Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6ed1e56e-82e6-411c-b23f-2a9f667000c4.roa
File:                     6ed1e56e-82e6-411c-b23f-2a9f667000c4.roa (raw, json)
Hash identifier:          s2/w/iMlqrUm0a5tywvINpEyhc/J2JWmL9knJX+dqhc=
Subject key identifier:   FD:35:CF:87:B6:D6:C6:20:95:8C:A5:65:98:9C:8C:97:A9:2A:6E:91
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4BD2CBC3D651F6D9E8BE362486B29955354A2C91
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6ed1e56e-82e6-411c-b23f-2a9f667000c4.roa
Signing time:             Thu 13 Jul 2023 00:00:00 +0000
ROA not before:           Thu 13 Jul 2023 00:00:00 +0000
ROA not after:            Thu 17 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d2:cb:c3:d6:51:f6:d9:e8:be:36:24:86:b2:99:55:35:4a:2c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 13 00:00:00 2023 GMT
            Not After : Aug 17 23:59:59 2023 GMT
        Subject: serialNumber=17c7c5de1e921d9bd46a7e5ca79e63864d7bee3544eb26b354b9cbb3265c2cb4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7f:28:2b:7b:cc:04:94:12:7e:a4:90:08:e5:
                    3b:e1:08:12:a8:8d:a5:36:03:cc:e4:a2:6c:9a:76:
                    cb:ae:82:6d:d7:a3:27:10:bf:95:f1:88:39:96:cf:
                    89:12:ec:66:c6:18:e5:66:1d:3b:6e:db:a3:3a:1b:
                    85:7b:2f:b6:ae:77:2d:70:d7:a1:90:6e:ec:e1:e6:
                    88:5a:ae:1c:0a:45:72:40:e7:32:16:62:62:0c:18:
                    ed:94:b3:1d:0e:ae:78:0e:7a:d5:d2:41:48:65:1c:
                    cb:e0:fc:fc:0e:73:53:cc:f9:5e:5e:ac:62:d6:ff:
                    5b:dc:d2:09:5c:57:96:9b:e5:76:e1:61:8c:d0:48:
                    dd:f6:ee:47:7c:b4:78:5e:fa:02:02:f2:18:03:0e:
                    57:41:8c:bc:c6:b9:a8:4f:d4:fe:d2:21:3b:66:a3:
                    be:06:ae:14:b4:5f:1e:f5:34:b4:3c:cf:d9:e5:be:
                    8c:30:27:98:cb:4a:6f:c3:cc:70:12:46:d7:51:dc:
                    4d:5c:2f:de:f0:92:42:38:dc:84:41:7e:ea:12:bc:
                    ae:0d:6b:cb:90:88:42:ae:e4:61:9f:91:f3:dc:55:
                    36:e2:2a:be:ee:da:ee:67:49:1f:a5:88:a8:27:cc:
                    b0:0b:03:e4:2f:c1:6b:68:ee:90:11:02:0f:49:3c:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:35:CF:87:B6:D6:C6:20:95:8C:A5:65:98:9C:8C:97:A9:2A:6E:91
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6ed1e56e-82e6-411c-b23f-2a9f667000c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:5c:3b:cc:04:86:8d:b7:5c:92:dc:7f:c1:7a:57:fd:95:39:
         88:6a:41:e5:5c:03:5e:8b:39:e3:1d:4b:fb:c8:70:8f:66:90:
         d3:46:23:83:ac:b1:1c:55:e6:6d:a9:8a:35:b5:03:4d:cf:f9:
         90:56:b0:9d:a2:8f:16:f6:75:c2:44:28:03:de:4f:f9:07:80:
         ba:3e:d9:dc:b8:05:c6:d1:4b:a3:3d:90:a7:94:dd:d2:9a:c1:
         8d:2f:a6:58:2a:c1:a5:c4:29:eb:17:70:b5:6a:d7:50:04:9d:
         58:09:43:3f:2e:43:2a:11:c0:7e:ce:07:81:47:6f:ed:ca:dd:
         ae:5f:d3:e1:1f:20:c7:38:a6:19:c7:f0:56:f9:3f:11:03:4c:
         f7:6d:4e:83:68:86:27:1e:e3:66:7b:ab:f9:82:d7:7f:ca:69:
         40:24:50:8c:95:82:3b:28:69:7d:3c:e1:d5:e0:75:af:ba:85:
         63:f5:b6:05:c2:33:fa:6e:c4:f4:d9:bc:70:5c:c3:c1:b2:fe:
         04:c0:54:95:7e:64:e6:c8:81:e4:31:f9:80:b7:ac:df:d4:9f:
         06:bb:84:47:70:a5:0e:90:b1:ee:d1:2b:f5:d6:20:c2:55:f2:
         7b:f3:22:3c:2a:b1:7a:08:cf:8e:fc:c5:9c:92:d1:01:36:83:
         55:24:af:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----