Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8d8d5b97-bf83-4127-bac2-ca487b9d51eb.roa
File:                     8d8d5b97-bf83-4127-bac2-ca487b9d51eb.roa (raw, json)
Hash identifier:          PqqrDckziuov6DLCbXfR4ChzwcCvKWbO7N3ncjznPmc=
Subject key identifier:   E3:9E:58:76:9B:70:F5:FB:4D:80:DF:8A:00:BC:20:B6:28:F3:39:B5
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       363E37398E5E49858391341D9652138939FF6129
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8d8d5b97-bf83-4127-bac2-ca487b9d51eb.roa
Signing time:             Wed 28 Jun 2023 00:00:00 +0000
ROA not before:           Wed 28 Jun 2023 00:00:00 +0000
ROA not after:            Wed 02 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3e:37:39:8e:5e:49:85:83:91:34:1d:96:52:13:89:39:ff:61:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 28 00:00:00 2023 GMT
            Not After : Aug  2 23:59:59 2023 GMT
        Subject: serialNumber=376e19d03ba0e85fe36e9d4d16de1d2c225182ce9d5f0d764c2d4a3da33fa226, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:2d:8c:a4:b2:2f:dc:dc:9b:b6:32:d2:88:
                    3b:18:8a:64:12:74:e2:35:6a:80:00:e7:ce:51:3f:
                    7d:99:04:ae:bf:a4:eb:81:e2:dc:f2:e6:fe:28:5f:
                    dc:6e:9a:14:03:d5:d1:98:85:03:7b:10:51:ca:d2:
                    64:90:6a:df:2b:55:56:90:1f:5c:ed:54:f6:f6:3d:
                    e7:fc:be:b1:b5:b9:3b:9f:ee:6a:93:e0:84:46:41:
                    c0:f6:3d:ae:4b:4c:9e:8f:70:e6:47:89:e8:bc:39:
                    b2:2f:8d:17:08:61:88:b3:7f:3d:25:56:44:d1:74:
                    09:5e:12:4d:b4:53:1d:05:7d:f1:de:c1:3e:5c:80:
                    3d:a3:2e:2b:57:45:d4:c7:c9:27:7c:93:a6:b6:c7:
                    17:1b:4b:e1:a0:d6:54:f5:e3:ed:e4:fb:c8:5f:a4:
                    e0:4f:45:db:7a:e5:ba:62:3c:36:89:e5:fa:9d:e6:
                    3b:17:3f:3b:15:33:18:8a:91:60:f2:85:ec:b0:9a:
                    f8:f5:c4:6b:a8:86:1e:41:17:46:86:56:e3:88:a2:
                    d0:51:ad:9a:2c:e5:51:95:c5:56:a8:60:96:f9:fd:
                    f7:17:9b:19:43:ec:0e:52:81:d1:9b:9c:b9:a9:a1:
                    e0:06:98:f3:e5:42:e0:c6:f2:dc:0f:43:d7:0d:2f:
                    84:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9E:58:76:9B:70:F5:FB:4D:80:DF:8A:00:BC:20:B6:28:F3:39:B5
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8d8d5b97-bf83-4127-bac2-ca487b9d51eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f7:8f:39:35:cf:33:3f:81:e5:6e:ef:49:ea:09:5d:c5:1a:
         a8:70:f8:30:72:92:34:ab:bf:77:8a:88:9c:2f:a2:34:9e:40:
         ac:d8:9c:20:b0:f0:bb:b6:21:2a:7f:0f:46:ba:6e:c4:c4:11:
         17:c6:39:04:9e:1b:ad:1d:b7:aa:d2:05:97:a0:2c:c1:60:6a:
         58:78:a6:23:26:17:92:93:d8:b9:68:ca:d5:bf:58:49:19:c5:
         3b:bd:99:66:5a:4b:a2:84:f6:09:eb:30:d3:86:1e:90:d2:e9:
         3c:bb:10:7a:71:64:b4:01:4f:e5:a3:4a:ee:c9:03:52:9f:6d:
         0d:f1:65:ee:86:44:43:d1:94:56:ec:0f:13:c5:6a:a3:02:c6:
         e4:f1:86:f5:77:67:47:40:6b:34:ee:72:8c:80:03:b5:6d:c6:
         1e:9e:ad:01:b2:af:ac:a2:ea:f9:62:b8:a2:72:c6:c2:9c:3b:
         0e:36:22:13:ea:6a:da:e3:8f:0b:ee:4f:fd:a7:c2:b8:ac:69:
         93:0b:54:33:b7:a1:08:f1:1b:f6:55:2b:62:13:be:74:76:17:
         b6:1b:b3:b8:99:ca:d7:65:7a:33:01:3b:e2:c7:54:5a:8e:96:
         04:cf:13:b8:16:84:30:52:38:3e:c6:67:41:04:46:0a:52:e1:
         79:e3:0c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----