Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c73b1a85-0908-4999-a567-2421ec49e1e5.roa
File:                     c73b1a85-0908-4999-a567-2421ec49e1e5.roa (raw, json)
Hash identifier:          /oR2yl5au2p03JUr42/S4Ndc6KvnWzQ/Qvtx0GIRZjY=
Subject key identifier:   3B:31:C9:D6:A9:8D:1B:1D:BF:01:FB:F2:9E:76:9E:91:78:86:62:6B
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2CBA77C0AFC3DF036A1DA76441476C2BCA8EE3D8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c73b1a85-0908-4999-a567-2421ec49e1e5.roa
Signing time:             Tue 15 Aug 2023 00:00:00 +0000
ROA not before:           Tue 15 Aug 2023 00:00:00 +0000
ROA not after:            Tue 19 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ba:77:c0:af:c3:df:03:6a:1d:a7:64:41:47:6c:2b:ca:8e:e3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 15 00:00:00 2023 GMT
            Not After : Sep 19 23:59:59 2023 GMT
        Subject: serialNumber=2a2b649e8507a31ced906b1354f6599022d60d45b85b7d53c9c7ce04187eb6fe, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:11:92:70:8d:c1:10:fc:50:ab:ff:76:92:7a:
                    46:7f:67:b7:5e:61:69:71:86:21:2b:75:24:77:7e:
                    77:0b:09:d0:0a:e2:d9:96:ee:1e:80:a2:b7:bf:c6:
                    0d:1f:86:da:51:7b:34:8f:6c:8a:03:cb:07:1a:e4:
                    e6:da:51:07:7a:aa:b0:9c:34:93:d9:8a:6b:8d:89:
                    05:61:28:76:74:b0:9a:1b:11:a7:b5:1d:85:93:d0:
                    5e:fc:e7:50:b9:85:42:49:8e:93:8d:bd:5b:3f:56:
                    3a:e3:64:d0:bd:4e:09:11:ae:30:7f:cc:85:a7:a2:
                    40:98:0e:b8:a9:80:50:b5:e2:e0:ed:4a:83:00:ae:
                    26:36:56:0b:de:f2:67:ef:63:a2:d3:e9:eb:4e:31:
                    17:9c:03:95:b5:16:d7:cd:a6:5f:3f:12:ad:38:9b:
                    be:70:19:25:9d:c9:11:19:d9:b2:24:45:6a:f1:b4:
                    8b:48:2b:77:53:6a:35:57:58:fb:c4:df:78:9a:a2:
                    9a:35:5f:95:f1:3c:64:4a:86:f4:94:08:d1:24:29:
                    b0:86:bc:92:a7:38:57:ef:e9:c2:1c:97:ff:de:33:
                    26:f1:fe:ec:ad:4a:7c:dd:9b:05:bc:78:8c:b6:f7:
                    47:15:bb:8b:59:d8:0c:88:8c:19:a1:4b:6c:08:84:
                    67:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:31:C9:D6:A9:8D:1B:1D:BF:01:FB:F2:9E:76:9E:91:78:86:62:6B
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c73b1a85-0908-4999-a567-2421ec49e1e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:dd:e1:9b:0b:65:42:5f:81:d4:8d:cc:cc:68:11:4b:26:06:
         2e:7a:81:3b:fa:a6:d7:6c:fa:c7:17:03:c8:e3:17:c5:f1:c6:
         65:41:16:b4:61:3f:aa:8c:cd:10:07:ea:fa:5b:5c:8f:66:8c:
         a0:4d:3c:e2:14:f1:91:c4:cb:cf:7f:24:8d:2d:27:79:ea:5f:
         db:d0:c1:0d:a1:33:f2:28:b6:32:71:99:8e:5d:20:a7:20:e3:
         57:46:4c:0c:30:b4:82:c7:fe:9b:43:73:57:8a:96:2a:4b:3d:
         27:d7:94:ec:e3:09:0b:9d:40:73:2d:0e:cb:a4:cd:6c:09:93:
         4b:75:df:9c:c4:de:80:48:ff:30:ee:b3:d4:63:27:f9:62:a0:
         e2:fd:9e:3d:1a:c5:d9:50:c0:ef:7e:e4:ee:fc:5b:42:eb:0d:
         07:3e:01:fb:87:c5:76:5c:02:fe:51:22:44:bf:7c:85:d0:8d:
         c8:78:6b:2e:7f:ff:8a:30:0b:be:c4:c9:66:26:3a:ef:11:ef:
         1c:99:37:8d:7a:25:a4:37:2a:ca:5a:ce:b6:0c:ae:1c:9c:2e:
         b3:e7:36:68:8b:d2:7b:d8:46:a3:da:b4:26:c4:95:6b:cb:4d:
         4c:6e:24:ac:42:e7:dd:f6:cb:7d:e4:3f:2b:61:98:9f:44:0b:
         f3:7f:e1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----