Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17d9f431-4e70-416b-babc-666cbdafd0b6.roa
File:                     17d9f431-4e70-416b-babc-666cbdafd0b6.roa (raw, json)
Hash identifier:          1dfyOBlEGa1yGMeDVczOuADUxyLOTlTJBsnKHGBxGuo=
Subject key identifier:   14:7A:44:E4:F4:64:58:27:8E:A8:E2:06:E2:5E:31:DD:0F:4A:54:34
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6B80510FFED2C83D4D315432B6C57DE0CCB05D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17d9f431-4e70-416b-babc-666cbdafd0b6.roa
Signing time:             Mon 12 Feb 2024 00:00:00 +0000
ROA not before:           Mon 12 Feb 2024 00:00:00 +0000
ROA not after:            Mon 18 Mar 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:80:51:0f:fe:d2:c8:3d:4d:31:54:32:b6:c5:7d:e0:cc:b0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb 12 00:00:00 2024 GMT
            Not After : Mar 18 23:59:59 2024 GMT
        Subject: serialNumber=3d836c37043da50198748981991b7d1637f4a6978ee24e490b6b56159372d131, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:7f:d4:56:90:aa:42:de:9b:4f:62:0e:ad:
                    fd:81:0a:2b:f2:d4:2d:16:67:e7:e2:37:20:bf:f5:
                    0c:03:09:19:61:f7:48:3d:dc:45:6a:59:4a:57:87:
                    8c:db:de:58:53:40:56:67:fe:8e:be:ea:71:d3:40:
                    1d:87:65:99:12:2b:e5:8a:ec:15:23:8a:48:b6:9b:
                    bd:ad:e4:30:47:88:11:19:55:61:f5:93:bc:3b:6a:
                    45:7a:9c:d2:d3:72:4e:e5:36:a7:64:18:e6:e8:de:
                    ce:29:7b:3d:ca:d9:67:52:50:11:6c:4f:c4:d6:35:
                    8c:f3:70:67:47:ea:55:dd:fa:43:4f:42:52:af:a8:
                    7e:44:97:16:90:89:dd:cb:bb:bb:dd:2d:b2:6a:17:
                    74:a7:a9:58:07:82:61:3c:5f:61:6d:76:34:ce:87:
                    b3:23:7c:1e:ab:13:44:9a:cf:b4:1d:96:a0:88:7b:
                    09:2c:90:c3:53:ab:51:a0:9f:9f:48:00:52:89:51:
                    9a:80:64:b1:75:6d:ef:a6:dc:ca:45:f1:a2:b9:06:
                    99:e4:d1:0b:56:30:a3:b6:8b:ff:ac:88:6d:90:6a:
                    6c:ea:ca:d0:e8:49:d7:61:c5:ea:72:1b:9d:ba:fd:
                    82:ed:ce:29:bf:c4:72:01:62:36:7d:24:f6:d9:23:
                    7c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7A:44:E4:F4:64:58:27:8E:A8:E2:06:E2:5E:31:DD:0F:4A:54:34
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17d9f431-4e70-416b-babc-666cbdafd0b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:0d:98:cb:b7:77:5b:72:5e:7f:10:3a:e4:92:af:28:bb:b0:
         f6:f6:be:4d:d9:58:20:d6:b6:1e:60:a5:08:fc:df:7f:a4:27:
         c4:77:57:a1:98:f6:4d:10:63:b2:a6:c7:9c:14:0c:7c:04:8a:
         80:8c:3e:bc:ef:bf:1e:98:f8:78:d1:75:61:f9:7b:ca:04:9b:
         e0:96:22:f1:16:b5:11:93:28:11:56:55:bb:1f:93:9d:c5:44:
         89:a8:84:76:59:44:ec:82:84:53:3a:b6:5a:5f:f4:33:20:91:
         c6:8e:b9:85:44:8e:de:14:57:47:53:51:cd:49:13:1c:78:b3:
         eb:0d:cb:4c:ba:dc:41:c2:4f:7f:03:39:71:ba:dc:ac:25:a5:
         5c:30:2b:9d:6e:96:05:7f:63:ab:4c:d3:b0:aa:47:d5:f9:d8:
         d0:fe:72:b9:ec:f9:b2:41:ec:8a:28:fa:75:f7:f4:c6:81:a6:
         0e:77:1d:da:5c:54:c4:9d:61:6a:8d:eb:6e:6c:21:47:a2:b8:
         9b:4e:59:90:fd:2c:87:42:77:14:d9:fc:84:5e:2e:ff:bd:01:
         13:eb:3c:27:ce:3f:43:e3:27:03:70:ea:c0:e9:ac:c9:91:a5:
         6b:71:a1:0a:6e:3b:c8:05:bd:fd:14:20:12:16:f4:1e:9e:90:
         f6:d7:d3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----