Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7dd15761-2e0f-4730-b1c9-6ed5045b12cb.roa
File:                     7dd15761-2e0f-4730-b1c9-6ed5045b12cb.roa (raw, json)
Hash identifier:          N0NggCXvNmhB58CPL+G0Xw3Gx0en6mqdJ+B6vwDXPGg=
Subject key identifier:   EC:9E:65:21:16:F5:95:7B:F0:84:E4:76:EA:F1:8D:60:C8:0B:1C:0F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       575BED695F39ECB9EB08CCA8CD069AB61ADF408E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7dd15761-2e0f-4730-b1c9-6ed5045b12cb.roa
Signing time:             Sun 10 Sep 2023 00:00:00 +0000
ROA not before:           Sun 10 Sep 2023 00:00:00 +0000
ROA not after:            Sun 15 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5b:ed:69:5f:39:ec:b9:eb:08:cc:a8:cd:06:9a:b6:1a:df:40:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 10 00:00:00 2023 GMT
            Not After : Oct 15 23:59:59 2023 GMT
        Subject: serialNumber=121c26164c66cf594db04183d93617b4bb68041d42fd4e228859704398b330d3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:c1:2a:b3:59:da:76:66:7a:06:5e:30:1b:
                    6e:b3:b8:6d:13:70:01:ab:f4:25:25:b2:77:a8:6a:
                    ff:79:ad:a1:7d:81:43:d8:cd:bb:e4:bd:2b:b3:ff:
                    04:c9:f4:48:c2:e8:83:ed:41:eb:50:10:db:02:90:
                    b9:88:4a:f0:f9:8b:cb:01:eb:07:a2:2f:16:6a:98:
                    33:76:3f:14:6a:de:26:f1:5d:e7:13:ab:0a:6c:02:
                    e1:dd:c7:5c:49:00:2a:2f:57:bf:a5:8f:3b:f1:12:
                    dd:5d:6a:7b:24:6a:97:31:e1:4a:ab:7e:40:0b:28:
                    7f:3b:44:86:b8:4e:13:92:c8:42:88:80:7e:18:30:
                    8b:21:37:be:a7:60:35:49:94:b2:81:01:1b:44:13:
                    fc:70:34:68:0a:92:6c:91:14:39:87:30:ac:db:58:
                    2a:64:5d:e4:78:fa:be:45:6c:91:8f:c6:73:66:3d:
                    23:c2:29:d2:d3:bc:98:08:ae:19:55:fd:ee:ad:a1:
                    3f:38:bc:be:e8:76:3a:0a:b5:51:ad:79:0e:af:c2:
                    cf:95:c2:05:00:62:62:99:5d:50:7c:c4:4f:ff:0f:
                    4f:2a:3f:9c:1b:48:dc:54:85:c9:f0:b7:a1:4f:fc:
                    db:c7:e6:19:e4:1d:a9:16:9c:39:1f:73:7c:56:b8:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9E:65:21:16:F5:95:7B:F0:84:E4:76:EA:F1:8D:60:C8:0B:1C:0F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7dd15761-2e0f-4730-b1c9-6ed5045b12cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:87:eb:57:60:85:a8:32:84:cc:36:c5:e2:40:f1:f0:37:f6:
         68:1a:db:63:9a:57:d4:92:9c:c9:c3:91:06:71:ac:7c:8c:93:
         ee:86:4d:c1:60:dc:db:c0:5c:87:ff:29:6c:e5:9d:f0:90:18:
         93:8a:ef:8d:ae:f4:10:94:1e:3f:1d:e7:e2:d6:86:ea:19:0d:
         44:7d:7f:85:d3:fb:55:f0:c9:34:02:ad:a1:96:78:af:ab:8d:
         ab:06:40:f0:3e:25:58:84:36:5b:2b:0d:1f:89:b4:b2:ec:69:
         94:a3:5d:4d:6f:b0:f8:5f:e1:84:b8:87:4e:50:66:26:4c:28:
         9d:36:df:59:c3:2e:73:65:fc:d8:a7:01:44:20:85:67:2f:a3:
         f6:f2:a4:25:d9:13:7e:28:1d:3f:d4:6e:3f:5c:b4:f6:78:99:
         bd:7c:57:e5:ea:2c:02:4b:2c:75:8e:85:9d:13:8d:51:34:5d:
         65:c2:f5:e9:29:91:8e:0d:cd:1d:d3:40:e1:03:0f:09:e7:9c:
         af:f7:ab:dd:6f:c6:e3:38:3c:54:c6:e4:d0:d9:b9:ab:98:c0:
         c7:d0:f4:b0:e6:65:2c:c1:83:a5:cb:d5:cd:ba:38:bc:8d:5c:
         4a:c7:e5:e0:8f:d6:6f:83:dc:22:c8:9c:5a:fc:cb:e6:45:70:
         33:9d:fd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----