Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9776b9ca-fd56-4b46-a56a-39bb87b35ab2.roa
File:                     9776b9ca-fd56-4b46-a56a-39bb87b35ab2.roa (raw, json)
Hash identifier:          YvTruRSJN2IURAck6uQWSLAdq2r3m+u4TTPS4jhMBEI=
Subject key identifier:   46:E8:FD:85:36:13:94:1F:F0:45:87:67:19:49:39:5A:DA:51:D6:35
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       319B10FDBDA2EE6BB8494A8AAA91EEB44437B1D8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9776b9ca-fd56-4b46-a56a-39bb87b35ab2.roa
Signing time:             Sat 19 Aug 2023 00:00:00 +0000
ROA not before:           Sat 19 Aug 2023 00:00:00 +0000
ROA not after:            Sat 23 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9b:10:fd:bd:a2:ee:6b:b8:49:4a:8a:aa:91:ee:b4:44:37:b1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 19 00:00:00 2023 GMT
            Not After : Sep 23 23:59:59 2023 GMT
        Subject: serialNumber=2ab8f0fe490cfd4067ae031f1277ae46ab20697125a741f6f9493fc97d6f7b8d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fb:80:ff:df:cb:10:70:77:fa:65:fc:81:32:
                    da:37:55:20:95:a0:04:70:e2:fe:b7:15:fe:33:8f:
                    4b:3d:9e:cb:b6:6b:8c:7e:56:f2:5d:cc:ea:dc:d2:
                    da:c8:df:e0:0c:34:50:a5:e1:3b:ef:e5:68:62:67:
                    0e:3a:76:de:06:70:ae:69:cc:95:29:e7:1a:1f:bb:
                    4a:39:ee:6d:eb:b3:f6:a1:86:70:b4:fb:6e:b2:b0:
                    c2:28:d4:f6:94:c9:fd:6c:28:b4:41:b9:8f:27:8a:
                    4b:bb:e2:c4:df:7c:e4:46:e1:03:f0:a7:8c:d3:8f:
                    fb:14:73:48:3e:b6:ef:37:fc:f6:8c:59:5c:1d:f5:
                    1e:99:da:36:08:0c:ea:12:cd:63:f5:8d:33:44:5f:
                    20:38:45:df:68:47:78:63:bc:24:8c:97:c9:6f:53:
                    6f:5c:99:2f:6d:6f:ed:7d:b3:d8:32:3b:31:60:69:
                    87:3e:18:a7:10:2f:9c:f2:07:c1:ee:e6:7f:be:a7:
                    0a:e7:fa:87:40:72:8b:ad:89:ee:47:2e:10:f6:7d:
                    45:29:bd:2c:69:bb:04:14:dd:76:a4:be:0e:bc:f9:
                    70:ac:25:60:57:c7:dd:7c:d6:1e:7a:c1:ea:9c:5a:
                    3b:ee:56:5d:61:5c:27:90:8f:0d:0b:32:1a:f1:7d:
                    93:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E8:FD:85:36:13:94:1F:F0:45:87:67:19:49:39:5A:DA:51:D6:35
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9776b9ca-fd56-4b46-a56a-39bb87b35ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:28:91:9e:04:aa:9e:48:8b:6d:99:56:08:1a:33:78:47:88:
         fc:fb:7c:15:2c:cf:b6:ff:18:89:28:6b:50:6d:f6:f0:df:66:
         10:46:fb:34:37:5f:3b:61:b1:d6:82:25:ca:d9:a1:86:30:22:
         39:71:2f:5b:fd:56:f0:e1:ff:43:fe:0c:d8:77:a9:ee:46:b9:
         48:7b:25:e2:f0:23:a6:5d:bf:22:88:35:e0:aa:f0:17:27:fd:
         a8:1b:84:72:35:8b:9d:a9:3e:1b:d9:d4:38:48:1a:7c:e7:6d:
         66:27:db:4f:72:f0:d8:2b:ce:ca:d6:11:3b:3f:91:51:b0:e0:
         99:d8:2f:e5:8a:4a:1e:62:4f:da:03:15:c3:7d:45:2d:9a:1d:
         ac:6c:0e:5e:3e:28:e6:ef:b5:0f:20:19:d4:83:5d:ca:9a:4d:
         fc:a4:9f:bf:2c:59:98:9e:87:99:b3:eb:d8:db:81:89:81:fb:
         70:86:98:58:13:67:00:41:86:84:d0:a9:a3:a4:52:ff:39:22:
         fe:66:2f:5a:08:d9:9c:95:d4:77:12:9e:e7:94:0d:b4:67:25:
         a5:c1:8c:d7:50:e6:7d:79:99:ab:d9:2f:c9:59:bd:a0:5f:21:
         06:05:a9:3a:4d:47:4a:b2:a9:a8:3c:0b:32:04:91:d5:87:cb:
         61:0c:44:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----