:d3:86:85:ca:fa:01:33:a2:21:77:85:2a:
                    12:bb:34:1a:d0:9c:f8:34:b1:ba:a4:22:b2:ec:f9:
                    09:8a:a1:b6:4e:be:9c:f3:18:a7:61:a8:24:35:f2:
                    08:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4F:7A:4E:77:93:1F:52:43:30:BB:72:D2:DC:FA:4C:B9:AD:56:1F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7fd91644-7fc3-4c9c-a75f-fd13c8f6d936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:9e:00:dd:13:25:0a:ec:d4:e0:13:99:05:5e:44:a0:0b:c5:
         51:b0:7e:66:f7:33:b0:ef:5d:d4:4f:04:6d:13:8a:6d:06:55:
         71:a0:a0:83:85:c9:0d:ec:78:c6:8c:13:86:48:93:ad:75:c7:
         49:2d:6f:b3:f2:2f:08:18:f4:92:14:d0:64:ea:84:f3:e2:5e:
         72:cc:16:dc:e1:4c:3f:e1:fd:74:3c:94:36:97:be:c2:07:07:
         61:6e:26:5e:57:fc:79:7d:39:95:9a:21:8d:cb:06:17:25:be:
         08:19:6c:f7:8b:4b:ca:15:e9:66:c9:8a:41:12:66:0e:ce:ca:
         89:5f:8c:5c:90:ba:fc:36:6f:89:40:1b:0f:ac:f6:c5:f6:7c:
         6c:16:0e:6c:97:6f:cd:78:ca:11:8b:63:55:d8:bf:bd:ae:8d:
         c5:0b:73:fe:8a:19:8c:0d:83:d0:5b:33:69:14:bb:d8:50:1d:
         f7:f0:96:6b:df:35:26:b9:58:d2:22:29:2a:11:3a:21:81:ab:
         9f:86:ba:f9:63:4e:68:2f:e1:55:1f:7a:98:88:eb:fe:c0:b2:
         74:fb:d1:25:21:2f:32:2a:15:42:69:c2:c2:a7:c8:8d:6e:95:
         8b:40:fb:44:6c:0f:03:92:75:44:dd:c5:ba:ff:51:ec:a0:26:
         be:52:ca:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----