Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19217cdf-b3ce-4ef5-a581-b42ff43010c6.roa
File:                     19217cdf-b3ce-4ef5-a581-b42ff43010c6.roa (raw, json)
Hash identifier:          79CktCGQBXK4Tio1v702H1+26IxlCHsO3EaaN1wLx9k=
Subject key identifier:   F0:A2:7A:A9:C7:55:CD:D1:68:66:4D:99:EF:44:80:C3:24:00:6C:D8
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       455031FBE5E6E6BEC907613D3888D537809636D0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19217cdf-b3ce-4ef5-a581-b42ff43010c6.roa
Signing time:             Tue 07 Nov 2023 00:00:00 +0000
ROA not before:           Tue 07 Nov 2023 00:00:00 +0000
ROA not after:            Tue 12 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:50:31:fb:e5:e6:e6:be:c9:07:61:3d:38:88:d5:37:80:96:36:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov  7 00:00:00 2023 GMT
            Not After : Dec 12 23:59:59 2023 GMT
        Subject: serialNumber=9bacc04bd6487709b4a0a7efad0e2e6e7e399c667c36919cf3cad24701ee693c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:71:cc:70:12:41:dd:24:f7:f8:db:35:3d:38:
                    bc:3b:a2:5f:47:8a:2e:d7:48:9a:37:fa:a5:1d:e3:
                    cf:ae:fc:fd:1c:e0:20:4e:e4:13:50:b4:f1:98:fb:
                    34:cd:39:c8:fb:8d:e3:83:89:df:5b:bd:cd:cb:da:
                    c4:8e:56:56:85:d1:e7:39:52:77:d2:1e:dc:cc:ca:
                    70:4b:b7:f1:a7:7b:c9:15:49:76:06:b5:5e:18:f3:
                    c0:a2:9c:84:0d:3d:82:bb:b9:e4:9f:81:91:b5:c0:
                    cf:67:dc:ea:7b:d6:30:b8:4d:18:74:16:02:2b:ed:
                    4a:bb:cb:83:7a:33:18:fa:a8:c6:3e:e1:64:9f:da:
                    04:d4:28:9f:b8:3f:1c:f0:0c:0b:14:f7:b6:93:5e:
                    ec:2b:df:bf:9e:f9:cc:d1:26:73:66:a0:d1:61:b9:
                    35:09:fb:f0:03:30:2e:93:ce:49:36:00:d8:62:6c:
                    62:f1:56:68:99:29:22:65:3d:2c:d3:7f:c8:e7:7f:
                    0a:b1:11:08:97:44:43:d5:fc:56:da:32:20:0f:3a:
                    f2:2d:eb:3b:e9:3a:58:07:fc:b5:ed:73:2e:f9:db:
                    a3:5b:5e:e3:e9:70:6e:26:f1:7f:de:32:64:1d:e9:
                    9a:12:28:6e:0c:8d:fb:4f:31:fe:2c:b7:62:9d:8f:
                    04:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A2:7A:A9:C7:55:CD:D1:68:66:4D:99:EF:44:80:C3:24:00:6C:D8
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19217cdf-b3ce-4ef5-a581-b42ff43010c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:99:05:eb:10:34:b8:47:89:ab:39:47:4a:a6:81:8d:e4:bb:
         e3:34:40:c7:d7:66:f9:19:d0:ef:a9:79:31:fe:89:60:a0:50:
         a9:13:4e:0e:34:7d:61:df:27:94:4d:95:2e:00:d0:a6:f0:44:
         4d:59:43:53:d1:f4:90:a4:bc:bd:ed:78:79:87:fa:ad:c2:d4:
         d2:74:95:d4:ad:ae:8d:c8:40:e1:fe:f7:e0:cb:fb:c7:43:0b:
         f3:6b:e2:35:db:4d:ea:ec:6d:ad:6c:c6:91:e7:ae:de:18:19:
         ae:9b:99:e3:34:54:e6:1a:54:6c:3d:e6:ce:16:4d:cb:3a:83:
         52:26:72:53:6f:f8:17:b4:b1:bc:91:3c:d1:11:3e:57:17:c0:
         5e:e4:6c:31:01:c3:97:39:ba:b3:c5:97:04:62:05:2d:a2:de:
         4c:6c:27:c4:bc:e0:54:4b:82:11:b1:13:57:39:69:cd:6a:95:
         c8:78:20:cc:d8:d3:12:db:de:15:89:a6:ab:35:22:fe:b2:5b:
         ff:1e:9d:5c:27:9e:7f:57:3c:23:7b:f6:f3:d9:b4:77:8f:24:
         a5:2e:3b:03:d6:61:ed:33:71:37:90:ed:0b:8c:e7:12:7f:4f:
         23:28:ff:7c:2c:1a:a6:8a:34:19:23:93:5b:63:b6:e7:68:01:
         1d:94:24:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----