Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/826d106f-6d09-42d5-a43e-0186c58a3905.roa
File:                     826d106f-6d09-42d5-a43e-0186c58a3905.roa (raw, json)
Hash identifier:          QUDum2PyC0bzf8c5Gnqogo+lTPTM+0CjUN2rhbHAkAE=
Subject key identifier:   49:48:08:B9:17:55:CF:B5:DE:1A:F8:3C:07:13:BB:04:8D:B9:1C:5D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3779945EE88F083219D412FE8FFF60F1EEBE68DE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/826d106f-6d09-42d5-a43e-0186c58a3905.roa
Signing time:             Tue 29 Aug 2023 00:00:00 +0000
ROA not before:           Tue 29 Aug 2023 00:00:00 +0000
ROA not after:            Tue 03 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:79:94:5e:e8:8f:08:32:19:d4:12:fe:8f:ff:60:f1:ee:be:68:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 29 00:00:00 2023 GMT
            Not After : Oct  3 23:59:59 2023 GMT
        Subject: serialNumber=33059996793809899799e528b9e61a9cb8751e1b005b5bd65366783814addbcd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a0:af:08:a0:8b:bf:52:75:ac:1d:c6:ac:52:
                    e2:54:4a:ae:82:b8:5b:00:e1:41:ef:a9:55:b2:84:
                    ac:ba:5d:74:69:12:e1:c1:69:80:4a:2e:68:54:1f:
                    70:e8:56:5b:5e:94:4f:70:68:a7:47:6b:34:4e:16:
                    0a:12:e8:1b:7e:8e:32:ae:04:df:20:fe:2d:52:db:
                    e9:ee:98:e9:b7:57:86:dd:0c:81:dd:95:d2:31:3c:
                    94:8a:ef:59:07:4e:74:7f:37:53:c6:24:1b:9c:eb:
                    e1:b6:75:2b:1c:2b:01:b3:eb:b3:3b:ca:41:b4:3d:
                    e7:25:6b:42:39:60:6b:6d:b0:df:e6:48:b5:4d:2d:
                    68:8e:03:ba:e5:cb:c1:ee:e9:b7:31:9a:0d:56:88:
                    fd:96:81:e2:7e:ab:1b:ce:fc:4a:37:ad:d3:24:a7:
                    e9:c2:1d:25:92:99:73:38:a6:e2:89:7b:dd:bb:87:
                    38:03:3c:c4:cc:a4:86:18:ae:58:2d:86:f5:ed:1a:
                    37:77:a8:f3:66:c7:22:2a:cb:78:25:a4:93:36:09:
                    cb:f7:8e:1b:77:e9:1a:13:77:e6:a7:47:d8:4e:c0:
                    69:e5:d7:ba:da:ef:7e:87:8b:a0:c9:a7:d9:6f:06:
                    77:9e:aa:f8:96:7e:e2:c9:3e:9a:e4:5b:4c:fb:f7:
                    6c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:48:08:B9:17:55:CF:B5:DE:1A:F8:3C:07:13:BB:04:8D:B9:1C:5D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/826d106f-6d09-42d5-a43e-0186c58a3905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:3d:e3:47:fc:c0:0c:7a:31:7e:cf:b0:2d:f8:94:c2:d3:d1:
         9a:48:8a:ba:35:4b:ad:38:af:04:81:da:3f:aa:4c:79:7b:1b:
         71:c3:b0:ee:e8:00:70:1a:ab:2e:27:fc:79:2a:b9:a2:bd:ff:
         c0:d1:41:b4:9a:16:3e:0b:a0:2f:82:1f:4f:49:d7:1e:d4:07:
         89:10:2d:26:97:ae:2e:a0:f0:f2:8d:34:b3:07:26:e4:19:cf:
         a7:50:14:42:e0:6b:8a:c7:4d:44:0e:bf:f0:5f:e2:e2:d8:3d:
         0e:f4:99:9f:82:44:94:12:32:d1:c0:3a:76:a8:25:2f:b6:84:
         cd:7d:8b:b1:5f:ea:d5:2c:78:4e:f8:23:9d:89:9b:81:a3:fd:
         8a:b6:cf:63:b7:c3:18:13:16:ef:78:79:c6:bd:6d:3a:e5:f9:
         7a:a1:fa:4c:bb:f7:b9:f3:8d:99:e4:ee:7f:0f:dd:64:2f:6c:
         fe:0c:a0:82:2d:92:7b:1e:d0:73:d4:8e:0e:11:2d:3d:14:12:
         37:1a:94:a1:c2:f0:80:4a:e7:8e:47:16:23:6a:54:2f:d4:4e:
         0c:9d:15:33:4c:c2:80:d6:a5:f9:4f:82:20:b0:72:03:22:31:
         a6:dd:82:09:1c:2a:a9:c2:72:37:11:a1:bd:6c:ad:0f:4c:bb:
         b0:5d:a0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----