Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b6c271f1-22dd-4f3f-bd21-0433df20e16a.roa
File:                     b6c271f1-22dd-4f3f-bd21-0433df20e16a.roa (raw, json)
Hash identifier:          1db+p09qrnied+MjmTpPC5k1kcmsYdQ7pUq4oBAq19E=
Subject key identifier:   D0:89:31:FC:FD:8B:47:B3:10:D1:1D:DE:A3:DE:B0:D5:27:A7:5C:1B
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1E2EDFB398038CA8BC4A833FF2B53DB3063464E1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b6c271f1-22dd-4f3f-bd21-0433df20e16a.roa
Signing time:             Wed 16 Aug 2023 00:00:00 +0000
ROA not before:           Wed 16 Aug 2023 00:00:00 +0000
ROA not after:            Wed 20 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2e:df:b3:98:03:8c:a8:bc:4a:83:3f:f2:b5:3d:b3:06:34:64:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 16 00:00:00 2023 GMT
            Not After : Sep 20 23:59:59 2023 GMT
        Subject: serialNumber=08853e5cb5e02370e0dd8f5e70ad750454266eb19451475032521dd697714279, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:c5:0c:68:8d:75:3f:d9:dd:a8:75:7b:58:
                    4b:4f:75:08:86:76:70:19:f1:0f:6b:0c:ba:24:ec:
                    fa:49:67:ea:f7:6e:8b:77:e9:2c:69:69:7e:f6:b2:
                    f7:c2:f0:85:22:d8:3d:15:a9:b2:99:06:d4:8d:eb:
                    d6:df:39:98:93:d8:9c:ac:1d:40:ae:0a:c4:4b:bf:
                    d8:ce:27:7e:8d:e0:45:ac:c3:3c:50:b1:f0:4c:9b:
                    37:31:59:0b:96:77:d3:e0:48:a2:54:69:5f:8d:d2:
                    56:22:c7:cc:6b:0f:67:03:01:df:38:84:f5:d1:12:
                    f6:41:4d:55:b2:5a:af:46:d6:b7:b4:3d:a9:42:1d:
                    8d:b5:20:8b:61:88:f5:c4:88:4e:5d:50:d7:09:80:
                    38:98:2f:d0:79:6a:33:28:5a:30:47:e4:6a:cf:20:
                    95:10:9a:6e:5f:5d:ca:fb:fd:fb:df:0b:7f:fb:f2:
                    19:ef:37:41:23:71:4c:74:68:40:4f:ce:40:ad:c3:
                    40:25:78:7e:c6:b6:ed:fc:97:9d:18:17:d0:5f:a3:
                    09:0e:c1:93:ce:11:c4:7b:c4:a3:ff:96:da:ff:c9:
                    9a:b7:41:18:49:e6:d0:12:a6:98:ac:f8:ce:5d:5f:
                    50:1a:50:09:db:23:80:93:ec:a7:54:af:1a:8b:9d:
                    3b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:89:31:FC:FD:8B:47:B3:10:D1:1D:DE:A3:DE:B0:D5:27:A7:5C:1B
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b6c271f1-22dd-4f3f-bd21-0433df20e16a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:bb:22:77:dc:ad:3b:d0:31:f6:e1:61:08:96:f8:49:55:ea:
         f2:b0:95:8d:0a:2d:82:2d:0d:28:06:e8:ba:c1:cd:98:cf:15:
         6b:08:6d:f1:8c:6c:7f:fa:a6:69:ba:08:05:e3:10:b8:c9:db:
         f5:bf:14:89:3e:71:c3:20:20:56:6b:81:ac:08:bf:28:28:62:
         7e:93:2b:72:b1:fa:a0:79:f7:1d:32:43:e1:29:aa:d1:0e:2b:
         f4:6b:85:21:54:61:89:f1:b4:95:d5:ae:65:1e:c6:fb:35:3b:
         49:5c:28:4d:79:22:25:e9:9b:b2:5e:05:3b:d9:4c:d7:8a:1f:
         0b:8c:e8:6e:63:08:25:29:8c:ed:f7:7c:b6:83:fb:35:19:d5:
         9d:d4:89:f0:6d:4f:35:0c:ff:f4:a3:99:92:25:e5:bc:8f:31:
         53:53:1a:27:8c:30:d0:81:b1:96:80:ef:81:0e:93:7a:50:3a:
         83:17:62:dc:10:5e:c9:a1:29:dc:a4:a3:c5:0f:87:16:05:d9:
         ac:ca:b2:8b:93:b6:28:69:3f:90:28:45:8c:af:b7:2a:81:53:
         f7:a1:14:d1:f8:c7:0c:53:f7:a6:b4:49:80:4b:ce:e6:67:76:
         be:5d:2f:56:43:b8:7a:92:42:1b:34:9a:a4:b0:55:0b:54:4c:
         3a:70:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----