Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b7a4b931-244b-4917-8988-4caf7abf0e60.roa
File:                     b7a4b931-244b-4917-8988-4caf7abf0e60.roa (raw, json)
Hash identifier:          7uEAaczB9ger8f6NXjzWdqHAt8U/SoQYA/NSwkFKg/U=
Subject key identifier:   71:87:77:08:67:F4:FE:58:1D:41:CC:B3:0C:12:9F:46:68:43:A0:3E
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       350506CC61DDA916FE9D4DACA1981534709DA065
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b7a4b931-244b-4917-8988-4caf7abf0e60.roa
Signing time:             Thu 13 Jul 2023 00:00:00 +0000
ROA not before:           Thu 13 Jul 2023 00:00:00 +0000
ROA not after:            Thu 17 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:05:06:cc:61:dd:a9:16:fe:9d:4d:ac:a1:98:15:34:70:9d:a0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 13 00:00:00 2023 GMT
            Not After : Aug 17 23:59:59 2023 GMT
        Subject: serialNumber=8ef66cc581cd70bedd79492282f45eedef3430901dc42a6fd19ae77b46fa10b6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:71:32:52:8b:d3:97:c4:7a:3c:da:cd:13:
                    80:83:83:09:19:3d:4f:16:79:eb:4e:7f:37:59:b6:
                    5d:c9:9e:80:02:aa:2a:59:85:4e:e3:c4:17:2f:5e:
                    bd:97:17:2c:39:e9:4a:88:2a:8f:a6:90:25:20:d5:
                    5c:e7:dc:e3:cb:ab:2d:1a:99:38:df:3b:14:e7:17:
                    61:0a:bd:16:23:a9:cd:9f:e4:90:4a:12:5d:14:38:
                    ca:b0:b4:4b:64:b9:fd:9c:63:2a:97:01:84:26:69:
                    53:ef:24:05:54:21:a0:f7:ce:7f:27:db:94:41:43:
                    49:71:ec:71:66:f2:d6:35:77:51:83:f8:f6:79:4c:
                    fa:03:6a:d2:94:3a:65:f7:28:d5:2c:fd:6a:6b:e8:
                    33:79:87:3a:e6:5c:25:71:01:a9:fc:de:ad:cc:92:
                    7d:51:c9:b0:de:de:4f:cb:02:0a:a2:5c:d0:67:ad:
                    87:25:5d:36:8a:db:9b:c6:06:af:4f:68:6a:ef:4f:
                    1b:38:cb:96:75:59:cb:5f:ea:e3:cb:e9:c0:74:9b:
                    d0:45:b9:fd:16:45:cf:75:af:f6:50:18:31:ef:71:
                    68:09:76:85:81:27:78:92:8d:61:8b:8e:1a:56:7f:
                    78:b7:ab:09:34:bd:12:30:dc:48:6b:08:f0:ac:7f:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:87:77:08:67:F4:FE:58:1D:41:CC:B3:0C:12:9F:46:68:43:A0:3E
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b7a4b931-244b-4917-8988-4caf7abf0e60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:39:f3:45:3f:bd:41:33:28:17:40:6b:b3:b4:d4:e8:f2:1d:
         9e:e6:33:93:f6:3c:f2:9b:fc:a4:7d:75:d9:c6:23:f5:b4:26:
         92:32:b6:b5:5f:31:9a:e3:2f:a1:f0:17:a8:31:26:ea:96:42:
         73:5a:7f:2d:98:a6:3f:db:a3:b9:d9:67:15:03:ce:4c:72:6a:
         6e:e6:ac:a3:c6:01:f4:de:56:5b:0d:1a:a1:a2:16:08:ef:64:
         47:77:20:4d:6d:6f:42:f4:a8:48:ad:5a:33:89:ec:93:84:e6:
         10:f1:11:0f:79:7b:9f:98:10:fa:f9:c5:ea:13:06:46:45:49:
         b6:dd:fb:f7:37:cc:1c:a1:4d:71:7c:18:f4:53:93:d2:cc:6b:
         de:ac:0c:e9:b0:0d:d7:bb:12:d9:8c:6c:c2:7e:b3:c0:e0:ac:
         97:31:58:c2:5d:d4:0a:ee:78:49:88:61:11:be:70:fb:cb:c0:
         9e:58:cc:14:f1:c1:7c:0e:db:4f:70:77:44:ee:00:ff:c1:82:
         92:ed:e2:80:5d:3e:ea:93:77:95:03:8a:e5:dc:43:da:9c:7a:
         3c:eb:8d:46:4c:05:f9:69:2a:7b:a5:69:cc:38:8c:3c:c7:30:
         9a:63:7e:5e:9d:5d:13:f6:01:a7:ca:6c:df:54:0c:1d:e4:1f:
         77:97:1d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----