Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dbc49130-93d2-4c53-b618-a0e668d8d497.roa
File:                     dbc49130-93d2-4c53-b618-a0e668d8d497.roa (raw, json)
Hash identifier:          uMeu0oW97M9SWhgwnFdjDYDvPZ2I0NLmBeINWuUFnco=
Subject key identifier:   E0:82:1E:E3:7F:0D:57:AB:46:92:EB:43:F1:AA:E7:6C:C8:F6:4A:1F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       20A3D7F64E8D0FF967BF1B865CA236593DCDBD5E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dbc49130-93d2-4c53-b618-a0e668d8d497.roa
Signing time:             Tue 19 Sep 2023 00:00:00 +0000
ROA not before:           Tue 19 Sep 2023 00:00:00 +0000
ROA not after:            Tue 24 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a3:d7:f6:4e:8d:0f:f9:67:bf:1b:86:5c:a2:36:59:3d:cd:bd:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 19 00:00:00 2023 GMT
            Not After : Oct 24 23:59:59 2023 GMT
        Subject: serialNumber=ac27f3f180515d99add793ad0435b37e8d1acd1d19b845dfa3b778346b5daecb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:a8:e2:f8:79:46:c6:cd:e9:d3:a6:4f:25:
                    02:ef:1c:33:ec:e0:58:c7:d2:d2:2a:a4:00:39:98:
                    62:9c:69:21:b3:b2:a9:9a:b9:6c:a5:5b:b9:25:7c:
                    e1:9c:fb:73:d3:a0:63:8b:7b:44:75:71:61:17:40:
                    64:a8:91:86:fd:07:64:72:85:44:1b:24:26:4d:49:
                    cd:2a:f0:a6:04:6a:51:b8:7a:74:11:53:51:6b:fb:
                    8e:9e:39:c8:30:b4:a9:67:2a:7a:b1:15:67:1d:2c:
                    f1:d5:cd:98:13:ec:74:80:d1:9d:80:43:38:62:4a:
                    a3:a6:62:26:a9:55:c4:31:1d:cd:90:6f:69:f6:c3:
                    6c:b6:54:2c:a7:65:48:82:f3:c7:ed:56:12:7e:c3:
                    a3:06:27:9d:5f:19:d9:ed:5c:b3:e0:5c:6e:9a:cc:
                    87:04:22:9a:e8:0a:e4:0f:be:1a:53:86:3d:c7:a6:
                    8e:3a:3f:6b:6f:4e:70:b6:46:fc:a9:c1:51:35:44:
                    aa:07:87:0d:5f:0a:cd:fd:e2:44:9f:6a:7b:24:75:
                    f5:86:e3:63:9c:a8:65:12:67:c2:61:dd:2c:c3:5e:
                    df:c9:71:5c:ed:2d:72:dc:b1:4b:65:c9:03:88:15:
                    67:44:de:99:84:32:59:17:01:5a:b3:97:e0:39:2e:
                    1a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:82:1E:E3:7F:0D:57:AB:46:92:EB:43:F1:AA:E7:6C:C8:F6:4A:1F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dbc49130-93d2-4c53-b618-a0e668d8d497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:12:95:2a:16:f4:be:34:fa:c6:62:da:f1:be:f0:40:82:0a:
         c0:3d:bb:6c:66:0a:ba:6e:b7:b3:ed:57:3a:84:6f:7f:71:11:
         3b:59:24:95:f9:aa:a8:de:a9:04:a0:c7:d4:04:a2:87:b0:cb:
         19:b6:f4:9e:80:ab:1e:d6:e2:97:bf:da:11:32:b3:4c:91:6b:
         9a:e9:43:a4:fe:9b:32:eb:b7:e4:b1:1e:45:04:7f:dd:ab:76:
         7d:66:c5:7a:2f:a9:e5:8d:ec:83:4c:95:e8:7c:51:85:bb:84:
         c5:bc:d0:d0:eb:02:4f:4b:1d:6e:19:7b:7c:4b:4b:3f:66:4e:
         e2:e4:c9:ab:cc:dc:e6:a9:ee:3e:88:98:69:21:1e:18:a2:01:
         c8:ca:75:98:f2:aa:a9:41:29:b8:9f:b5:9a:1e:e7:47:5e:5e:
         b3:02:50:4c:54:86:7a:55:45:82:55:b3:c6:ad:81:99:97:9c:
         61:59:c0:b0:00:d9:e0:5b:c1:92:5f:70:77:68:1f:e7:f4:aa:
         2e:09:0d:22:ee:18:b7:35:aa:99:5e:be:ad:c3:f3:6b:a1:8b:
         03:6d:78:63:47:96:4a:eb:27:cd:81:84:26:27:00:a0:8d:d3:
         52:f5:8d:57:cd:ec:e3:9f:8d:44:a7:a2:c3:59:50:b9:15:c0:
         b9:53:77:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----