Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cec8ccb7-ef18-408e-9654-16a6c627dfa4.roa
File:                     cec8ccb7-ef18-408e-9654-16a6c627dfa4.roa (raw, json)
Hash identifier:          BCLZnrK2SZ1ia1AK//DsxIcGMyWSFQ0MkNtGE38VLz0=
Subject key identifier:   A4:5A:87:6C:E3:46:3F:DC:25:57:DC:EB:33:E7:EE:88:DC:82:85:0A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6D1ACF89114959FBC21AA02344BC09F0905F28E2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cec8ccb7-ef18-408e-9654-16a6c627dfa4.roa
Signing time:             Mon 14 Aug 2023 00:00:00 +0000
ROA not before:           Mon 14 Aug 2023 00:00:00 +0000
ROA not after:            Mon 18 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1a:cf:89:11:49:59:fb:c2:1a:a0:23:44:bc:09:f0:90:5f:28:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 14 00:00:00 2023 GMT
            Not After : Sep 18 23:59:59 2023 GMT
        Subject: serialNumber=795cc0fc3ac30ce5a1e74c7cf486b5500553ab6c434e09f620f41b86deffb15c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d7:99:f7:18:74:cd:cb:78:e4:80:9f:b4:7e:
                    34:16:e0:68:a1:94:d1:e0:1d:92:1d:64:39:13:91:
                    42:0f:ee:58:b4:6a:fb:4e:29:a5:db:97:cd:42:65:
                    49:1c:36:72:f9:cb:c4:88:97:5c:f9:2b:8e:23:1d:
                    cb:1e:29:81:99:54:91:2a:93:9e:47:91:ab:85:a8:
                    34:62:2e:09:04:7d:0e:29:14:13:af:8c:80:1e:c8:
                    81:6f:cf:85:71:ce:a4:18:cb:d4:31:fa:34:4b:c7:
                    17:a6:bb:49:88:b4:0b:38:f5:f3:ce:8d:ce:a9:9c:
                    3a:0a:f9:31:3a:55:18:bc:83:1f:3d:ca:c3:ba:e1:
                    54:2a:47:c1:89:c7:67:49:17:cc:47:f8:bc:42:19:
                    7c:84:bb:68:5a:f8:09:0b:8d:b6:c2:27:48:9c:3a:
                    a8:28:d0:5c:dd:c6:3c:2a:ee:63:4c:60:99:96:f7:
                    cc:84:14:fd:59:01:0c:ae:b7:c4:26:bd:c1:3f:fb:
                    d8:26:06:b2:b8:2d:24:f9:d1:08:08:f4:94:e4:3d:
                    30:3b:07:9d:4a:43:c5:bb:c3:44:b1:84:83:14:70:
                    97:6c:f2:74:1a:4f:e7:1a:f6:14:3b:a0:1b:a9:3f:
                    ff:8c:08:8e:94:29:2f:b8:52:76:ff:06:aa:65:e9:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5A:87:6C:E3:46:3F:DC:25:57:DC:EB:33:E7:EE:88:DC:82:85:0A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cec8ccb7-ef18-408e-9654-16a6c627dfa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:11:3c:39:56:a0:12:8a:88:f7:42:78:92:be:b1:0d:26:06:
         9d:22:15:c0:1a:93:55:6c:f2:c8:d0:70:95:4e:5b:20:67:18:
         87:66:e5:e5:16:b7:ad:3e:05:a5:08:94:cf:e6:dc:c9:7f:89:
         71:f9:8e:45:29:f7:93:c2:08:6c:f5:c2:79:35:d2:7a:ae:6e:
         30:39:55:5c:a5:7a:cb:18:c7:35:6b:fc:1a:50:56:51:29:41:
         30:8c:74:b6:28:bc:48:06:be:3d:41:5a:47:c7:d3:df:a4:3a:
         aa:92:f4:ac:25:7c:ad:c8:27:0a:80:5e:cf:75:c8:4c:27:6c:
         b5:1c:b3:2d:65:af:40:f1:1a:5e:da:7e:7c:17:91:39:f0:bb:
         32:5f:32:b8:d3:0c:46:f2:30:92:bb:be:4e:cb:8d:d1:6f:41:
         45:f0:3c:cc:03:a9:e1:7c:25:3f:e9:6e:50:24:1c:6a:72:b9:
         eb:45:24:04:80:53:0c:f2:d6:4e:ae:df:9c:fa:f2:13:30:cd:
         ad:cc:d4:df:a1:42:ce:b0:a9:ce:32:35:d8:78:ab:c1:b9:b5:
         46:96:a7:d1:09:3c:66:77:7c:a0:24:55:2a:4f:62:e4:fa:c7:
         62:1a:ba:21:f0:0a:67:8b:49:d5:d5:6b:9b:38:bb:c5:ae:50:
         97:4e:e3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----