Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f88ec079-d695-4d81-affa-ce31a2db62c9.roa
File:                     f88ec079-d695-4d81-affa-ce31a2db62c9.roa (raw, json)
Hash identifier:          sd33jsZHoJzz47zo+huFRyk9wmncfA98Jl5gkOcUKT4=
Subject key identifier:   25:81:E4:FA:66:6F:55:F8:D2:1C:C4:10:94:A7:EA:2D:DE:6C:AF:78
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2E6EE5B28DD4B18D2D4EFA6CD36E857E180D39D9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f88ec079-d695-4d81-affa-ce31a2db62c9.roa
Signing time:             Fri 11 Aug 2023 00:00:00 +0000
ROA not before:           Fri 11 Aug 2023 00:00:00 +0000
ROA not after:            Fri 15 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6e:e5:b2:8d:d4:b1:8d:2d:4e:fa:6c:d3:6e:85:7e:18:0d:39:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 11 00:00:00 2023 GMT
            Not After : Sep 15 23:59:59 2023 GMT
        Subject: serialNumber=882cfdacbf2a318007aa07e57c0f4b40d0b92c7ba74b59555db1c26733d1e942, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:53:9b:b3:85:66:51:69:ba:35:29:1a:9a:
                    43:b5:89:70:91:1a:9c:44:9e:25:ec:35:63:0f:de:
                    cf:c2:0d:1f:2d:9e:17:37:9b:48:6b:39:d8:db:96:
                    b3:f4:ef:1c:de:c8:b8:f2:36:2f:f8:c0:97:e8:0d:
                    cd:27:60:5a:f7:25:e6:31:da:b5:82:b5:8e:4b:a1:
                    0f:bb:3e:62:f5:74:c2:66:39:33:ec:f2:e7:e8:2f:
                    8a:b9:53:23:5d:94:b9:96:78:83:68:8c:c6:a9:4f:
                    fa:84:ec:6f:31:d2:59:b2:00:03:c5:86:1e:56:01:
                    58:e6:10:cb:16:d1:b3:a7:ea:5d:83:35:10:ab:56:
                    6c:ed:ba:8a:63:4d:e0:de:a0:88:02:27:9a:0a:a7:
                    f5:79:3d:d9:ae:e7:3a:f4:da:9e:b2:9d:5d:b3:e4:
                    2f:9c:67:aa:13:11:d0:18:b4:56:37:8b:94:4e:07:
                    b5:1b:8c:b2:70:de:e1:b7:b7:45:45:7a:ee:e0:3f:
                    24:3c:f3:ad:6a:db:f1:c5:fd:1b:42:66:0a:88:e2:
                    e5:93:11:d0:ce:83:5f:5e:ea:e4:0b:c1:a0:b2:67:
                    4b:3b:b2:43:a2:e6:f8:79:6b:67:2b:4e:17:db:6c:
                    ef:a6:19:cd:c8:27:ff:82:b7:7b:43:5f:fc:fc:d8:
                    df:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:81:E4:FA:66:6F:55:F8:D2:1C:C4:10:94:A7:EA:2D:DE:6C:AF:78
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f88ec079-d695-4d81-affa-ce31a2db62c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:11:f3:5c:d3:88:ec:85:b7:75:08:9f:50:ab:40:9e:83:64:
         ae:d6:a6:78:a5:c9:1b:f6:46:50:70:23:40:84:09:62:1a:a3:
         cf:e2:a9:07:7e:6e:a1:a8:8f:ea:1d:fe:3d:d5:4f:bb:52:4c:
         08:a2:91:ff:a6:d0:b0:0e:b4:c7:97:52:b8:2d:26:33:19:66:
         54:62:1c:b0:8a:b6:3d:e8:93:67:f9:47:c3:87:80:2e:d3:4f:
         67:98:1a:05:47:07:32:fb:5e:a7:9c:85:80:33:e6:20:12:a3:
         08:be:f8:47:c5:66:78:c9:ac:f6:56:f2:1c:4a:3d:30:02:db:
         fc:82:5e:b9:19:d9:33:59:ef:d9:5f:65:35:1b:9c:ce:59:0e:
         9e:a6:0d:8c:ce:34:45:15:0e:ce:d6:19:42:70:07:87:a3:87:
         ee:c6:d5:6d:6c:92:ad:f3:bc:05:6b:25:98:aa:28:4e:82:99:
         21:af:fb:c0:6d:ac:de:fe:55:ff:16:a1:c4:84:a0:f5:8c:fb:
         2d:76:ad:66:c1:43:dc:0a:5b:32:94:b0:02:27:2d:29:ba:44:
         b2:9d:87:4f:75:3d:ee:73:9d:d3:e9:0d:0c:a9:96:f0:1d:92:
         83:d6:9e:6c:c3:2b:e5:3c:60:0a:b8:89:87:b6:b4:36:9f:e7:
         56:57:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----