Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b49c14be-4dc7-4a54-90fd-5480e27bb5d9.roa
File:                     b49c14be-4dc7-4a54-90fd-5480e27bb5d9.roa (raw, json)
Hash identifier:          SZF9UZLijebzMzsx5y2/wgoMei2J/dk3qWSEvyFQiqc=
Subject key identifier:   B4:CD:B4:24:BA:9A:FA:2A:31:3C:FE:B1:18:CA:26:79:D1:E2:57:98
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       45925E840A0670515AD76B77C93E23439F970C98
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b49c14be-4dc7-4a54-90fd-5480e27bb5d9.roa
Signing time:             Sun 10 Sep 2023 00:00:00 +0000
ROA not before:           Sun 10 Sep 2023 00:00:00 +0000
ROA not after:            Sun 15 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:92:5e:84:0a:06:70:51:5a:d7:6b:77:c9:3e:23:43:9f:97:0c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 10 00:00:00 2023 GMT
            Not After : Oct 15 23:59:59 2023 GMT
        Subject: serialNumber=ce8fbc0ef62002f19c5be79310a16818c5175ccc5dc7dc11cfd07b915c6e4791, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:85:5c:bb:be:92:c8:90:73:56:69:6b:4f:
                    38:24:21:c3:52:cd:b1:a1:41:af:c8:99:4e:92:6c:
                    fd:bc:18:13:03:60:20:79:50:f2:f6:de:22:fe:60:
                    2a:77:44:c9:66:21:d5:cf:59:10:3f:49:97:75:99:
                    b0:67:ee:c1:1b:89:f8:55:41:06:52:94:49:db:78:
                    e7:57:0e:b3:83:de:2f:08:84:a1:b0:6e:99:dc:aa:
                    05:12:28:a5:a2:e0:85:88:54:a9:6d:4a:d3:17:90:
                    47:14:46:62:47:17:ba:37:fd:c1:9a:55:76:4c:9f:
                    9b:db:8a:5a:44:d0:2f:b5:ab:30:84:5c:e6:42:5e:
                    74:27:14:8b:19:cf:47:40:d4:db:19:e8:3e:a0:b2:
                    1b:da:4a:fe:7d:67:05:b8:df:0c:cc:38:6d:fe:8e:
                    ac:c1:21:34:45:be:33:a6:69:59:66:6f:1e:cb:6d:
                    71:fe:17:89:f1:12:e2:27:47:e8:12:58:96:03:66:
                    c1:83:ab:18:27:78:b4:80:2d:71:69:8a:82:ec:f4:
                    50:23:1a:3d:ea:20:58:b6:59:21:5c:40:1c:5d:fc:
                    ff:6b:65:4f:73:4f:f5:ec:7d:13:f6:97:6a:64:12:
                    9f:63:7d:42:99:a4:57:20:f6:87:16:9a:2f:ec:16:
                    08:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CD:B4:24:BA:9A:FA:2A:31:3C:FE:B1:18:CA:26:79:D1:E2:57:98
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b49c14be-4dc7-4a54-90fd-5480e27bb5d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:61:8f:4a:96:3d:02:6f:19:65:ec:05:27:0f:03:f6:0d:0c:
         bc:7b:df:55:7f:9b:7c:85:67:68:1b:01:ad:b7:55:46:eb:e5:
         54:f8:6f:15:89:f1:01:ef:36:a7:dc:a5:07:e9:52:31:a8:d6:
         f6:56:9b:f8:cc:6e:1d:70:4a:b9:c6:13:06:cb:2d:b9:f5:72:
         c9:c4:29:42:99:82:1c:4b:cb:db:5d:a5:7d:a0:07:eb:4c:0e:
         7e:a5:d2:53:ce:a8:91:a7:e7:67:53:57:c1:65:46:2f:ea:c4:
         14:25:6c:b5:b7:25:1a:81:0f:cc:01:67:f3:1e:1a:70:c2:e7:
         60:83:e9:a1:7d:cb:09:46:87:8b:4c:b4:7f:b2:ea:55:7d:54:
         48:bf:ad:8f:c7:93:c9:9b:39:51:25:be:c5:0f:86:e3:26:03:
         d0:3c:a5:ab:f7:61:96:62:9b:6c:73:45:ed:41:4a:6c:c7:9b:
         e3:e1:d2:8e:e9:88:9f:f1:4b:a0:57:16:b5:f0:31:b7:71:73:
         50:55:24:ce:a8:e6:7b:20:da:97:03:07:1e:6a:7b:48:09:7a:
         ed:2d:7a:e3:3e:19:86:eb:41:fc:ca:8a:df:cf:0f:f7:ae:a2:
         04:3a:71:d8:80:2b:8b:73:0b:a0:83:47:c7:64:ba:ae:cb:6d:
         19:08:b7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----