Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a956e9d-e4dd-4ff2-bb2b-7a1469b4fe2d.roa
File:                     6a956e9d-e4dd-4ff2-bb2b-7a1469b4fe2d.roa (raw, json)
Hash identifier:          0xzyOSJc9XyPQqGlp4oJhk9W2EVnwnpaT7wZiMdpqOs=
Subject key identifier:   73:A1:77:A7:92:9C:62:A3:70:57:77:D2:B0:23:AD:9B:C5:DC:CF:11
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1813DBDE0961E6CF4855D89004E56F374637D74D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a956e9d-e4dd-4ff2-bb2b-7a1469b4fe2d.roa
Signing time:             Fri 18 Aug 2023 00:00:00 +0000
ROA not before:           Fri 18 Aug 2023 00:00:00 +0000
ROA not after:            Fri 22 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:13:db:de:09:61:e6:cf:48:55:d8:90:04:e5:6f:37:46:37:d7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 18 00:00:00 2023 GMT
            Not After : Sep 22 23:59:59 2023 GMT
        Subject: serialNumber=06ef5ac7235c42bc0880406348c808385d2f62a2c09ac196e34a7329ee79976a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:33:4b:39:97:a1:59:39:97:79:46:89:1c:
                    92:25:cf:db:57:32:93:82:dd:d3:0b:c5:65:f6:1d:
                    4d:9e:98:eb:0f:84:bb:87:e9:bf:dd:5e:55:b7:b8:
                    2a:1d:71:ea:87:33:19:21:dc:b4:ed:d2:87:07:fe:
                    2e:7e:1a:45:84:37:e1:69:4a:56:e0:f0:fe:1a:70:
                    38:74:17:5c:ed:b0:17:b3:39:b4:66:02:8f:07:47:
                    69:f0:0e:9d:53:07:e5:92:3e:49:69:70:f1:df:8d:
                    d5:97:af:00:8f:48:55:8e:e7:f1:e3:64:90:bc:31:
                    b8:01:d4:60:da:83:a2:d6:d1:85:78:f6:8f:c5:45:
                    14:1d:f2:64:8b:ee:33:57:7e:ed:c7:02:3e:b7:8c:
                    b9:42:ae:1f:c5:dd:54:33:79:2a:f6:4f:e3:70:fc:
                    32:0d:40:6f:fc:46:ef:dd:80:43:8b:f6:70:b8:82:
                    7d:02:9f:b6:54:a7:6f:8d:6e:b0:64:da:8a:b7:2f:
                    64:92:10:fa:cc:0b:0c:ed:21:25:5d:8d:ae:74:ff:
                    71:00:3c:d0:44:bc:09:f1:e0:0f:54:c1:b1:26:42:
                    b1:10:f4:a0:ea:44:2d:d4:f7:f1:47:14:3c:e1:80:
                    88:99:a7:ea:05:33:60:cc:8c:ad:df:ca:9e:bf:bd:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A1:77:A7:92:9C:62:A3:70:57:77:D2:B0:23:AD:9B:C5:DC:CF:11
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a956e9d-e4dd-4ff2-bb2b-7a1469b4fe2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:48:92:c8:d1:17:24:8e:65:06:1a:23:f8:24:bd:31:f9:1d:
         49:d5:ad:b2:ba:82:6f:05:57:03:d3:fc:18:35:74:68:86:fd:
         e5:51:5b:cd:98:20:89:73:25:03:9f:8b:e6:0c:93:9f:e0:89:
         1b:17:d8:c1:93:07:60:94:53:65:5b:99:20:d5:13:44:cc:cb:
         81:e2:c1:2f:6b:a0:21:c7:00:87:cf:af:13:51:5b:44:a3:a7:
         1f:51:17:0d:c3:25:ff:fd:e1:f4:71:17:eb:01:35:f9:0b:b8:
         c5:41:b6:18:6d:0d:5b:c2:05:62:02:d8:13:21:c0:17:fa:5f:
         38:23:be:d9:07:ed:25:db:96:b0:ad:09:ad:35:69:b9:af:79:
         17:9f:58:e9:8b:da:bf:24:88:32:2c:c5:3e:fd:d1:f6:4a:3b:
         40:7e:ae:d3:93:e3:e4:30:92:df:c6:36:fe:c6:f9:6d:02:f7:
         22:4c:0f:ba:5a:63:81:a5:29:e1:63:c6:00:d5:07:00:45:10:
         ec:34:02:91:3d:06:86:49:c4:97:48:bd:b1:35:ae:3b:e5:c9:
         d2:7f:56:8a:cc:b6:b3:91:c8:ed:8e:78:7a:b2:e9:ce:2a:8a:
         9e:d1:bd:43:58:91:1f:b2:88:57:d7:45:2d:f0:44:12:56:36:
         14:3f:6e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----