Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9fbb73f7-0a2b-4dd7-8cae-5601e71ebe07.roa
File:                     9fbb73f7-0a2b-4dd7-8cae-5601e71ebe07.roa (raw, json)
Hash identifier:          I+vFlZTuics7ADHgj2mClkwtTkhJ9obJRSXSNcgqRK0=
Subject key identifier:   A2:70:E4:71:BE:72:17:59:33:3C:0C:4F:3C:04:1A:6C:2B:A5:01:12
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4619F1D256FA0E905E3C39BE466A59B3D7C60BD0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9fbb73f7-0a2b-4dd7-8cae-5601e71ebe07.roa
Signing time:             Wed 23 Aug 2023 00:00:00 +0000
ROA not before:           Wed 23 Aug 2023 00:00:00 +0000
ROA not after:            Wed 27 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:19:f1:d2:56:fa:0e:90:5e:3c:39:be:46:6a:59:b3:d7:c6:0b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 23 00:00:00 2023 GMT
            Not After : Sep 27 23:59:59 2023 GMT
        Subject: serialNumber=60d5193b2e0a5f42eaec83ad3abafe4d2d71d19924481f1b36c5d617d61d2c8d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:b3:d5:fa:21:31:8e:17:d8:12:85:0c:e5:
                    dc:ab:73:39:35:69:67:11:60:10:9f:b4:00:cb:94:
                    f8:3f:61:a0:b4:50:ed:5d:d6:23:9d:1f:c4:f3:fb:
                    af:4c:59:f2:08:30:7d:58:f5:14:00:ab:3d:94:94:
                    19:7a:f7:bb:fb:f9:2a:1b:25:28:13:9b:38:7a:50:
                    bf:9c:0f:ac:02:39:cd:7f:da:19:08:cb:37:ef:9f:
                    da:5d:8e:fe:ea:76:26:cf:fa:34:e2:7e:62:e1:0b:
                    c5:71:4a:ee:f6:09:66:53:6f:61:9b:d7:f6:e9:a3:
                    ec:58:37:3a:89:7a:99:48:7c:3a:d8:60:ef:b6:e9:
                    fb:ff:93:eb:28:ab:e9:45:a4:a8:0b:db:3e:3c:db:
                    ee:1a:fc:fb:73:13:c5:32:b1:87:b8:d8:f6:8c:fa:
                    70:17:bd:88:36:e7:22:60:fc:00:34:45:28:c9:ec:
                    55:de:1f:8b:01:56:6f:91:6e:40:a2:06:91:8c:33:
                    09:f5:ab:c7:38:c2:fd:90:8d:f2:ed:ab:72:d7:97:
                    6b:28:1d:20:45:00:0e:a3:77:d3:dc:49:4e:d2:63:
                    d6:29:75:58:56:1e:40:df:1c:91:70:e5:06:a8:4b:
                    ce:f8:33:d4:a6:89:d1:e8:70:5e:b2:b0:49:27:79:
                    1a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:70:E4:71:BE:72:17:59:33:3C:0C:4F:3C:04:1A:6C:2B:A5:01:12
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9fbb73f7-0a2b-4dd7-8cae-5601e71ebe07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:5b:21:73:49:b9:c9:76:d3:75:6f:e8:ce:99:5a:f8:7f:6e:
         40:49:1f:45:c5:85:bc:15:66:d9:b6:6b:c2:a6:a0:67:88:e9:
         7a:e9:5e:08:b6:9b:81:69:67:6d:07:23:ec:73:dc:50:81:64:
         56:18:c8:11:3c:97:10:3c:a5:2d:0a:76:e1:3d:be:65:9f:b4:
         61:d6:15:ec:e0:e5:e1:3b:f9:c7:16:7f:92:e2:84:fc:54:db:
         38:10:d4:79:b3:80:04:20:66:d7:36:dc:f7:bd:8f:bc:69:a6:
         a7:68:a1:a9:14:9f:6a:0f:d9:a9:70:1b:c1:5d:5a:2c:31:51:
         f8:33:dc:cb:d0:70:a7:cc:9a:26:ab:4a:70:e5:62:56:52:6c:
         9d:95:ba:9e:cc:fe:b0:7b:10:37:3e:38:f9:4b:f5:e6:f0:3f:
         76:a6:a9:89:ba:7d:9b:b5:30:43:1e:18:6a:3d:ea:a7:77:bf:
         73:dc:b9:55:ff:a1:8d:5c:09:60:a9:05:d2:f7:da:46:b8:d9:
         1e:d9:12:4f:67:7a:31:08:3b:86:4a:d5:12:cd:5e:3d:e6:68:
         3b:c0:de:9f:3a:b0:7a:d6:dc:55:93:f5:3d:9e:e1:2b:77:4f:
         35:f9:d9:ca:cf:61:90:1f:cd:b8:c9:d7:9e:ac:d1:21:8f:f6:
         42:76:7c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----