Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d09b4cca-55f4-4e5b-912b-739ffe747738.roa
File:                     d09b4cca-55f4-4e5b-912b-739ffe747738.roa (raw, json)
Hash identifier:          i3rQ+6Y6+xhhVGo/4ToG2bDOh6+YWF7fBFqvkS5uAJw=
Subject key identifier:   9C:BC:46:81:0E:0E:F3:78:BD:85:D4:15:8E:0C:B2:29:CA:64:08:50
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5E5D9F782860E375D34840F9805234ABF1F0CFF8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d09b4cca-55f4-4e5b-912b-739ffe747738.roa
Signing time:             Wed 12 Jul 2023 00:00:00 +0000
ROA not before:           Wed 12 Jul 2023 00:00:00 +0000
ROA not after:            Wed 16 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5d:9f:78:28:60:e3:75:d3:48:40:f9:80:52:34:ab:f1:f0:cf:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 12 00:00:00 2023 GMT
            Not After : Aug 16 23:59:59 2023 GMT
        Subject: serialNumber=6725c96446bb1ca80fa3b04d004ff674939ca9189313058fa2e6f741eefd74b9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:94:4e:f9:f7:57:38:61:8f:17:43:3d:5c:
                    30:3e:b8:0d:49:08:50:9e:aa:22:ce:06:a0:7b:c0:
                    34:e0:fd:9b:8a:93:81:5c:cb:ee:6d:53:6b:38:45:
                    26:12:fd:6a:29:3f:5a:3b:96:6e:35:7b:be:c8:86:
                    9d:01:fa:8a:e3:92:f9:39:17:73:83:d2:26:f7:ff:
                    99:a9:3b:d2:2d:c9:66:6a:c0:ae:4f:b8:1f:97:bd:
                    ef:28:18:0f:74:e5:8c:15:74:ec:62:f2:18:60:99:
                    f0:1f:a4:03:3a:8a:38:48:04:56:d6:ae:4f:91:36:
                    cd:d7:82:c1:a4:8f:c3:67:c7:f5:6b:6e:7c:03:a4:
                    ab:8e:6e:f0:ea:ea:00:9f:9f:d1:87:ac:3b:38:57:
                    64:19:7a:4e:f8:33:05:18:99:2b:bb:2d:c1:f3:6b:
                    da:fe:c3:92:c5:7f:e6:98:41:c2:69:6b:55:05:34:
                    5c:30:b3:72:18:ea:91:1c:c7:d5:9e:24:59:a3:66:
                    0c:66:76:82:84:4d:90:d9:46:43:e6:15:f1:49:9e:
                    59:4e:44:88:70:dd:e2:ad:51:02:63:17:2a:b7:a2:
                    cb:12:f4:08:7f:e7:57:21:cc:c8:ee:44:88:5c:95:
                    14:05:4b:f4:4e:fd:05:8a:81:86:69:46:a3:6d:d4:
                    18:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BC:46:81:0E:0E:F3:78:BD:85:D4:15:8E:0C:B2:29:CA:64:08:50
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d09b4cca-55f4-4e5b-912b-739ffe747738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:b3:13:a2:b8:c0:2f:7b:ed:c6:e5:1c:37:ec:70:33:88:7e:
         0b:d2:e0:51:7b:28:d4:70:ef:90:02:7e:28:09:e7:1c:93:31:
         9f:3a:d5:95:a0:66:be:cb:73:86:b2:e5:11:45:3c:ec:87:cb:
         b2:73:d5:3e:de:fc:f5:a3:75:af:ec:d0:66:7c:31:f2:2a:93:
         01:9e:57:73:3a:02:32:69:89:ae:6b:a9:ff:8a:9c:f9:9a:87:
         18:09:15:53:d5:c0:8e:8c:1d:dd:51:c4:25:fe:e5:bb:4f:57:
         16:5b:bf:8b:3b:34:97:c9:25:6b:ff:de:4d:cc:9f:da:54:d3:
         cc:f7:7e:51:10:0e:e6:e2:30:bf:28:b7:12:6b:b7:4d:46:5c:
         19:a3:7e:14:88:23:54:c5:57:cc:44:e3:15:66:b9:8f:01:54:
         f7:cb:90:50:3b:e5:4b:28:d0:28:f9:be:17:a6:72:59:fc:22:
         f6:74:d9:cf:fd:ed:e1:75:f1:ae:df:d8:b4:c0:08:f1:b0:1f:
         75:23:c7:9a:53:7e:82:aa:0a:9a:49:0b:1b:ea:83:98:6f:c1:
         1e:c1:18:5b:a8:25:de:22:d8:c2:ba:9d:83:f0:e4:32:8b:e9:
         b0:8f:c8:57:e4:19:67:9e:89:1b:08:36:17:d4:fa:1f:a1:39:
         ca:1e:23:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----