Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/203172c4-f652-467f-a269-6fa317ca4f5e.roa
File:                     203172c4-f652-467f-a269-6fa317ca4f5e.roa (raw, json)
Hash identifier:          9jaWEpVuz6GgRVCv6vlUWLpcEgBH3kBwRLj6whnpL4c=
Subject key identifier:   91:8A:4A:BA:14:12:6E:9D:39:D0:E9:3B:87:5A:5C:54:BC:41:D2:A4
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7965D36C667B978D735D290FA847610CF4E1E24F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/203172c4-f652-467f-a269-6fa317ca4f5e.roa
Signing time:             Sat 16 Sep 2023 00:00:00 +0000
ROA not before:           Sat 16 Sep 2023 00:00:00 +0000
ROA not after:            Sat 21 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:65:d3:6c:66:7b:97:8d:73:5d:29:0f:a8:47:61:0c:f4:e1:e2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 16 00:00:00 2023 GMT
            Not After : Oct 21 23:59:59 2023 GMT
        Subject: serialNumber=4ea8824f1fe2cc704a63fb77f69922ff37ff75454f5e7af1307ad50a951f23f2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:0f:5e:67:24:ed:4c:7c:6d:c7:8e:a8:54:
                    39:26:e2:1e:b0:69:84:3c:ac:87:2c:ea:a5:55:9c:
                    59:6f:a4:ff:31:0d:c8:4d:6c:d2:00:c7:ba:f5:a7:
                    3e:10:66:18:af:4c:e7:fd:e1:6a:2f:5b:05:25:7f:
                    1e:f8:1b:29:47:29:5e:05:42:4a:a0:c9:53:15:99:
                    16:a9:88:e1:5c:75:1c:25:51:5e:05:cb:16:ca:1c:
                    e1:12:be:75:cd:cd:0e:44:a1:d2:68:5e:aa:ae:e5:
                    e7:ed:a6:4b:08:c1:ea:a6:31:a5:7d:0f:db:33:ec:
                    05:fa:d6:d2:79:b0:65:6a:df:30:e3:cf:5b:51:bb:
                    aa:10:76:92:21:9b:cb:89:72:65:67:da:ab:c9:9e:
                    a6:ad:69:89:85:ca:23:e6:8a:b8:ec:f1:22:a0:e6:
                    89:d9:b1:23:34:f1:0e:21:22:43:8c:57:83:e0:9f:
                    35:77:4a:be:06:73:73:89:cf:f6:0d:42:e0:d9:0a:
                    03:19:70:32:90:9c:aa:34:a1:e6:a5:7d:bd:6f:a4:
                    a8:65:72:15:d4:05:65:17:19:81:03:65:57:53:01:
                    08:77:7b:1c:2c:f1:c1:97:c2:a2:f9:9e:dc:65:9b:
                    d5:39:5e:6c:7b:f9:2a:d7:86:de:b0:cf:80:77:4f:
                    01:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8A:4A:BA:14:12:6E:9D:39:D0:E9:3B:87:5A:5C:54:BC:41:D2:A4
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/203172c4-f652-467f-a269-6fa317ca4f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:6b:a8:52:ea:8e:2c:d5:fe:80:00:73:a6:9c:a4:98:1e:bb:
         6b:45:69:35:65:02:95:cd:d4:47:dd:ee:83:bb:6d:c1:a3:3c:
         61:e4:f6:b8:6d:e5:e8:fe:e9:fc:be:86:92:e4:41:71:36:6f:
         66:bf:2a:6f:1e:e3:af:6d:6f:85:28:3f:1d:32:42:fe:b1:3b:
         44:8e:6e:46:56:9f:8f:f7:4a:0c:b1:76:ed:82:2d:1f:38:47:
         f5:0b:15:d8:50:e8:2c:65:ae:05:6e:90:b3:bd:ef:69:57:65:
         24:c7:8c:2f:e6:f7:95:bc:80:0c:f5:0a:40:d9:5d:9a:85:b0:
         99:7d:6e:12:8b:76:40:bf:24:83:c1:cc:5f:54:60:24:2d:3f:
         31:78:7d:5d:82:94:9a:3e:d5:ff:aa:89:82:a4:02:8c:a6:02:
         f6:d9:0c:2e:c7:bf:23:d6:5b:ee:fc:18:47:4d:e9:d4:16:1d:
         32:cd:de:07:db:b4:f2:6a:f8:eb:ed:46:c3:cb:fa:c0:7f:5d:
         b9:d9:f0:94:52:af:e5:58:02:5e:41:f3:b2:69:74:1c:72:4c:
         0f:ae:70:0b:bc:6d:ba:99:e1:1c:eb:3c:52:ec:96:7f:44:ab:
         5c:90:91:41:85:4f:e3:26:f4:22:b8:36:14:ba:ce:d5:5d:df:
         08:de:68:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----