Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba2988eb-927c-4e31-93be-5bceb25713bf.roa
File:                     ba2988eb-927c-4e31-93be-5bceb25713bf.roa (raw, json)
Hash identifier:          wVaYD69lXAcHBw4hEtpIlTffPiKlJarpdbNAERa+5X8=
Subject key identifier:   A7:33:47:36:E1:8E:13:B8:07:A0:F8:A5:79:74:A9:19:17:E3:70:BF
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       161449A1BE3ECFBC659C7EB3F9F90BEBD79DBB52
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba2988eb-927c-4e31-93be-5bceb25713bf.roa
Signing time:             Sat 19 Aug 2023 00:00:00 +0000
ROA not before:           Sat 19 Aug 2023 00:00:00 +0000
ROA not after:            Sat 23 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:14:49:a1:be:3e:cf:bc:65:9c:7e:b3:f9:f9:0b:eb:d7:9d:bb:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 19 00:00:00 2023 GMT
            Not After : Sep 23 23:59:59 2023 GMT
        Subject: serialNumber=8d381f6e2dbd75e0f1062d9388db800e21fade2f40237a58442beb65c347c7fb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ff:d3:a2:6c:cb:5d:9a:69:e1:ad:32:bc:d8:
                    4a:d5:f8:79:1d:35:37:57:d1:7b:1c:ff:38:9c:db:
                    87:17:84:59:8e:aa:74:6e:79:80:b0:2c:7e:87:8e:
                    a3:73:7e:fd:dd:f5:39:84:68:cc:1c:e0:97:45:e5:
                    f6:ca:df:45:dd:ce:2b:e5:8e:97:a3:df:73:a7:7f:
                    3d:f8:33:d8:d3:4e:96:f1:5b:8d:a6:fa:13:90:af:
                    8a:ad:35:27:77:c3:18:6e:8c:ad:db:eb:02:70:82:
                    42:f7:26:11:76:44:fd:06:cc:0f:27:e0:9f:77:b6:
                    67:bd:b3:a9:72:6a:bb:01:9d:77:93:1c:7d:ae:f8:
                    9b:87:78:8d:5a:6d:86:e7:cf:76:e7:49:16:f3:23:
                    ef:df:cb:d5:a1:74:04:81:8d:60:b9:60:bf:8e:5d:
                    42:f8:b4:c2:97:eb:c6:89:19:a7:23:34:85:55:5c:
                    c1:da:14:7f:12:aa:0b:f3:38:a3:5c:7b:d0:60:22:
                    30:94:8b:67:13:56:c7:5e:e2:d0:6d:8b:e2:df:28:
                    c6:69:5a:01:54:1b:1f:7d:67:20:9d:c3:58:40:68:
                    54:5d:a9:67:59:40:a5:d7:93:00:d2:48:62:bc:b5:
                    ad:66:28:a6:14:cf:ed:ce:cf:ba:84:6a:2a:cd:a5:
                    41:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:33:47:36:E1:8E:13:B8:07:A0:F8:A5:79:74:A9:19:17:E3:70:BF
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba2988eb-927c-4e31-93be-5bceb25713bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:25:3b:7f:7c:7c:b5:5f:88:a0:08:fa:93:d8:10:2f:b1:2c:
         dd:57:24:7b:14:01:29:7a:67:4e:b4:02:32:d6:37:32:33:4b:
         f8:d3:5e:29:26:ac:a0:2f:31:a3:15:ba:ff:c2:53:61:83:b6:
         57:99:e9:c0:7a:5f:37:ad:77:3a:08:32:b9:2f:06:91:c3:d9:
         90:c4:4a:c6:3b:f9:50:cb:dd:a9:07:f5:af:d2:60:ed:33:e0:
         3c:83:05:b0:4c:17:b6:cc:a3:fc:c6:97:ff:14:a5:db:6b:bd:
         59:44:0d:53:f1:ae:92:e1:9b:a7:99:47:72:94:90:94:0a:36:
         6d:38:0f:c7:64:ed:8c:c7:51:f3:31:65:ca:f9:bc:0c:d3:ad:
         41:11:6c:7d:3c:27:5f:7b:59:b9:95:26:7f:c0:3f:ca:89:40:
         fe:a2:2a:1b:a1:6c:9f:a5:ac:16:01:6e:07:e1:4b:3a:e0:ca:
         b4:42:a4:1b:fa:f9:cd:26:0c:59:26:40:88:07:00:a9:c4:ef:
         2e:8e:49:ce:e6:4d:dc:8c:5b:fa:98:ec:ae:7d:10:10:a2:8f:
         69:c6:c5:7a:37:25:d4:9b:f0:8b:69:bf:3d:32:db:de:86:a4:
         ba:1e:fa:ed:97:75:58:16:01:52:f9:3d:ae:02:10:6b:22:7c:
         d0:12:ea:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----