Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f461fb60-2ca7-412d-9f14-7b02d7d11a04.roa
File:                     f461fb60-2ca7-412d-9f14-7b02d7d11a04.roa (raw, json)
Hash identifier:          5Heqgpcg0fzdIYNkNzRRWzGxOP+x54Vag3YxnGLC3sw=
Subject key identifier:   48:54:E2:0F:94:33:A2:9F:89:DD:1E:FA:17:56:95:E1:D1:F5:4D:63
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7FFA9BAF231928411F641EEF5D27CF6FE9F837D2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f461fb60-2ca7-412d-9f14-7b02d7d11a04.roa
Signing time:             Tue 19 Sep 2023 00:00:00 +0000
ROA not before:           Tue 19 Sep 2023 00:00:00 +0000
ROA not after:            Tue 24 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fa:9b:af:23:19:28:41:1f:64:1e:ef:5d:27:cf:6f:e9:f8:37:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 19 00:00:00 2023 GMT
            Not After : Oct 24 23:59:59 2023 GMT
        Subject: serialNumber=2ba4897b8a45c72017502e6b7bc37527378a19f13150eeae0e638920a3e29483, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:0b:00:14:0c:7a:38:36:18:ee:6f:0e:b6:
                    dc:ab:b9:70:8a:9d:97:13:75:23:c6:9e:16:8c:33:
                    70:ca:b6:68:bc:7d:67:26:8a:10:b3:bb:15:cd:3a:
                    52:a6:f4:b2:1b:20:54:c6:f6:31:ea:21:37:83:4a:
                    04:43:7d:32:6b:56:07:6d:33:97:3f:a6:49:8f:e0:
                    14:9b:70:6e:7a:01:1d:17:3a:40:4b:ee:b8:ee:ab:
                    45:e6:d4:46:79:16:b8:9b:d4:4f:b4:3f:84:a6:e2:
                    d8:d0:08:17:57:ba:6c:a5:8a:57:47:49:bc:ec:dc:
                    c7:29:ac:71:03:82:95:9b:9d:bb:75:92:a8:40:1c:
                    3f:5f:bb:5b:9f:d1:55:7e:de:68:bc:44:63:dc:6d:
                    f0:a1:15:2b:5d:08:c5:a2:45:14:2d:80:65:ab:04:
                    99:d3:d4:e5:8e:38:3a:ee:23:e8:3f:57:43:2d:8a:
                    94:b2:30:d3:8e:37:6f:ed:36:ff:c6:c3:06:0e:0c:
                    a1:e0:de:71:9f:0c:07:e1:6c:22:bd:c6:02:99:79:
                    10:2b:fc:ec:8a:8a:92:90:d7:6b:45:de:03:97:38:
                    12:30:3c:cc:9c:72:3f:6c:0a:3e:20:0f:8b:74:8e:
                    2e:5d:d5:05:53:9c:0f:f4:df:ca:98:0c:6e:38:c0:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:54:E2:0F:94:33:A2:9F:89:DD:1E:FA:17:56:95:E1:D1:F5:4D:63
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f461fb60-2ca7-412d-9f14-7b02d7d11a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:4d:e9:7c:9f:ad:01:ca:d6:c4:17:24:46:ff:b4:da:59:ce:
         48:42:f5:63:50:ac:32:ab:a2:2c:b9:45:29:de:aa:6d:2f:e6:
         05:7d:b0:8b:84:73:bb:33:82:ef:ac:87:3c:49:7e:fd:70:bf:
         cc:8c:b7:35:e1:62:e0:2d:70:19:ca:d0:5c:a8:b7:40:3a:f5:
         19:e1:e2:a3:35:6c:90:48:34:54:42:1e:3a:25:1d:96:c9:eb:
         06:92:5a:84:1c:81:ac:e8:d1:43:8d:1f:93:00:88:8b:7e:52:
         d7:61:dc:b6:ec:fc:df:17:71:cd:e7:c8:45:9b:0d:43:3c:0f:
         3c:09:0b:3f:0b:a0:e2:ae:00:db:51:92:20:aa:4a:14:10:9a:
         1b:58:14:89:5e:73:6e:86:83:c0:f7:d3:b0:fa:04:9c:6b:41:
         c4:7e:f7:16:24:34:b7:5c:ce:31:86:fd:09:d8:78:fb:f7:8f:
         b6:94:f6:24:4e:0f:54:4e:5b:15:a6:8c:25:eb:7a:27:ce:99:
         fe:2b:88:60:93:09:0c:9b:a1:d4:b2:16:25:ef:62:7d:e7:46:
         ff:03:5a:fe:af:10:74:5e:c7:be:ba:0b:ba:38:9f:5a:80:db:
         5b:04:13:84:06:3f:fb:f7:66:76:fc:39:bd:2f:32:3d:11:03:
         03:b5:91:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----