Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e5034b15-1961-4a8a-b416-27ca427007e6.roa
File:                     e5034b15-1961-4a8a-b416-27ca427007e6.roa (raw, json)
Hash identifier:          c3MiiKhkDL2rxtwyDgfLg5sTQhsy04X1I9Qv1q+AMyo=
Subject key identifier:   1E:61:1F:86:E6:4F:A5:28:30:5F:F0:D7:F1:D8:83:09:8E:BD:BC:52
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       04A6147B696F2169B68CD2579EAAA744A3365954
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e5034b15-1961-4a8a-b416-27ca427007e6.roa
Signing time:             Mon 21 Aug 2023 00:00:00 +0000
ROA not before:           Mon 21 Aug 2023 00:00:00 +0000
ROA not after:            Mon 25 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a6:14:7b:69:6f:21:69:b6:8c:d2:57:9e:aa:a7:44:a3:36:59:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 21 00:00:00 2023 GMT
            Not After : Sep 25 23:59:59 2023 GMT
        Subject: serialNumber=068543a5c11bff4424a29a5fc9f70b2c50f4a88d0f805b7c1e573b9c6b4db87d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:35:6d:1a:9e:6e:d6:88:af:c1:4e:4a:19:
                    87:b0:da:e9:69:cc:b4:c4:84:22:22:5c:f7:a4:d5:
                    32:b8:25:77:b6:83:81:78:ea:c2:c7:63:40:69:29:
                    66:fd:0b:60:8d:cd:7b:2c:8a:fa:97:11:41:70:5f:
                    a4:04:a1:ea:bf:4c:92:f3:95:e4:b2:9b:5e:d5:3c:
                    68:fb:63:af:ff:1e:8f:ce:1a:18:fe:f2:b5:e4:e7:
                    c6:6f:96:9e:38:4e:30:29:c3:55:3e:f1:af:ee:87:
                    b1:6b:16:95:0e:aa:ba:42:1c:3e:81:a9:da:f9:86:
                    cc:d6:14:e9:d9:79:36:5d:68:91:9f:78:5f:29:bc:
                    47:53:ce:fe:7f:e5:19:1a:fe:0b:86:3b:cf:4c:34:
                    d8:f7:4e:33:67:40:1a:bb:1d:09:df:aa:43:ad:74:
                    bc:51:1f:c6:10:9d:6a:08:28:5c:4f:40:5e:e1:d5:
                    c1:c6:c5:e0:79:2c:ed:19:15:b5:96:bc:b6:56:71:
                    13:77:35:2d:fc:5a:b4:af:45:ad:39:17:29:38:f9:
                    4d:88:56:01:c7:eb:24:5e:ea:91:bc:fa:af:cb:f1:
                    eb:f5:ca:a8:11:65:a4:3c:c4:67:82:7a:8a:bf:28:
                    10:b9:bf:f8:5a:dd:93:49:5a:e6:4d:2b:10:52:c8:
                    e3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:61:1F:86:E6:4F:A5:28:30:5F:F0:D7:F1:D8:83:09:8E:BD:BC:52
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e5034b15-1961-4a8a-b416-27ca427007e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:51:0e:b2:5b:5b:7e:e0:12:18:df:bb:e0:62:5f:dc:cd:ba:
         7b:5e:f8:9d:d8:80:c8:5e:67:d9:b5:0b:09:7f:31:bd:f9:05:
         fe:dc:45:70:ff:b2:31:a8:5a:dc:cc:dd:52:78:8a:ac:27:30:
         e3:76:0e:5c:19:b9:72:59:7b:e8:e2:b0:4f:4b:9c:de:70:c0:
         6c:b0:07:cc:75:bb:67:5c:da:c1:a1:62:a7:c9:a3:a7:1e:32:
         a3:6f:ef:a9:0c:fa:a7:88:f0:27:aa:6f:3e:d5:27:4c:0c:1c:
         72:c1:c2:ff:3a:e1:6b:89:c3:02:8d:e4:fe:d6:7f:c2:8d:8a:
         ea:5e:09:62:a1:db:8a:24:a6:3e:d9:85:fb:1a:7f:cb:4f:06:
         c4:e0:1f:9b:04:a5:fc:51:41:38:6f:23:b8:2e:04:b3:09:30:
         39:4f:0e:91:1d:2e:7b:2c:f9:fd:dc:95:df:83:cc:e7:94:2f:
         6b:32:2a:d0:08:d9:b4:0e:d6:ba:bc:54:4f:b0:f8:3b:a8:d2:
         06:ae:63:b6:06:d5:fe:98:29:a2:8c:a7:34:50:77:7f:ad:84:
         e1:e0:ad:b2:7b:46:8e:3e:03:98:53:cb:b6:e4:0d:32:cc:2e:
         ff:4f:d2:7a:e4:e3:36:a7:42:09:f7:33:be:68:06:12:92:29:
         53:c1:9b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----