Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a6d39be1-1aa3-41b3-bf8e-0297160e346b.roa
File:                     a6d39be1-1aa3-41b3-bf8e-0297160e346b.roa (raw, json)
Hash identifier:          Q4BdEKxZamacQ3PGrUzpZySwVAM08575uX9fA0XrRl4=
Subject key identifier:   DD:7B:7F:50:05:AC:1C:34:9B:9A:2E:7F:81:82:B3:71:1B:B8:1F:A9
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       678E19F1EE12D1914E4293C50B96E0EE7C314210
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a6d39be1-1aa3-41b3-bf8e-0297160e346b.roa
Signing time:             Sat 19 Aug 2023 00:00:00 +0000
ROA not before:           Sat 19 Aug 2023 00:00:00 +0000
ROA not after:            Sat 23 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8e:19:f1:ee:12:d1:91:4e:42:93:c5:0b:96:e0:ee:7c:31:42:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 19 00:00:00 2023 GMT
            Not After : Sep 23 23:59:59 2023 GMT
        Subject: serialNumber=748f3c9ff36843b134602f117068edd0efe7de6177b40ce79ba19cb0132317f8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f0:fd:19:20:6d:41:55:5f:75:b1:97:01:01:
                    75:01:2e:de:94:1b:43:21:84:68:56:4a:36:b0:0f:
                    bc:92:5d:d5:c7:2b:f2:93:0e:43:ba:57:d0:66:a8:
                    7c:4a:2d:71:af:78:c6:c4:3d:f2:48:1c:30:11:d7:
                    b3:e3:d7:16:65:ad:b6:ff:e3:65:b3:1e:ff:90:18:
                    b6:c8:7b:7e:66:9f:da:d5:dd:bd:ce:de:f2:19:ba:
                    75:91:13:78:08:a4:66:0f:70:59:ac:6f:d6:84:a8:
                    04:51:09:10:45:22:00:48:1a:1b:dc:59:a7:f1:48:
                    54:f8:a2:ba:6e:c6:70:82:3c:6e:f7:fd:16:5e:a6:
                    d3:55:8c:b8:b8:90:db:b1:71:13:2c:f3:26:cf:21:
                    d3:50:fc:49:52:28:0d:8d:b0:74:a2:d1:c9:54:55:
                    68:c4:11:a8:fc:1e:af:17:57:92:1e:39:01:c2:f2:
                    99:f8:cd:6a:8d:ea:d4:cd:3b:20:27:31:75:f8:a9:
                    7f:c7:e8:e5:df:3a:0a:61:0e:fd:a2:42:d0:f0:89:
                    dc:e4:f4:57:1b:58:97:54:38:35:73:ec:6e:92:eb:
                    d2:13:1f:79:99:77:1a:4d:e4:9d:f1:0b:1e:18:ef:
                    b0:05:ff:a1:cb:a1:18:e6:c8:af:12:2e:ec:ef:31:
                    c1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7B:7F:50:05:AC:1C:34:9B:9A:2E:7F:81:82:B3:71:1B:B8:1F:A9
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a6d39be1-1aa3-41b3-bf8e-0297160e346b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:c8:c8:4e:94:01:15:51:1d:f6:f3:ad:a2:fb:7a:57:fd:7c:
         a3:01:e0:d7:19:3c:3a:bf:b4:c1:a0:b9:72:cb:17:75:ef:18:
         d5:0f:56:23:f4:67:c3:0e:f0:b9:71:ae:3e:84:fa:8c:3b:20:
         88:e6:f0:c6:07:52:18:2e:a6:55:7f:ac:eb:2b:b4:e4:e8:22:
         f6:8a:35:cd:5b:13:11:d9:e5:17:28:4c:35:02:5e:39:82:00:
         85:3a:bc:58:6c:89:cd:6a:fb:30:c0:2c:9a:70:82:1b:30:62:
         72:45:dc:74:fb:8c:ed:ee:8f:5b:55:d8:31:e8:0a:e9:0e:02:
         e8:92:0c:eb:e3:f4:d5:e5:f0:59:77:46:f5:ae:e3:fa:42:d2:
         e9:e2:ee:9a:1e:4b:2e:28:1d:5e:12:e7:e7:d2:e4:b0:f1:bd:
         81:89:a9:44:c4:fc:b9:31:f8:ea:3a:78:0b:48:57:8f:03:86:
         62:47:1c:61:b4:73:9b:c3:47:b6:61:56:36:8a:de:49:52:2e:
         8a:37:da:15:8e:a6:95:65:6e:f6:a7:e3:66:08:9d:fa:fa:53:
         10:43:40:e8:41:35:3c:3a:19:71:7e:85:d0:08:34:55:47:7d:
         27:3a:78:41:fe:00:05:ae:a3:fe:46:8d:29:ac:d3:b3:c7:ad:
         92:3f:0b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----