Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b168f73c-31f1-400f-b620-9407f210268f.roa
File:                     b168f73c-31f1-400f-b620-9407f210268f.roa (raw, json)
Hash identifier:          EExIWF7oL2YX4rPeSZmb803/7qF0Q26gN/Mx6fXpoXo=
Subject key identifier:   DA:B4:D3:0A:62:17:77:F5:3E:72:6D:1F:00:DE:0D:79:32:00:A7:EF
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3CEE60A23C6970C46B081616D4B4AAA0D72307EF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b168f73c-31f1-400f-b620-9407f210268f.roa
Signing time:             Sun 30 Jul 2023 00:00:00 +0000
ROA not before:           Sun 30 Jul 2023 00:00:00 +0000
ROA not after:            Sun 03 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ee:60:a2:3c:69:70:c4:6b:08:16:16:d4:b4:aa:a0:d7:23:07:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 30 00:00:00 2023 GMT
            Not After : Sep  3 23:59:59 2023 GMT
        Subject: serialNumber=89e89b527025564bacf0c79dd5b858bb356a382a66e747d410de091881907624, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:5e:ed:17:7c:4c:8d:f9:1e:6e:d8:0d:de:
                    cb:8f:4a:3b:3b:9d:89:ee:9c:f3:4d:ca:51:1d:a0:
                    9b:90:a2:28:30:02:3a:82:50:eb:d8:f3:b8:a7:eb:
                    af:d7:9a:d3:a8:3f:46:b8:17:d9:0e:e4:30:32:5c:
                    d6:fd:f6:96:18:16:9d:7d:1d:d6:dd:c9:4d:df:b3:
                    44:c0:6e:1d:5d:f9:55:1b:8d:05:3a:5b:f6:7c:cf:
                    fe:00:98:ca:04:42:f2:3f:fa:aa:56:06:33:e4:5e:
                    e4:7f:ac:45:0f:3d:ee:aa:6c:8f:0f:c9:b4:33:11:
                    cd:07:ba:ea:3a:0d:ab:6a:71:14:2b:d1:d2:7e:16:
                    10:05:02:d9:e4:10:3e:78:65:02:1b:94:f8:9c:d0:
                    62:fd:e3:e1:93:27:39:e3:14:b7:a5:35:28:0d:1a:
                    47:af:14:b5:c0:12:7e:cb:47:05:09:4e:cb:d1:e0:
                    57:60:a6:57:dc:04:23:28:13:e6:a1:a9:e2:b9:03:
                    bf:50:a4:ec:cf:dc:4a:d8:94:ea:c4:79:b8:06:a0:
                    ae:d2:7f:b5:63:a4:3b:ee:1a:0b:aa:d7:bb:92:42:
                    fd:1e:81:7a:f8:44:06:2c:fd:ba:15:85:d5:b8:46:
                    21:7a:32:b8:f5:92:7b:f9:b9:15:73:b1:e8:b2:71:
                    c9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B4:D3:0A:62:17:77:F5:3E:72:6D:1F:00:DE:0D:79:32:00:A7:EF
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b168f73c-31f1-400f-b620-9407f210268f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:b9:d8:82:07:34:d2:dd:bb:67:77:66:b0:40:6a:29:86:76:
         36:cb:ca:86:e3:cc:bb:10:6f:45:41:3c:19:82:2d:ba:1a:d2:
         74:e3:74:50:5a:bc:5f:98:58:67:63:88:14:ff:b7:cd:97:5e:
         91:d1:74:2a:14:be:d9:54:11:9e:b9:5c:0b:a2:b4:48:f0:a6:
         3e:41:c9:c6:52:97:3d:97:91:a5:23:5b:3f:ac:b3:d4:a1:20:
         4d:21:59:4f:23:9d:d0:d3:f9:92:3d:63:f2:b0:29:ac:f9:6c:
         0f:df:90:e4:0b:8b:2c:3c:be:51:87:d7:8d:dd:b1:ec:c1:55:
         a1:c1:86:f8:2d:6e:72:bd:a7:0b:32:ef:6b:ff:29:50:14:1d:
         7c:54:9f:da:0e:8e:5d:09:42:5c:ef:93:a0:c7:6c:77:08:73:
         82:e7:8c:04:58:06:66:f4:7f:fe:ab:9d:e7:9a:29:1a:de:4e:
         2f:f9:59:83:ec:ce:90:00:cf:1e:f2:2e:77:fa:a6:35:fd:9c:
         8c:0f:c9:fb:2c:0c:50:a2:9a:e7:dd:b1:d5:6d:67:71:34:ca:
         45:53:79:72:d6:45:7d:c6:f9:04:07:2c:a5:42:e0:cf:e2:4d:
         00:19:ac:63:cf:fb:cb:2b:74:b3:49:76:76:e2:ac:ee:47:a9:
         06:97:55:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----