Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1009965d-9601-4bd6-98e8-f2d6e8e78dd9.roa
File:                     1009965d-9601-4bd6-98e8-f2d6e8e78dd9.roa (raw, json)
Hash identifier:          7BiCDQWg6m9W2fwIYaWdbsXUHli+jLXvvkRfTpISZiI=
Subject key identifier:   A7:62:BC:5B:2F:2E:FD:BF:7F:69:04:FF:F3:C5:07:55:6C:AE:D9:25
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       11072BF9C3B7AF69D35D1AEB84D1D625A213B972
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1009965d-9601-4bd6-98e8-f2d6e8e78dd9.roa
Signing time:             Sun 21 Jan 2024 00:00:00 +0000
ROA not before:           Sun 21 Jan 2024 00:00:00 +0000
ROA not after:            Sun 25 Feb 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:07:2b:f9:c3:b7:af:69:d3:5d:1a:eb:84:d1:d6:25:a2:13:b9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan 21 00:00:00 2024 GMT
            Not After : Feb 25 23:59:59 2024 GMT
        Subject: serialNumber=1427b37cee3aec8210c460d2610e9af968d982856619e0cdd478aaf564d4bbfe, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:cc:45:74:b9:5d:2c:d1:7c:d6:ed:14:07:
                    1f:52:44:67:9e:ea:5d:d9:2b:53:e7:07:1d:25:f0:
                    2e:fb:6b:14:84:c7:21:c2:ff:a2:80:b8:ea:5b:b6:
                    2b:e5:99:fe:10:71:79:bc:c4:71:29:c9:ec:6a:cd:
                    e4:a9:4b:14:ee:c9:ac:2c:c9:75:39:b5:45:b2:b0:
                    fe:cd:9c:40:84:15:c3:00:d7:c0:06:1c:d4:dd:b9:
                    5d:f6:3a:5f:07:12:30:5c:67:e4:d6:d1:68:e1:3d:
                    51:63:3e:4b:3e:46:97:b0:19:ae:bc:23:af:1f:64:
                    64:22:ad:4f:38:67:7d:c7:9f:3e:d0:8a:02:08:d7:
                    2a:d6:5c:4b:71:3d:6e:0f:f4:e6:be:ab:76:1c:67:
                    e4:37:aa:18:48:29:66:5a:c3:9c:36:39:f0:0b:12:
                    a2:54:d5:b9:7f:59:49:9e:82:d1:ac:34:b0:14:7e:
                    0d:40:30:a1:c9:c9:9c:3e:d0:76:e7:95:6a:49:7e:
                    3e:17:b4:97:2e:c4:95:1a:4b:9a:f4:dd:81:71:a5:
                    9b:a8:9a:73:98:56:90:24:0f:cf:13:72:f3:14:9a:
                    91:b0:76:c7:2c:ad:79:e1:d2:c8:fb:21:0e:b8:ed:
                    4e:a1:eb:f5:fd:eb:9e:fa:e2:47:73:aa:0c:f7:29:
                    61:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:62:BC:5B:2F:2E:FD:BF:7F:69:04:FF:F3:C5:07:55:6C:AE:D9:25
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1009965d-9601-4bd6-98e8-f2d6e8e78dd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:2d:95:c5:5b:9f:16:81:5e:4d:08:85:be:0f:2f:de:d7:25:
         0b:ec:90:29:de:54:f3:c1:fc:f9:4d:af:46:66:c3:4b:e5:5a:
         d4:f6:57:26:15:0b:58:ba:5d:47:2a:f6:45:89:01:e1:ff:9a:
         28:f6:44:44:2f:89:d3:6d:7d:a2:50:96:28:b7:53:d9:fa:2d:
         fa:3f:40:14:97:a2:58:12:92:54:db:ae:f4:c9:b5:64:88:d4:
         9f:5b:9b:65:08:bb:67:d4:d0:a0:03:7e:69:20:14:63:2c:6a:
         75:b9:85:a3:8f:6c:f8:3c:b0:e9:0d:5f:4a:56:57:bc:57:f0:
         81:6d:8f:20:07:a9:94:a3:d0:58:bb:3f:62:fc:85:19:6b:5f:
         33:f9:e9:08:2b:56:61:2d:21:e8:cd:83:a9:9f:84:65:5c:7b:
         5b:3d:d9:4e:fc:1c:d2:d5:f3:7a:63:73:d2:1d:66:b1:75:fb:
         82:56:62:64:8a:a5:39:b5:68:19:05:0e:fb:43:0e:89:dc:d1:
         7a:90:b4:12:da:6f:07:a5:e1:e8:5f:d1:22:7b:e9:eb:ae:35:
         ff:09:8e:22:43:20:a4:0b:80:85:85:4d:52:ba:b0:f3:a0:d2:
         68:6a:c9:2f:8a:60:dd:07:43:7f:8e:34:a6:fa:35:5e:39:61:
         8e:66:3d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----