Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d482005e-29d3-4474-b080-3f72a55d3f30.roa
File:                     d482005e-29d3-4474-b080-3f72a55d3f30.roa (raw, json)
Hash identifier:          s8Wkyd696oJ97vtqVeA4McOvBYIbNhv+e/nUaXIkXrE=
Subject key identifier:   24:5F:D7:23:10:2B:D7:47:B1:AB:05:35:09:FF:C9:16:84:7D:3D:E6
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4A063F974819A440361F67C1A7066DB6F49EA737
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d482005e-29d3-4474-b080-3f72a55d3f30.roa
Signing time:             Thu 29 Jun 2023 00:00:00 +0000
ROA not before:           Thu 29 Jun 2023 00:00:00 +0000
ROA not after:            Thu 03 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:06:3f:97:48:19:a4:40:36:1f:67:c1:a7:06:6d:b6:f4:9e:a7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 29 00:00:00 2023 GMT
            Not After : Aug  3 23:59:59 2023 GMT
        Subject: serialNumber=af184745d7d39e44579cef327508ee146d929d32ef639cf78d9ec88b3ab91f20, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:37:40:4b:a1:ed:b7:e1:b9:69:3d:ff:2e:2c:
                    76:10:07:0f:40:a1:12:48:99:cd:50:8e:bc:bb:e4:
                    c3:a7:9a:e8:b5:37:8a:8e:d1:e1:66:5e:96:76:d3:
                    53:af:2a:c5:96:82:fa:45:0c:82:fa:3c:7a:44:60:
                    55:5b:51:21:07:48:9a:67:2c:2f:03:bd:d5:7c:66:
                    60:78:13:6a:e0:c7:9f:fb:77:67:dd:18:75:b5:64:
                    41:28:4c:ea:31:c6:f1:e6:e8:7b:10:fd:d4:1f:4a:
                    dd:e2:fb:51:16:b8:2c:a7:2b:9a:c4:85:84:06:89:
                    da:44:5b:8a:81:76:62:37:ab:5e:22:bd:e7:c1:12:
                    a7:e9:a2:78:5c:30:b6:2e:56:26:a5:97:9e:9b:5b:
                    84:27:b1:f0:2e:8d:58:af:db:80:af:7a:14:43:bf:
                    20:8c:3a:73:bd:93:19:b9:fa:66:c4:f1:5e:14:e6:
                    17:89:a3:27:19:4d:42:49:3c:b2:9f:3b:6e:c6:e8:
                    c7:b9:47:c5:85:ec:5d:3d:26:2d:96:5f:2e:0e:26:
                    57:c0:c0:e3:ae:dc:bb:bf:a8:19:41:2c:30:37:b4:
                    bf:ac:0d:e6:bd:12:61:a2:f0:62:3e:01:15:53:88:
                    16:5e:68:b8:99:94:8f:e9:cb:92:05:4b:87:d2:2e:
                    b8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5F:D7:23:10:2B:D7:47:B1:AB:05:35:09:FF:C9:16:84:7D:3D:E6
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d482005e-29d3-4474-b080-3f72a55d3f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:ab:c6:2e:3a:a3:10:99:06:5b:bc:df:00:b6:ae:40:89:cd:
         17:d4:f5:88:45:17:48:99:db:13:e0:e7:ed:82:0d:23:ad:1f:
         11:99:84:f9:00:f4:7d:b8:4f:e5:50:13:3d:a4:74:6e:fa:9d:
         43:67:31:eb:f2:d0:92:12:60:4e:a0:8f:bd:1b:91:ab:5a:ef:
         8e:c0:9c:27:d2:e6:13:96:32:10:df:f2:d7:b1:5d:f0:eb:d8:
         53:1f:b4:75:48:df:90:e5:6e:0f:a7:13:50:53:b7:d2:ca:21:
         d8:a3:00:91:bf:7b:14:f1:2d:2f:12:ba:34:13:32:97:94:1d:
         69:e3:c6:2c:a1:28:dc:0c:73:f4:fc:87:0b:8d:bb:06:f1:15:
         ac:81:ed:74:cd:ac:3f:ac:b0:9d:5f:77:63:30:9b:46:c0:0f:
         5f:bb:a2:94:70:c5:a8:31:26:99:d2:b3:07:ca:3f:57:88:36:
         e7:3e:2d:c7:5e:48:79:2e:11:07:2a:bb:9c:df:0c:cf:08:cd:
         2c:d0:e9:72:9b:45:8a:d6:72:ca:b1:79:03:b5:e8:5f:2f:d9:
         e3:86:51:68:31:29:87:25:20:a1:6b:7e:a5:bb:af:7c:11:37:
         7b:8a:33:e2:e5:82:3c:39:71:50:73:7b:43:03:09:2b:03:f8:
         cb:62:a5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----