Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9be12652-e1fc-4ccb-914e-a98e695b87a6.roa
File:                     9be12652-e1fc-4ccb-914e-a98e695b87a6.roa (raw, json)
Hash identifier:          9HXIH5+c8LpSTqWfYFNoRFcehZFc/3Wh0gmBopSb0bY=
Subject key identifier:   22:61:C0:67:82:69:DE:0C:94:02:24:E5:93:B6:F5:99:B6:A7:E3:62
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       36BC379206820AE5D5DC9A87061FBA48ED7851D5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9be12652-e1fc-4ccb-914e-a98e695b87a6.roa
Signing time:             Fri 15 Sep 2023 00:00:00 +0000
ROA not before:           Fri 15 Sep 2023 00:00:00 +0000
ROA not after:            Fri 20 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:bc:37:92:06:82:0a:e5:d5:dc:9a:87:06:1f:ba:48:ed:78:51:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 15 00:00:00 2023 GMT
            Not After : Oct 20 23:59:59 2023 GMT
        Subject: serialNumber=9f8f528ad0dbeccc5fa4a01440da1e2274d76e4fc25694cb52a0cd09d75dc65d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:53:77:6a:09:62:98:87:7b:7e:0d:c6:f2:
                    ff:7d:b6:bc:38:2c:04:c3:de:1a:b1:c3:75:21:3f:
                    9a:7f:6a:b4:91:50:f9:de:10:64:0a:ea:86:d9:0a:
                    56:af:83:72:57:b9:2f:3d:b3:9b:29:96:b7:19:31:
                    3b:df:69:fa:54:0c:89:d5:f4:d6:36:9b:bd:bd:48:
                    84:f4:6a:2a:50:66:98:6d:4e:dc:a2:9e:cb:41:87:
                    16:e7:fe:9f:18:59:5a:13:2a:00:7c:43:be:74:0c:
                    bd:32:c7:f7:1b:ea:72:c9:0c:63:d0:6b:4c:47:c2:
                    f4:f5:57:f2:41:1f:f8:38:33:e4:b6:c8:c1:7f:fc:
                    a4:73:5b:74:e4:e2:2a:46:3a:02:29:ab:0d:a1:a0:
                    13:74:2a:44:7f:57:f5:2b:f8:e5:3b:58:9b:0b:9c:
                    af:e5:73:c9:48:15:69:e0:f6:2a:40:28:ca:b7:d0:
                    45:e5:38:84:6e:77:cb:df:90:f4:ff:2e:48:ac:9b:
                    80:90:6b:2a:bd:42:33:8a:ab:99:ed:37:02:b1:39:
                    a4:56:82:f3:a4:96:22:2b:33:89:ff:5f:96:8c:02:
                    54:01:47:cf:b6:45:ad:e1:1c:d0:2c:39:09:82:50:
                    fc:2d:87:6a:ec:6e:7a:01:17:cf:0d:81:c0:2a:fe:
                    f0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:61:C0:67:82:69:DE:0C:94:02:24:E5:93:B6:F5:99:B6:A7:E3:62
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9be12652-e1fc-4ccb-914e-a98e695b87a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:5d:33:22:70:40:5d:d3:31:b4:95:8b:5a:d5:d3:8b:1b:e6:
         0a:56:5a:76:5f:a8:d9:05:85:67:47:8b:eb:39:8e:6c:43:78:
         69:fc:4d:fd:ca:99:b0:f9:a7:e7:3d:02:f9:8a:6a:51:24:d8:
         df:8e:d6:94:9c:06:33:1a:6f:02:5b:6b:18:2c:d7:7a:5c:b1:
         26:2b:bc:19:3e:37:d9:a8:41:a6:4a:9c:37:60:74:a8:93:e7:
         93:e6:ec:34:31:3c:fd:b1:0e:a9:5c:ef:1b:b3:c0:bf:38:c1:
         50:45:a6:6f:ae:d8:cf:20:63:de:0c:6f:b8:fe:b6:e8:47:f4:
         ee:ae:4b:07:0a:7a:bc:ea:29:02:6a:a7:bf:95:67:89:42:02:
         1c:86:e0:f0:b8:a3:65:0c:37:f7:07:d0:fb:86:ca:75:56:68:
         74:e9:72:2c:e3:7e:ca:b9:cb:0a:81:d1:61:4a:88:af:42:5a:
         78:c4:39:16:a7:ab:4e:05:97:cb:01:7e:17:72:e4:c4:58:89:
         ca:38:0a:36:5a:dd:dc:77:94:eb:b4:3c:77:5d:0a:37:db:67:
         6a:71:e5:13:d1:a5:ee:b0:49:d8:96:0f:ba:d0:53:ab:d8:c7:
         6a:fd:90:2c:17:36:da:78:0e:1e:69:2c:1e:4a:d3:6c:44:4f:
         91:4c:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----