Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/82a16a2b-7c0a-4237-90d5-e3f1de13298b.roa
File:                     82a16a2b-7c0a-4237-90d5-e3f1de13298b.roa (raw, json)
Hash identifier:          QcCRKY1XRZGLSYJSoPEHe0xJ+SVK2tidGnbO5eNdh68=
Subject key identifier:   DB:BD:22:EC:7B:98:4A:55:A4:01:B1:DE:8D:C2:26:35:EF:94:3D:07
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7CC6BA0FEEAA1F7BE4E9F5F87FC3354C4657D286
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/82a16a2b-7c0a-4237-90d5-e3f1de13298b.roa
Signing time:             Sun 24 Sep 2023 00:00:00 +0000
ROA not before:           Sun 24 Sep 2023 00:00:00 +0000
ROA not after:            Sun 29 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c6:ba:0f:ee:aa:1f:7b:e4:e9:f5:f8:7f:c3:35:4c:46:57:d2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 24 00:00:00 2023 GMT
            Not After : Oct 29 23:59:59 2023 GMT
        Subject: serialNumber=c451e7ec5168231c6cca169d16576cc23b455bdd8738bf1cca4011c6583cd4ca, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b0:14:72:16:cc:ac:b9:a8:2b:60:11:58:3f:
                    b1:55:75:ce:65:0b:11:c7:6a:d8:83:b6:65:6d:c7:
                    bb:83:3b:84:72:a4:21:05:69:56:2d:05:e6:6e:28:
                    73:68:7d:fc:0d:a2:8f:4a:64:7f:90:7c:49:cc:a6:
                    4d:6d:91:42:63:84:14:a7:41:27:6f:15:e4:a5:93:
                    a8:e4:55:78:6d:b8:59:20:9b:34:c5:b2:fd:65:63:
                    3e:4f:93:f9:79:d3:1c:12:02:28:d4:1c:49:8f:ff:
                    12:1c:89:23:60:d3:3c:3f:00:70:d0:35:bd:4a:ed:
                    3c:1d:b7:b3:b4:24:f3:cb:11:60:b3:09:73:a2:81:
                    2d:4e:90:b8:37:22:4f:d2:0d:23:52:c9:cc:68:4b:
                    2f:e3:6a:41:67:19:94:51:5c:73:2f:02:65:86:a7:
                    de:78:84:a1:97:64:12:54:ee:93:42:30:ca:0e:87:
                    e0:cc:91:18:6f:be:f0:54:1f:ea:81:bb:b1:bb:9d:
                    9d:39:8d:ed:05:0d:5f:93:70:6d:bc:f9:21:83:46:
                    ee:c0:0f:31:f4:c9:3f:12:ac:83:96:f5:2f:0b:fb:
                    a8:54:4f:7e:63:06:e7:98:b2:9a:ad:c6:1c:16:84:
                    ac:ea:7a:15:d0:dc:29:41:d8:bd:43:a0:92:2a:28:
                    fd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BD:22:EC:7B:98:4A:55:A4:01:B1:DE:8D:C2:26:35:EF:94:3D:07
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/82a16a2b-7c0a-4237-90d5-e3f1de13298b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:c4:60:14:5f:76:12:ca:fd:f2:b3:b2:7c:43:56:61:14:f6:
         73:8f:17:06:30:bf:37:c8:bb:59:cb:7f:99:f6:01:ae:b5:de:
         8d:a9:5b:12:ff:9f:cb:57:ee:d6:b6:db:63:94:78:78:94:63:
         9a:19:85:01:a9:6a:2c:0e:aa:33:9b:90:6f:04:20:2e:82:60:
         e5:34:01:6d:2e:aa:7e:05:1f:9d:83:9a:8b:c1:9d:7c:5d:3d:
         5d:8d:d2:a8:40:8f:d9:7c:8b:02:51:95:84:4c:ed:5f:ef:88:
         b4:c9:1a:b9:b9:6e:a9:9c:32:79:50:20:06:7b:ac:d9:5d:bf:
         d9:99:2c:ca:c2:7c:4c:63:54:f2:ed:f5:ed:15:ba:e9:0a:fc:
         07:b2:ed:fe:3d:0a:2b:c1:d3:0b:79:fc:07:c2:f8:07:6c:df:
         18:e8:bd:a6:5d:ea:79:b2:6a:ce:09:7b:9c:9e:b1:15:11:c1:
         a5:b6:72:da:ca:99:b5:b8:01:92:00:e1:81:8e:ce:1d:b6:39:
         eb:0b:35:96:a5:1c:41:52:e5:ee:a8:e3:1f:df:45:c7:f9:c5:
         89:45:00:24:c7:ae:8c:c1:1a:81:0a:5d:6b:c1:db:f7:87:c5:
         dc:2e:5f:16:c5:96:88:97:83:52:85:46:b2:6b:f9:aa:70:da:
         16:90:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----