Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/82cbaac7-8d00-46f6-be2c-752407fde47e.roa
File:                     82cbaac7-8d00-46f6-be2c-752407fde47e.roa (raw, json)
Hash identifier:          2SuOqMtckEHssu5FYNFq8U3GRAmdZ6q4y1Js3Y1eBhE=
Subject key identifier:   91:8A:34:DD:7E:21:EE:10:49:EE:70:F2:5F:18:94:74:44:68:30:88
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       16ED56E46B87667159A2DDF7B365278615709471
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/82cbaac7-8d00-46f6-be2c-752407fde47e.roa
Signing time:             Sun 09 Jul 2023 00:00:00 +0000
ROA not before:           Sun 09 Jul 2023 00:00:00 +0000
ROA not after:            Sun 13 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ed:56:e4:6b:87:66:71:59:a2:dd:f7:b3:65:27:86:15:70:94:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul  9 00:00:00 2023 GMT
            Not After : Aug 13 23:59:59 2023 GMT
        Subject: serialNumber=0cef4b43249cf3ebb3e29bbab63feb81d99b4ac7d168e96c6d78bf7c20bfdc62, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:a1:8b:2b:86:a6:9b:c4:4f:f0:14:08:2d:
                    95:8c:b1:e2:96:d2:c7:83:f3:7f:28:42:0d:55:79:
                    35:12:e0:6b:5e:45:54:f5:23:6b:70:aa:50:0c:4d:
                    5b:3d:80:ca:f9:3f:38:cd:ca:7d:af:73:23:6a:68:
                    86:e5:eb:9a:37:c3:5c:f4:ec:5a:fe:be:6d:6e:04:
                    5d:72:2d:b4:d4:c2:ed:07:96:11:35:52:04:fb:cb:
                    a1:3e:4b:67:63:8d:1b:2b:f5:03:b2:80:e0:c2:21:
                    fb:44:23:19:c1:17:94:a4:dd:54:36:a4:ff:ab:b5:
                    81:73:4d:99:6d:9f:7a:53:82:c8:51:75:e1:b6:e5:
                    49:a7:ed:e5:45:bd:eb:29:17:26:f3:ca:2f:93:98:
                    97:79:ad:33:08:5e:96:0d:30:79:ec:4a:52:d9:8a:
                    47:dc:2b:91:95:c3:41:a4:db:3d:4d:fc:ad:3c:b4:
                    9e:b6:f8:bb:d5:da:c5:08:de:eb:7a:29:cb:03:8c:
                    1e:fb:51:5b:65:63:e2:56:8a:ae:38:12:2f:93:eb:
                    8e:6f:6b:77:b0:e1:55:33:8e:27:67:45:73:4a:ac:
                    2b:8c:3c:d4:54:f8:2b:53:be:72:76:75:05:e5:61:
                    d1:03:32:c0:30:73:33:e1:7e:d6:86:55:f2:2c:4e:
                    1b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8A:34:DD:7E:21:EE:10:49:EE:70:F2:5F:18:94:74:44:68:30:88
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/82cbaac7-8d00-46f6-be2c-752407fde47e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:de:55:b6:fb:25:f8:14:59:cb:49:14:72:de:f5:0e:15:52:
         9f:2d:5a:ee:ff:67:49:72:f0:0b:84:d5:39:5e:c6:56:c0:d1:
         ea:d2:ec:f9:96:42:c4:ba:e7:e7:22:65:f5:f0:75:59:0e:7c:
         74:4b:58:f0:cf:c1:15:88:30:74:0c:b8:72:d9:24:47:97:cc:
         82:bc:10:d5:f6:98:17:cd:29:e4:28:52:0b:7c:c0:18:81:3a:
         cf:71:83:30:c3:0c:3d:5d:39:62:a0:d1:8e:1d:1e:1a:ff:3e:
         59:82:47:4f:ac:05:0c:ab:e1:4c:4a:0d:d5:4c:2d:ac:21:49:
         b1:82:4c:1e:5d:00:cf:69:0a:24:2d:12:4f:87:95:18:98:12:
         cd:c2:c0:dd:50:fe:d2:d6:aa:5e:f0:b6:83:27:fc:35:2b:14:
         dc:9b:91:8c:e5:80:28:ee:66:b0:1c:5c:ab:a6:ed:6e:4f:3e:
         10:55:93:3a:e2:f3:cb:68:6a:7a:46:4a:f1:9a:a7:33:ac:74:
         2a:17:f4:21:23:b7:d0:ef:24:4c:ce:d7:3b:44:f8:f9:29:0c:
         36:73:7e:2b:b1:d6:dd:11:5b:88:ee:51:c9:64:6c:b2:5b:77:
         a0:b1:ae:e1:93:09:9f:3d:85:95:b3:e2:7d:2c:63:ee:e7:60:
         b8:ad:ad:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----