Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/df92e5e4-dfb8-44c3-8671-b7452a275387.roa
File:                     df92e5e4-dfb8-44c3-8671-b7452a275387.roa (raw, json)
Hash identifier:          rkYmshOXuvzS6fhlg9g1CIoPbyGJbxKIlzBcbBrXgn0=
Subject key identifier:   13:C4:77:C3:C3:F9:7D:1A:B7:9B:53:FF:19:64:BB:4B:47:E5:17:6B
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       399825D497BC31D2353269739044DF0B6E458F68
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/df92e5e4-dfb8-44c3-8671-b7452a275387.roa
Signing time:             Wed 06 Sep 2023 00:00:00 +0000
ROA not before:           Wed 06 Sep 2023 00:00:00 +0000
ROA not after:            Wed 11 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:98:25:d4:97:bc:31:d2:35:32:69:73:90:44:df:0b:6e:45:8f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep  6 00:00:00 2023 GMT
            Not After : Oct 11 23:59:59 2023 GMT
        Subject: serialNumber=ae9d4518d368e2796db627930aec10702eff7c756cb81c2f1d778c324f33bb9f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:a9:b3:33:af:13:33:46:ba:db:a3:5e:36:
                    b1:f8:c0:dc:c4:e4:7f:40:6c:95:08:ed:d6:3e:e9:
                    5c:77:06:ee:de:12:3a:e7:da:3f:f2:62:7c:a8:dd:
                    1e:56:e3:16:e9:f3:0f:4a:06:75:4c:4c:d5:8e:65:
                    c3:6f:13:f0:fb:8d:6e:4f:5c:a9:c4:71:d8:23:e3:
                    06:36:52:75:c1:07:d0:68:5f:25:2a:09:a6:3b:43:
                    58:a0:59:a9:3a:28:14:64:61:c9:c3:9c:55:46:11:
                    72:c5:79:73:76:b7:f2:f3:76:4c:b7:4f:05:f0:f3:
                    0b:f2:e7:f3:76:e1:a1:3d:85:93:a1:c6:fb:55:72:
                    e8:a1:31:5e:ae:07:0c:d2:8e:ec:e6:7d:ad:b0:12:
                    cb:8d:c9:6b:81:83:f1:84:a2:a0:bb:0a:68:de:be:
                    c4:e2:f6:a0:cd:0e:36:ab:97:10:95:b3:68:2c:46:
                    9b:7c:79:f9:56:60:ee:d4:69:e4:b0:dc:17:95:54:
                    bd:f5:64:4d:d4:ab:bb:5e:15:53:7b:8c:08:6b:76:
                    32:00:7c:a5:0a:58:77:2f:36:77:a5:b3:a0:70:ba:
                    7b:c9:d6:f2:40:20:10:37:2a:5c:14:d6:13:15:e2:
                    e5:ca:aa:63:07:ac:fe:99:cb:70:f6:1d:c0:c3:ba:
                    c6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C4:77:C3:C3:F9:7D:1A:B7:9B:53:FF:19:64:BB:4B:47:E5:17:6B
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/df92e5e4-dfb8-44c3-8671-b7452a275387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:0d:ab:bf:aa:df:48:1a:d9:31:18:8e:2f:94:01:18:84:5e:
         68:31:38:e1:ba:a3:d8:4a:2e:ab:1d:5b:b6:65:83:44:ff:89:
         e3:dc:97:40:ae:dd:85:b2:27:56:63:2d:cf:62:03:58:c6:b7:
         b5:25:db:b0:71:7f:5b:8f:e9:be:1b:3c:22:4e:74:9c:0b:9b:
         6b:66:03:ac:a9:8f:ed:81:3e:f8:19:15:ec:ae:14:e9:72:10:
         de:e2:d2:37:d3:c2:fb:8a:19:7f:de:fe:63:7b:5e:79:aa:f8:
         a7:8a:0c:d2:ea:e3:24:bf:5d:78:0b:c1:74:47:3a:d9:e4:75:
         b4:b3:f5:ea:e2:35:c5:f9:c9:3f:78:e7:96:1a:66:74:7f:c0:
         5f:c8:e9:a3:38:4d:5b:fb:c9:08:85:0e:e9:00:0d:6f:18:3b:
         67:31:e3:0a:81:a6:b1:db:d5:22:39:82:38:a8:66:46:86:a6:
         72:73:d3:52:3b:96:99:05:7b:ca:ed:c7:f1:6e:a3:a5:68:a9:
         d1:9a:64:b3:30:b0:5b:d7:af:82:e2:68:0c:4d:b0:3a:2b:dc:
         dc:48:9a:b4:94:e5:e4:6c:41:7a:60:c0:fd:bc:b8:ff:ff:d1:
         93:90:9a:20:fa:89:87:1b:86:ed:7d:8f:77:b4:e5:e9:ca:f7:
         e4:6c:53:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----