Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6693c298-4717-4088-a622-48ce5331bab2.roa
File:                     6693c298-4717-4088-a622-48ce5331bab2.roa (raw, json)
Hash identifier:          MII3G8LpR97FxeaCtz4kFIoVosGWpOxDjFS+7Q+1sxk=
Subject key identifier:   80:E9:A3:BE:19:12:ED:22:56:6A:58:B9:92:24:75:51:4A:C8:A0:A0
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1B1B162DF315ACC30BCB97606B714E64FDEABDA4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6693c298-4717-4088-a622-48ce5331bab2.roa
Signing time:             Thu 24 Aug 2023 00:00:00 +0000
ROA not before:           Thu 24 Aug 2023 00:00:00 +0000
ROA not after:            Thu 28 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1b:16:2d:f3:15:ac:c3:0b:cb:97:60:6b:71:4e:64:fd:ea:bd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 24 00:00:00 2023 GMT
            Not After : Sep 28 23:59:59 2023 GMT
        Subject: serialNumber=bfedff178ad8505fe94122f64ec6e35cd6ca067aa70f5e6216c4bc464b87f47a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e4:fe:3a:f0:db:f2:4e:24:cc:04:36:d1:83:
                    75:ea:0c:c8:1f:bb:5f:90:c8:7e:2a:ea:d8:03:26:
                    4a:40:83:00:5d:d5:c1:38:7c:ae:b1:f8:49:be:dd:
                    77:b0:76:f9:b4:cf:fe:cb:58:0d:bf:f0:8b:81:6d:
                    d2:54:f9:4a:0c:60:46:8e:cf:95:65:44:cd:21:19:
                    e4:e4:b7:6d:87:7a:62:e2:36:81:38:aa:13:ae:47:
                    7b:a5:3d:e4:db:5e:a5:9e:94:4d:df:bb:2b:de:30:
                    51:23:e4:3b:21:37:98:bf:20:89:69:00:95:85:93:
                    c1:9a:3b:bc:ba:4e:c1:df:e6:74:ef:61:cc:76:54:
                    75:50:5a:67:53:c0:7a:e3:f2:6e:e3:86:76:d1:3b:
                    af:fc:d5:33:3f:99:05:c7:93:c4:a6:ce:4a:13:32:
                    56:eb:c4:0d:e4:1e:45:45:25:68:e7:bd:52:48:78:
                    4b:8a:76:1c:f9:d4:e2:ca:fb:ad:97:af:fc:35:26:
                    7d:02:3b:74:17:1a:d2:25:30:aa:e8:f5:01:7d:de:
                    87:b4:25:d4:6f:96:94:ad:40:38:d5:95:11:67:85:
                    41:95:8f:4a:aa:ba:6c:c9:64:c8:56:9d:ef:4f:05:
                    46:3d:49:27:66:bf:51:4b:90:b9:f0:ce:0b:0c:cc:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:A3:BE:19:12:ED:22:56:6A:58:B9:92:24:75:51:4A:C8:A0:A0
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6693c298-4717-4088-a622-48ce5331bab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:7f:14:cb:4e:30:aa:c9:0a:94:f1:d6:62:9f:46:78:2b:a6:
         1b:b9:40:4b:55:43:0c:e5:18:3e:16:5a:93:73:dd:bb:94:b8:
         82:15:31:62:7c:8f:02:f6:aa:fd:78:d9:ba:e6:5f:84:5f:a4:
         55:8b:91:4e:3b:fd:fb:9d:cd:56:15:fe:ee:3b:56:89:41:ee:
         4b:68:d0:e0:e7:57:8a:5b:95:d8:36:9f:93:fb:b6:13:40:c6:
         72:5b:8e:a5:4a:50:bc:8a:06:bb:b9:dc:3c:c4:1d:15:10:77:
         99:8d:00:fe:9c:1c:5e:39:d0:60:db:2a:9d:d7:f2:84:e6:e5:
         0f:0d:d0:94:6f:27:45:39:46:01:aa:1a:a9:1e:8d:50:aa:6a:
         e9:ef:02:6a:97:54:4c:fd:a5:c9:35:a1:27:e1:66:90:28:26:
         f0:c0:c2:9e:57:0d:fe:a6:fd:c8:46:f5:f2:76:d4:ae:aa:92:
         0d:17:e4:c5:d2:79:da:65:83:4c:1a:e9:c5:5d:38:26:23:57:
         1c:08:69:8b:c5:2e:dc:53:24:19:b7:5e:a7:b3:5c:2f:5a:78:
         f6:00:e3:bc:a7:ff:47:09:e9:9c:e2:fb:f3:f3:10:a5:c5:bc:
         c2:e6:9f:8a:b8:de:28:fc:b6:c1:fd:b9:51:b2:43:9b:42:7f:
         e8:56:8b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----