Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fed2be12-43ba-442d-94c2-9dc111178ad5.roa
File:                     fed2be12-43ba-442d-94c2-9dc111178ad5.roa (raw, json)
Hash identifier:          zGVJSXMfNbWAS4c2TO1BZ0NMu/Tvk7P2vwuhCOM0oAI=
Subject key identifier:   76:88:D0:4A:8B:77:40:8F:EF:4E:13:A3:BB:66:01:11:6C:26:FA:9F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2EEB53E3967598734DEB41330446014CBFD476AC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fed2be12-43ba-442d-94c2-9dc111178ad5.roa
Signing time:             Thu 13 Jul 2023 00:00:00 +0000
ROA not before:           Thu 13 Jul 2023 00:00:00 +0000
ROA not after:            Thu 17 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:eb:53:e3:96:75:98:73:4d:eb:41:33:04:46:01:4c:bf:d4:76:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 13 00:00:00 2023 GMT
            Not After : Aug 17 23:59:59 2023 GMT
        Subject: serialNumber=dc609b38e097fd3727d9c637a15e2695170b970cdacaf79e38f2ecf1909092fb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:4d:4a:9d:69:ef:cc:e4:bf:03:52:d7:ef:
                    6e:be:3e:fc:57:d5:48:03:06:32:b9:d6:83:d1:ae:
                    f1:5d:d0:74:6f:b3:b1:87:7e:be:cd:60:43:d6:5e:
                    05:da:b3:d7:6d:05:0a:2c:b4:40:47:d6:56:f4:5d:
                    6c:e9:9a:02:fb:33:89:de:46:59:58:76:f3:d0:08:
                    01:37:42:a2:02:bc:65:55:cb:68:36:3a:ca:22:2f:
                    75:06:0e:ee:f1:39:9e:cd:ef:19:10:5a:2a:dd:48:
                    56:e9:1f:45:65:13:85:75:b2:38:84:a5:29:af:f0:
                    ae:b9:f2:25:3b:8c:af:8b:16:05:8d:23:ec:9c:78:
                    dc:4c:67:45:44:73:8b:5a:32:e5:6b:68:dc:b5:81:
                    07:81:bc:6f:e3:36:e8:c8:d6:7b:e0:b0:92:63:da:
                    dd:bb:d4:63:b8:d4:35:cc:ea:f2:fc:c3:9f:fd:06:
                    1f:cb:9a:b7:0e:25:9a:c0:04:fc:0d:08:89:15:ef:
                    10:36:ee:7b:45:c2:bc:f9:de:a4:a6:96:1a:81:de:
                    9b:63:af:73:eb:f5:ae:eb:ef:03:72:ed:1b:43:e0:
                    de:e6:b0:de:7b:d6:5f:ef:5e:c9:6f:a5:da:fe:47:
                    7a:6f:76:b8:b0:3d:4d:38:bb:5e:ae:1f:46:0e:64:
                    72:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:88:D0:4A:8B:77:40:8F:EF:4E:13:A3:BB:66:01:11:6C:26:FA:9F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fed2be12-43ba-442d-94c2-9dc111178ad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:74:7f:d3:cd:86:d2:6c:37:ee:f5:a8:70:c8:08:25:67:cf:
         9e:d8:71:cd:8c:7c:2a:c4:56:db:2f:69:16:6a:36:05:9d:e0:
         64:8e:8b:e3:8a:75:fb:39:17:be:35:10:35:72:99:0c:5e:24:
         ba:c6:e8:7b:58:77:bc:a4:f0:63:64:5b:ad:ef:4d:d0:d6:59:
         6e:e2:4e:72:45:02:c3:b6:cb:46:ba:cd:c8:19:5c:5c:49:f3:
         e9:7c:ec:1e:f9:47:a4:47:de:24:de:af:d8:e1:b0:f2:85:50:
         65:71:e9:6a:1c:db:b6:a0:7a:cc:98:a3:95:47:71:5f:9f:eb:
         cc:cf:1b:46:58:94:06:ac:1f:66:34:88:ec:61:90:58:9e:6b:
         87:40:3e:6e:10:4f:d6:54:e4:03:87:36:3e:6b:62:7d:9d:64:
         22:46:62:84:81:9a:4a:03:37:3b:fe:e1:e7:e3:3e:f1:2e:d4:
         b1:26:ab:7c:78:91:b1:4e:a9:c1:ee:87:13:04:98:f1:93:ef:
         b0:d2:5f:4a:5b:bc:1d:55:db:4c:09:50:67:fb:16:bb:ad:bd:
         dc:25:ef:bc:33:50:99:da:bf:6d:dd:f5:6b:cd:96:73:aa:6b:
         44:16:0f:0d:6a:ac:9e:01:66:b0:7b:33:7c:72:b5:23:31:b6:
         91:cc:b3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----