Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a72c8305-f6f9-4034-8cd9-d008b6f305fe.roa
File:                     a72c8305-f6f9-4034-8cd9-d008b6f305fe.roa (raw, json)
Hash identifier:          WH+9w2f5F+uv+6EElxeMl+VE44BketNC6Y1vq6uYPo8=
Subject key identifier:   A3:41:19:CB:23:C3:35:CB:3B:59:78:5D:C8:C5:A1:F6:55:58:C8:B9
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       74E160989DA7511C7907A77D62C37D4683EE2DE1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a72c8305-f6f9-4034-8cd9-d008b6f305fe.roa
Signing time:             Sat 22 Jul 2023 00:00:00 +0000
ROA not before:           Sat 22 Jul 2023 00:00:00 +0000
ROA not after:            Sat 26 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e1:60:98:9d:a7:51:1c:79:07:a7:7d:62:c3:7d:46:83:ee:2d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 22 00:00:00 2023 GMT
            Not After : Aug 26 23:59:59 2023 GMT
        Subject: serialNumber=f79ffe0816a6eb0846d6e2dcbaef724f6d2fbff04b0aa3a53fe7f7edb200d170, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:52:a4:41:4d:7f:88:6b:2c:bf:75:4d:6a:69:
                    85:46:8a:f5:6b:68:f3:8d:51:9e:c2:a1:cb:dc:20:
                    2d:75:4f:98:74:09:29:6a:b0:92:78:df:a5:70:0e:
                    94:51:50:85:ef:e1:fb:f1:fd:13:6f:ea:7d:e8:d3:
                    4e:a6:31:35:1c:d4:a9:b0:fc:98:e5:ec:7a:e1:d0:
                    9b:5c:f4:fc:e9:5d:86:eb:bd:4c:48:90:77:41:25:
                    e7:ec:0a:0c:2d:d8:e3:3f:08:9e:c7:2e:8e:69:86:
                    4d:46:fc:93:0d:3e:30:05:15:d6:df:a8:72:c4:4e:
                    19:7b:4f:a4:9f:d4:27:1e:6b:4d:4e:65:0f:75:2a:
                    aa:1e:a8:e6:62:ce:d9:0a:15:14:5a:da:77:47:15:
                    91:a6:f2:a9:e6:b5:7d:8c:0c:e1:3b:ad:6e:92:d0:
                    44:32:41:4f:49:6a:50:38:70:45:c4:8c:34:5a:30:
                    81:57:e4:e4:fa:35:b6:cc:2d:63:48:38:85:5c:68:
                    48:1a:5f:ec:1a:8e:36:36:fa:72:0a:06:29:db:04:
                    e6:58:d4:aa:d7:d0:73:89:5d:bb:d3:2d:7d:9f:77:
                    85:14:ff:76:eb:1b:d2:fc:d5:6d:68:c0:ae:07:e1:
                    31:6a:8c:40:5b:8c:46:98:57:dc:bd:b2:95:6f:20:
                    69:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:41:19:CB:23:C3:35:CB:3B:59:78:5D:C8:C5:A1:F6:55:58:C8:B9
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a72c8305-f6f9-4034-8cd9-d008b6f305fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:e9:5b:6f:86:c8:8e:1e:21:c8:c9:6a:cb:a1:7c:f9:a2:d8:
         31:c9:b3:dc:bb:ac:be:10:91:a2:58:24:ba:54:f7:75:5a:66:
         d5:d7:8e:97:a4:40:52:5b:24:77:93:5a:57:12:e3:0a:f1:b1:
         02:c5:ce:da:51:7d:7d:16:0f:6e:73:d4:b9:12:69:dc:85:51:
         87:47:f7:5b:7a:3f:9a:1d:a0:46:22:cd:b6:aa:69:fd:3c:33:
         cb:da:fd:7b:f4:f2:cf:8e:19:ae:b7:bc:5b:d2:b9:e1:74:b8:
         d6:05:83:d3:55:06:b4:fe:bb:1b:6a:b0:10:e0:be:25:70:12:
         7c:92:23:1d:ed:59:2c:dd:54:23:97:e6:2d:4b:df:54:67:13:
         26:99:c4:d8:7c:86:c9:4d:d6:79:a7:18:fd:ef:ce:c4:52:e1:
         46:e0:34:83:9c:b5:ee:5a:ce:16:20:54:9f:9f:da:ff:93:95:
         d6:51:5f:d2:39:5d:ea:cb:a0:a1:3e:0a:e8:f1:db:af:66:d4:
         b4:ab:5b:85:cb:46:4c:92:68:2e:c0:1c:9f:36:db:c9:3b:1b:
         9e:34:0f:5a:d0:b6:c5:75:96:4b:6e:b0:86:ee:10:fa:2d:22:
         18:78:1a:cd:62:4e:8f:9e:70:84:1b:57:33:be:fa:6d:c5:d9:
         16:d5:79:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----