Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f6c36313-e132-4298-b4c3-c830015b50da.roa
File:                     f6c36313-e132-4298-b4c3-c830015b50da.roa (raw, json)
Hash identifier:          K9adj2P8eKQEIgHjKFwW29ZMEZA+u5uL2KhTrZ4EOYE=
Subject key identifier:   24:62:35:E5:3A:7F:8D:F9:81:8A:08:B5:E2:83:E1:4A:FE:F7:08:A1
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       53FEFEDEB65661030ABC0E828E593D3CF67FB808
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f6c36313-e132-4298-b4c3-c830015b50da.roa
Signing time:             Tue 25 Jul 2023 00:00:00 +0000
ROA not before:           Tue 25 Jul 2023 00:00:00 +0000
ROA not after:            Tue 29 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fe:fe:de:b6:56:61:03:0a:bc:0e:82:8e:59:3d:3c:f6:7f:b8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 25 00:00:00 2023 GMT
            Not After : Aug 29 23:59:59 2023 GMT
        Subject: serialNumber=b376cc757c660f5f80990af89c3ae9f44c8a13b01a7a8d767611c9f99a0bef44, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2f:ad:3b:07:ef:77:9f:e7:3f:44:4e:24:73:
                    5f:f2:69:33:23:1b:25:dd:8f:c2:39:79:c2:7f:c2:
                    d6:52:f5:15:c7:91:e6:8b:a4:b5:6a:63:72:66:fb:
                    79:78:ee:72:3a:ec:68:ef:c6:51:47:c0:08:bc:5b:
                    c5:f8:4d:df:99:26:80:f5:b0:4c:b7:da:db:24:24:
                    4a:7b:9f:b0:34:ff:ea:b0:89:f2:12:a1:22:55:c2:
                    db:01:66:5f:1a:fd:97:43:75:7e:bc:d4:2b:1e:2a:
                    ef:60:79:b9:5e:f7:2b:23:eb:3a:d7:7a:a4:8b:bb:
                    00:48:0d:15:27:2f:c2:db:90:4d:f0:48:ea:e7:93:
                    c6:1b:9b:7d:4f:1a:a7:49:88:95:ce:bd:ee:4e:11:
                    5f:11:95:00:e0:3f:52:3b:4e:1d:e2:21:9a:25:d1:
                    62:47:6a:ac:2e:6e:38:fc:7c:dc:f4:28:85:6c:7f:
                    7d:dd:eb:a9:47:64:8a:67:6e:ae:dd:d4:ef:29:6b:
                    7a:21:db:48:78:88:c3:a2:1f:f2:77:15:f2:a3:6a:
                    b9:bb:ec:70:df:9d:f4:79:48:e5:ab:f1:a5:fc:ab:
                    2d:6d:cb:7d:8d:c5:fd:53:4c:1c:e5:56:0a:f6:f8:
                    02:0a:13:c9:fc:c4:f0:f4:1a:b3:1d:9c:20:6e:30:
                    b9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:62:35:E5:3A:7F:8D:F9:81:8A:08:B5:E2:83:E1:4A:FE:F7:08:A1
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f6c36313-e132-4298-b4c3-c830015b50da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:5a:06:78:62:4e:1b:03:7f:af:85:52:dc:dc:fa:d6:65:8f:
         2c:0c:b1:87:a9:22:3a:6d:9e:b9:06:93:41:0b:f6:3e:a7:15:
         19:c1:73:35:12:f4:ce:d6:7f:c1:11:67:0b:ab:d1:c4:2b:c9:
         68:3b:5c:85:43:17:af:75:30:cf:20:90:de:06:19:c2:10:41:
         20:a2:8d:59:ce:dc:90:c5:6b:36:32:10:42:7e:d8:b5:fc:75:
         f4:03:9d:fc:04:82:1c:c8:f0:a9:e2:81:1f:4d:5f:85:53:8b:
         64:b6:71:72:25:c1:01:58:e6:81:18:37:e7:ea:19:69:b2:1b:
         c3:f8:17:9e:90:a9:dd:cf:95:2e:ad:74:15:80:c2:9c:d4:01:
         f1:65:58:ec:17:31:58:89:e3:c1:ee:81:9c:2e:c6:3a:00:50:
         06:d8:f1:5d:33:40:e5:8f:3b:43:99:74:99:04:eb:af:13:92:
         00:35:67:33:27:3f:dc:d2:a9:e9:f4:8e:1f:97:85:62:7a:ec:
         21:d3:e2:d9:33:f0:95:24:e8:cb:64:ff:d5:7b:bd:0c:6f:19:
         d4:bb:6a:21:a0:9b:9b:59:90:fb:b8:ba:d6:71:c1:cc:4b:3b:
         76:bb:63:ff:8a:56:4f:d4:20:ce:86:60:16:1c:04:3e:20:ca:
         be:69:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----