Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7144ae32-a6de-4b85-9e5f-7515e3ce0980.roa
File:                     7144ae32-a6de-4b85-9e5f-7515e3ce0980.roa (raw, json)
Hash identifier:          mKF1tUiYwTQl+3aqh8h7uV+7krWAXJbiaUeZuXI/c74=
Subject key identifier:   B9:97:84:C2:91:F6:E5:91:92:76:F9:79:3A:A5:10:05:59:A0:74:72
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5B61918AE59EFFA808B6AAB748E89FAD77126E19
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7144ae32-a6de-4b85-9e5f-7515e3ce0980.roa
Signing time:             Tue 22 Aug 2023 00:00:00 +0000
ROA not before:           Tue 22 Aug 2023 00:00:00 +0000
ROA not after:            Tue 26 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:61:91:8a:e5:9e:ff:a8:08:b6:aa:b7:48:e8:9f:ad:77:12:6e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 22 00:00:00 2023 GMT
            Not After : Sep 26 23:59:59 2023 GMT
        Subject: serialNumber=fff868057a147013c623b3e88bc1e0d8e54771cd6a4ebce7747c63ae93b58f51, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:af:b7:ce:8f:83:ea:4e:a8:3c:7a:5f:5a:
                    7a:7f:ea:6b:bb:0f:48:11:22:6d:a8:63:89:5c:f5:
                    a1:5c:4f:4d:f4:a1:14:54:49:41:83:2e:56:f3:8e:
                    fa:f3:01:01:ff:d2:e3:48:7d:0d:55:80:18:55:bf:
                    21:54:d2:48:73:93:25:27:74:47:e3:fc:2e:04:f8:
                    4e:be:3d:89:d7:8a:ed:93:42:f9:ff:47:78:aa:6a:
                    23:c0:c7:fd:47:15:77:12:af:2b:8f:fb:9e:ab:6a:
                    a0:a4:33:ab:cd:eb:51:83:d7:6a:57:2e:69:15:0b:
                    28:cb:32:b8:95:83:40:a8:69:ef:93:db:ce:e4:23:
                    fa:91:1a:2a:83:83:be:48:65:e7:e0:fa:0a:16:c6:
                    64:f1:5b:56:fb:94:15:5a:f3:14:8a:9a:03:ee:97:
                    7d:88:af:03:04:fc:c1:c8:a9:e3:6e:6b:d0:25:da:
                    2d:1d:29:c9:a4:c8:fe:a5:fc:d4:0e:84:1c:bd:3d:
                    c5:fe:e7:2c:a4:a2:f9:97:78:47:04:29:39:aa:aa:
                    5f:35:55:2f:2f:26:88:f6:ed:ab:96:48:41:44:33:
                    87:99:a3:b9:c8:91:13:6a:f3:80:f7:b0:65:03:51:
                    ed:e6:9c:ef:4a:07:6b:59:e8:7c:72:ab:03:82:b8:
                    b7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:97:84:C2:91:F6:E5:91:92:76:F9:79:3A:A5:10:05:59:A0:74:72
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7144ae32-a6de-4b85-9e5f-7515e3ce0980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:65:fa:70:ca:96:85:07:21:c2:b6:e3:72:d3:86:a8:50:67:
         2f:ca:34:ec:8a:5c:0c:c1:3f:41:4c:88:e3:02:4a:bd:e7:0d:
         22:5e:75:b8:dc:f9:52:4e:a6:53:d7:54:9f:b9:a1:d4:57:3c:
         22:91:29:1c:4d:bf:b4:11:cf:49:31:36:92:53:56:a2:4a:b1:
         7b:9d:8e:c8:6e:0d:43:3c:53:84:b4:20:0c:ee:f2:b6:58:91:
         7b:e5:a9:5a:ea:13:9a:be:75:15:ce:17:24:7f:63:d8:d4:76:
         2a:a4:5b:b9:5c:8d:dd:22:4b:2d:e7:e8:3c:78:0a:fa:68:20:
         50:77:75:77:8f:8b:d9:c5:08:fe:3f:9f:19:66:80:87:20:4b:
         00:18:9b:02:e1:ed:9c:46:03:df:94:86:97:a7:1e:16:4a:f0:
         c2:80:f9:f8:c9:e0:df:87:eb:f7:ec:af:bd:7a:ca:d9:16:d5:
         31:84:3e:33:fd:90:d1:eb:aa:df:4e:12:aa:83:0a:a9:a9:0e:
         57:b9:8a:62:f6:b4:b8:51:91:79:77:88:18:ca:7d:1c:ec:65:
         9f:0b:3f:01:59:a8:a5:19:23:5c:68:ec:94:7a:df:34:44:df:
         8c:e0:f7:be:da:2c:66:40:a4:e6:21:ba:c8:71:e7:c2:e1:2d:
         fe:97:1d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----