Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/681ee637-4402-40f8-94b2-752eb4226816.roa
File:                     681ee637-4402-40f8-94b2-752eb4226816.roa (raw, json)
Hash identifier:          jx7yDi05bc9QcPuJdaVQ+zsBXtPomLLXa3ETuNVDG/M=
Subject key identifier:   73:4C:1B:C6:FC:FC:F6:C7:65:79:DD:8A:99:0E:5E:D6:71:16:7F:EC
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       45470B2F47C65B00A90B1E70BC8F3C6384C1D351
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/681ee637-4402-40f8-94b2-752eb4226816.roa
Signing time:             Mon 11 Sep 2023 00:00:00 +0000
ROA not before:           Mon 11 Sep 2023 00:00:00 +0000
ROA not after:            Mon 16 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:47:0b:2f:47:c6:5b:00:a9:0b:1e:70:bc:8f:3c:63:84:c1:d3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 11 00:00:00 2023 GMT
            Not After : Oct 16 23:59:59 2023 GMT
        Subject: serialNumber=3ef3eeb21ff9caa552493f2dab0b01e66e4e89d39cab2fbc0a1e13b523e98d63, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ff:b7:0b:03:f2:ee:18:c7:97:05:4c:ea:43:
                    f4:8b:9c:5a:2f:32:e9:be:a0:50:cc:48:d8:02:dc:
                    a9:73:9b:12:47:11:1d:3c:65:87:3d:93:8c:cb:ce:
                    23:6d:5c:0d:b6:b5:d2:21:13:9d:bb:d9:bb:61:77:
                    dc:66:87:2c:eb:54:42:e8:3b:1d:46:77:41:76:f0:
                    26:25:d7:93:26:a0:a2:c6:8f:c9:fe:29:4b:16:25:
                    9a:89:44:c6:aa:43:69:72:a2:54:20:7d:7d:37:ea:
                    60:28:8b:85:09:6f:1a:1d:53:bb:92:20:b4:39:6f:
                    d2:d3:6e:e1:49:09:17:f7:ca:a3:79:60:ac:60:1c:
                    08:75:b0:37:5b:26:1d:cc:40:5a:54:0d:5e:8f:4a:
                    9d:6c:83:28:45:ed:20:f6:ff:c7:ad:68:79:01:a1:
                    d5:6b:6d:9d:4d:e6:78:fe:66:47:bc:c2:8e:9e:52:
                    e6:73:2f:41:15:86:ec:27:2f:6c:6d:7a:df:05:ab:
                    7d:96:b0:bb:3a:2f:51:12:ff:18:36:88:5c:57:c8:
                    f8:de:a3:fa:f9:74:13:9b:dc:bb:93:99:4c:5e:f3:
                    32:96:51:e8:e3:73:54:fc:14:2d:69:ce:70:54:f9:
                    cf:69:93:46:84:dd:64:a0:fa:14:31:c3:7a:d1:eb:
                    65:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4C:1B:C6:FC:FC:F6:C7:65:79:DD:8A:99:0E:5E:D6:71:16:7F:EC
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/681ee637-4402-40f8-94b2-752eb4226816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:95:1c:fa:ad:60:84:a7:d5:30:06:5a:3e:a6:57:bf:2c:b6:
         58:10:07:b7:a0:bf:c0:a0:26:9a:52:d2:1f:51:ad:b5:e5:83:
         97:29:52:96:b7:7b:00:6a:91:8c:d3:0a:1e:8e:da:83:e2:b8:
         d2:26:e9:c7:ce:fb:b7:36:db:72:34:d7:30:71:4d:48:9a:7a:
         4e:e7:88:1f:f6:bf:57:79:4b:86:ab:68:55:52:64:c1:41:d1:
         a2:bb:5b:80:3b:69:4a:ca:13:4c:e4:b3:aa:2c:a3:ee:13:a2:
         06:fe:c8:02:ff:ab:64:a2:a1:65:c3:d2:e5:37:8a:0e:8c:b9:
         81:d8:17:84:02:e0:42:1f:fa:06:b0:8b:3e:ec:d2:50:89:78:
         10:af:2d:b0:c3:a0:71:f3:f6:1b:ca:c1:b4:da:45:55:92:e8:
         7b:ee:90:e3:9d:93:30:5e:73:05:4a:29:3f:96:0b:1a:ac:e2:
         c3:0d:66:24:3a:a2:e7:29:a1:1c:7e:78:a1:3a:d9:d8:64:4a:
         2d:5b:52:65:d8:9d:56:e4:26:f4:2f:45:b5:75:97:a4:19:98:
         2b:df:0b:ee:58:fe:d1:be:30:bc:86:39:13:99:f9:d4:28:c7:
         05:7f:b1:66:4a:4e:cd:7a:52:76:65:8f:f0:94:5d:a6:cd:c8:
         aa:f9:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----