Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19a90daf-bd6a-4f20-bc1f-41373b0cba16.roa
File:                     19a90daf-bd6a-4f20-bc1f-41373b0cba16.roa (raw, json)
Hash identifier:          XBAelaurE+4DlIIxjjnjmaIWHVIR1fPLhuW/om2G0CM=
Subject key identifier:   68:CE:57:3F:FF:93:0D:A8:1B:7A:3E:33:23:1B:43:67:0D:9E:12:7F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2C0E8FA8F0B7251B51690BCB6605E2972FFFBF4D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19a90daf-bd6a-4f20-bc1f-41373b0cba16.roa
Signing time:             Sun 09 Jul 2023 00:00:00 +0000
ROA not before:           Sun 09 Jul 2023 00:00:00 +0000
ROA not after:            Sun 13 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0e:8f:a8:f0:b7:25:1b:51:69:0b:cb:66:05:e2:97:2f:ff:bf:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul  9 00:00:00 2023 GMT
            Not After : Aug 13 23:59:59 2023 GMT
        Subject: serialNumber=27eaf5385ecde83ea421b4316916f27ad45666e65b39ba761ae16e068a344f2e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c9:35:9f:5b:17:65:a8:49:bd:3a:34:4f:3f:
                    4f:45:e7:de:8b:f2:9f:26:9f:1b:61:82:0b:7c:2e:
                    90:70:32:2f:ba:24:87:c9:ca:88:d5:97:9a:6e:3a:
                    3e:20:79:7d:66:ff:e5:ec:ce:08:cc:91:d8:99:d4:
                    10:87:bf:6b:b1:3c:c8:40:af:0b:0a:fb:d4:38:de:
                    a6:bd:8d:18:5e:8b:e8:d0:b4:98:7f:3c:6a:6a:4c:
                    9f:00:8a:c5:05:2d:61:c6:e6:8d:7f:e4:86:85:ca:
                    d1:2f:a6:61:79:0f:ad:eb:fe:1d:06:b3:81:5e:1e:
                    57:9e:3e:4e:87:33:01:ab:16:e7:e4:42:b5:2c:ad:
                    dd:f9:9e:2f:ae:bc:30:d8:2c:c6:0b:30:45:32:20:
                    7d:af:73:b4:b4:dd:86:c6:cc:b7:72:05:d6:c7:41:
                    9b:9c:5f:a2:8b:3f:dd:af:ff:33:7b:55:c0:72:9a:
                    c7:d0:43:7c:db:9e:55:4d:95:fb:b1:4c:83:ff:49:
                    66:ad:4b:0c:ae:3c:23:59:24:66:7c:a3:7c:99:58:
                    dd:f1:83:96:07:45:cd:b5:da:a4:a4:eb:0e:af:fe:
                    ed:4e:4d:f3:37:73:7a:91:92:ef:5c:d6:e2:a7:91:
                    dc:9f:7b:b7:b8:2e:24:cd:54:a1:fc:3b:bf:6b:21:
                    26:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CE:57:3F:FF:93:0D:A8:1B:7A:3E:33:23:1B:43:67:0D:9E:12:7F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19a90daf-bd6a-4f20-bc1f-41373b0cba16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:bd:4d:26:63:39:e7:ab:68:04:95:84:bd:96:ab:c4:97:34:
         90:10:3c:a1:cf:91:be:62:e2:84:de:7c:60:04:7b:8c:c1:73:
         4a:77:13:e4:3c:f9:28:da:d8:35:0c:0c:74:93:84:ba:72:31:
         7c:14:34:13:ef:2f:96:2b:9e:f2:66:9a:94:e0:c8:c0:08:08:
         d9:b6:62:1b:c8:0d:85:a5:e9:58:e3:3d:19:8a:7f:61:b8:e1:
         da:dd:2e:1d:76:1e:bb:aa:4c:28:4a:ca:a8:20:46:28:a2:ec:
         e0:73:3a:0e:55:ec:06:01:3d:29:16:45:fc:f8:a3:7b:02:e8:
         7a:04:c3:00:a4:d7:55:8c:47:ad:3b:ec:b8:57:80:26:f1:33:
         5d:7d:52:59:f3:5a:0e:cb:6b:40:59:f6:64:61:20:14:92:2f:
         fb:6a:78:7e:ee:2b:25:0d:fe:c0:c8:72:90:bc:ff:b4:68:dd:
         7f:85:6c:07:cf:2a:71:b0:02:b5:56:3d:be:64:9a:ff:5a:d3:
         a4:f4:f7:a5:64:a1:5c:98:c7:b7:ae:c7:a2:4d:fd:dc:0b:ea:
         f8:85:40:8d:4e:61:97:3d:03:99:d2:ec:16:58:60:a0:c2:eb:
         b8:6b:5a:7c:5a:1b:e2:90:0a:5d:e4:4c:73:a8:a9:8f:8a:e9:
         87:cb:d1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----