Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/07ef85a7-059f-4942-b944-ce8c2e3a2b3b.roa
File:                     07ef85a7-059f-4942-b944-ce8c2e3a2b3b.roa (raw, json)
Hash identifier:          BWYMjJ24mW8VN+qxafzvXntl+mBgiCVhPsO9tu4ioDU=
Subject key identifier:   DB:93:A4:97:AF:77:A0:25:34:94:2B:0C:65:6A:F5:2A:35:BA:3E:BF
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       289407FB7D39F9C49E2D57AC32597F01119B080D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/07ef85a7-059f-4942-b944-ce8c2e3a2b3b.roa
Signing time:             Thu 14 Sep 2023 00:00:00 +0000
ROA not before:           Thu 14 Sep 2023 00:00:00 +0000
ROA not after:            Thu 19 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:94:07:fb:7d:39:f9:c4:9e:2d:57:ac:32:59:7f:01:11:9b:08:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 14 00:00:00 2023 GMT
            Not After : Oct 19 23:59:59 2023 GMT
        Subject: serialNumber=940d1a7201e0eb6db90ba15fbc9a222e39e62f41980e8159f4ddfc8b36aba2e6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:71:c1:c9:59:32:70:f9:83:75:54:85:70:cb:
                    e6:c8:8a:9c:a2:7d:48:c0:88:35:9a:54:43:70:b8:
                    f9:88:84:c1:8e:55:71:b1:62:90:2c:41:ec:64:62:
                    2d:f7:e9:d6:ed:7a:58:44:8b:ca:36:a2:bd:23:03:
                    de:19:ac:1b:6b:f3:fa:62:57:82:f1:a7:a4:a8:2d:
                    99:ac:a3:66:47:16:51:0a:88:fa:fc:da:7e:2a:d8:
                    89:06:58:69:64:9d:c7:71:27:d2:b0:8f:18:0e:d4:
                    e3:f0:58:09:35:97:99:fc:81:ea:9b:b5:82:a2:43:
                    b0:eb:bb:7d:98:6d:c2:bd:54:1e:f0:54:ae:30:45:
                    30:9a:73:76:ac:85:21:47:89:de:73:de:39:e3:4f:
                    86:fc:00:03:e5:32:70:4e:60:e6:fc:04:3f:b4:c4:
                    82:27:78:51:03:1f:4c:04:b4:75:01:29:1d:4d:4d:
                    55:bb:f7:6a:18:f2:d1:ba:a5:14:4c:73:d3:94:e5:
                    fa:83:48:75:48:f8:bf:e1:92:f4:10:a3:c4:4e:76:
                    ff:42:56:61:bc:d6:5d:0b:49:ce:80:c3:eb:d2:6e:
                    82:99:fd:68:f2:75:09:54:9a:80:c1:60:4f:d0:0d:
                    66:0a:61:c6:8a:d1:94:ac:22:d1:f4:17:5d:1f:bf:
                    a5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:93:A4:97:AF:77:A0:25:34:94:2B:0C:65:6A:F5:2A:35:BA:3E:BF
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/07ef85a7-059f-4942-b944-ce8c2e3a2b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:87:ba:a9:ba:42:a4:28:57:a0:97:74:37:37:6c:6c:f7:8a:
         68:20:68:3a:3b:61:34:de:19:49:07:ba:2c:74:c2:d0:06:57:
         64:3a:1c:04:65:c9:11:61:fd:80:dd:ba:aa:f1:b4:fa:96:1e:
         2c:25:15:a0:3d:e8:ed:fe:ec:f2:72:18:c6:a7:5e:5a:70:8f:
         b2:29:08:59:41:62:5c:2f:3e:f7:5e:20:06:66:74:b4:d4:f5:
         91:94:c9:ad:49:c9:0e:f4:26:98:fd:0e:19:85:d0:aa:ca:fe:
         2d:3a:75:36:64:37:39:89:08:3b:63:d2:b5:9f:69:b1:f1:9b:
         df:a1:11:5b:49:5b:23:db:b0:bc:e6:10:cb:28:75:e4:af:a3:
         15:6e:ae:0f:03:e6:83:3e:ca:ce:26:c8:87:4a:46:c5:1b:a2:
         23:e4:51:a4:10:b5:08:27:7c:2c:74:52:9e:36:f3:8b:a2:7e:
         ed:ad:33:d6:9f:c9:8f:85:54:48:d2:51:eb:7a:ba:50:a9:4e:
         48:54:0c:fd:1b:b5:dc:84:76:8b:f4:f1:86:13:f5:d3:75:70:
         58:e9:17:00:ba:11:52:f4:4c:29:15:51:2c:25:02:09:14:dc:
         d2:c5:85:43:55:61:2d:32:8f:43:f1:3c:f3:3a:f1:53:9f:06:
         85:dc:a1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----