Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/11f0d6d0-327e-49e3-bd6b-0f9176cffc2d.roa
File:                     11f0d6d0-327e-49e3-bd6b-0f9176cffc2d.roa (raw, json)
Hash identifier:          wVZQdY//nViASIqUuEKqQkfK0fnZzpG/CDMFfsWPNss=
Subject key identifier:   89:4C:90:C7:84:E0:8F:67:F8:70:CF:46:9B:56:CA:51:73:89:06:0C
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       28064D0F15865918C8E8E1BA3E964E033D206293
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/11f0d6d0-327e-49e3-bd6b-0f9176cffc2d.roa
Signing time:             Thu 14 Dec 2023 00:00:00 +0000
ROA not before:           Thu 14 Dec 2023 00:00:00 +0000
ROA not after:            Thu 18 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:06:4d:0f:15:86:59:18:c8:e8:e1:ba:3e:96:4e:03:3d:20:62:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 14 00:00:00 2023 GMT
            Not After : Jan 18 23:59:59 2024 GMT
        Subject: serialNumber=5c394c92b2e3acf9eaf844187d7da0f68eaebe94ba4a18ca762ee69eb410ce79, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:2a:fc:49:68:8f:b2:af:5e:ab:81:03:8f:
                    68:45:ba:37:f7:c8:30:ff:25:ce:1b:d4:27:0b:10:
                    86:a4:67:93:11:55:da:74:58:06:64:65:16:48:74:
                    05:94:28:f1:0c:87:8e:e0:87:59:a5:3f:d7:5b:f3:
                    8f:a7:65:c0:11:d5:1f:28:3a:e6:e1:64:ca:b3:90:
                    54:f5:84:c8:5d:13:7e:83:92:f6:70:e6:98:e0:05:
                    a3:33:8a:bb:a0:57:f1:7a:5a:d2:97:5d:35:0a:af:
                    02:e5:2d:5e:95:3c:1e:09:93:b1:f8:77:66:16:e3:
                    04:0c:ad:07:e1:eb:05:71:5e:33:ca:6f:85:71:90:
                    74:55:89:de:a1:aa:f1:08:c7:3d:89:3b:c4:ee:c6:
                    ef:60:dc:fd:3c:d9:bb:8b:19:0d:ac:de:ec:3c:7c:
                    57:b1:e1:f1:08:21:8c:c3:5b:a3:71:87:75:93:a3:
                    84:b6:90:91:2a:ef:18:b4:a8:d8:86:f2:ad:71:6c:
                    87:1f:4e:c8:c3:66:19:d8:6e:8f:d3:24:d0:43:5d:
                    5e:21:14:80:9d:fa:15:5a:88:a1:ff:d4:d0:31:51:
                    75:22:7c:6b:ad:75:1b:3e:18:93:d9:70:9e:d9:9d:
                    6b:8a:43:c0:5f:54:9e:73:ca:05:7a:a4:18:4c:32:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4C:90:C7:84:E0:8F:67:F8:70:CF:46:9B:56:CA:51:73:89:06:0C
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/11f0d6d0-327e-49e3-bd6b-0f9176cffc2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:db:a5:4f:e4:1c:7d:bc:25:02:a3:2b:18:c8:43:87:5e:9b:
         e1:24:c3:07:6b:d2:df:5e:73:1a:c6:0e:23:ac:d6:46:03:e3:
         ce:88:53:1e:4a:cf:02:8a:16:1f:59:e6:71:24:0f:1e:1d:f5:
         99:47:b9:54:d9:34:30:8c:db:06:05:e0:61:f2:69:02:8f:87:
         c4:96:df:0a:d0:27:f9:15:3b:33:b8:59:be:83:7c:fe:e1:a7:
         a4:63:c4:ed:a8:af:58:38:38:00:12:5d:54:69:25:8e:8c:04:
         d0:c1:81:2c:db:bb:73:2d:25:84:20:13:b4:e1:25:8b:8b:2c:
         bd:79:df:92:3e:7a:7d:44:57:87:62:27:9a:17:e5:78:69:7f:
         27:e3:5e:9f:28:40:c1:b2:95:5b:d7:7f:4a:47:8d:63:f3:35:
         6f:0f:61:f5:9e:d1:68:be:57:c0:fd:a6:98:b6:19:51:dd:a6:
         1c:37:72:2d:c2:90:2f:71:d5:08:b3:82:1b:73:31:7d:30:b3:
         66:6a:f3:df:86:23:82:d7:87:01:ea:09:27:7d:51:47:46:1e:
         24:de:46:e7:2c:c5:e9:7f:68:11:ac:f6:6c:c6:75:58:8c:c4:
         03:7e:05:6b:7e:ee:e2:78:ae:da:1f:a4:ac:6d:de:38:fc:0b:
         4d:2d:16:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----