Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce9de062-dad1-41e9-9546-f9ffa5ca205e.roa
File:                     ce9de062-dad1-41e9-9546-f9ffa5ca205e.roa (raw, json)
Hash identifier:          1OMWg7AOSSp8GR0X33ilImyO2eEO+aghe66sRMYhB+E=
Subject key identifier:   DC:D5:CF:05:0F:29:83:AA:A3:76:B9:63:29:73:5E:E8:93:87:A3:90
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7C378605E89226D94A882D57286BC4DF171D8C71
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce9de062-dad1-41e9-9546-f9ffa5ca205e.roa
Signing time:             Mon 17 Jul 2023 00:00:00 +0000
ROA not before:           Mon 17 Jul 2023 00:00:00 +0000
ROA not after:            Mon 21 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:37:86:05:e8:92:26:d9:4a:88:2d:57:28:6b:c4:df:17:1d:8c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 17 00:00:00 2023 GMT
            Not After : Aug 21 23:59:59 2023 GMT
        Subject: serialNumber=89033b7b99f129ca7f1ba57f88fb4c24bd7ac84cdfd450621442d3f82cb1626b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f6:46:17:fc:24:6a:73:31:ec:b8:85:45:12:
                    a4:93:35:b2:c5:1a:ff:c2:89:8f:73:8b:1b:1c:78:
                    da:bb:06:94:55:62:72:f7:20:0a:01:7c:fd:5a:14:
                    68:42:d9:f4:4e:25:3e:ce:ac:88:34:48:1b:87:50:
                    71:2d:91:7d:35:8d:2c:f2:fd:60:11:32:a1:c8:59:
                    2b:e1:34:19:64:92:fb:17:43:5d:86:e7:97:c0:a1:
                    f4:25:78:5a:ea:b1:3b:e0:ff:a3:b9:84:82:0a:be:
                    1c:ff:d0:d7:fe:31:7f:9d:a1:e4:58:d6:19:fd:6d:
                    36:bd:6d:74:2c:fa:a2:1a:81:dc:d5:4c:af:ee:9c:
                    66:5c:a4:98:ec:08:0e:b5:1a:49:45:e6:9d:a9:b9:
                    9c:c6:11:4f:4f:37:fe:ec:fa:30:8f:4c:ba:dc:e3:
                    47:73:fe:62:03:26:54:72:4e:08:4f:5c:27:21:13:
                    b5:fb:71:90:2f:c8:d2:91:4a:50:ea:6e:8f:5c:94:
                    d3:15:1f:64:c7:4a:47:63:60:dc:c6:11:b1:ee:3d:
                    fa:c9:7e:41:13:32:0a:41:34:42:5f:ce:cd:89:f5:
                    92:53:fb:55:45:61:7a:5e:57:c3:63:8b:e6:eb:ab:
                    c7:1e:65:e5:6a:24:a3:c8:df:33:4d:a0:b9:78:c3:
                    06:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D5:CF:05:0F:29:83:AA:A3:76:B9:63:29:73:5E:E8:93:87:A3:90
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce9de062-dad1-41e9-9546-f9ffa5ca205e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:df:d2:ee:87:1e:b5:b5:86:b5:3d:d5:d6:02:69:5a:d1:d8:
         37:4e:19:36:54:30:a3:2d:21:85:50:c2:ff:87:fa:c3:23:17:
         7e:4f:c8:75:29:ab:7d:0e:a8:64:8d:2c:8d:a4:14:d0:e8:b8:
         d3:c4:45:40:3f:90:ca:ba:de:fe:7d:b0:05:c2:b9:3e:b4:f8:
         ae:13:17:97:d9:6e:03:90:e7:27:04:82:ca:1d:80:2c:40:3e:
         ec:2c:b6:ab:4b:41:2d:a1:ba:20:55:4a:52:5f:29:a0:e6:76:
         09:23:de:db:6e:95:d8:bd:f5:76:6c:56:21:d4:f0:d0:a9:d4:
         44:26:08:50:eb:87:ed:1f:08:9b:11:4f:85:d4:c2:16:07:31:
         94:cf:38:21:4d:be:68:13:11:34:dd:cc:6b:de:09:51:35:03:
         85:eb:d3:f4:ff:36:c0:b2:63:81:17:5b:dd:ac:83:e3:34:24:
         f2:28:ec:59:2b:dd:64:a4:59:1c:c8:c6:5a:30:0d:ae:f5:84:
         25:34:a1:3f:db:76:14:7d:e4:7c:74:e9:fd:d1:1c:44:44:43:
         bc:bb:01:f9:b0:9f:45:ee:85:74:39:36:8a:df:dc:b4:12:79:
         01:ec:77:c0:76:7b:c8:e5:19:b6:64:90:16:bc:54:ea:af:5f:
         46:08:97:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----