Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2209fdf2-4209-41ec-b41e-f25deddea7e9.roa
File:                     2209fdf2-4209-41ec-b41e-f25deddea7e9.roa (raw, json)
Hash identifier:          RCdmXm5AqrTBrX+cg9X0v4TCq0mIPHpGfJu8S3d9eB8=
Subject key identifier:   3C:F2:EB:CD:D5:D1:8B:EB:C3:3E:CE:42:BB:67:6C:79:82:4F:D5:6F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       03890DF75B067FFFCF45D8C51B680DC8CF202F42
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2209fdf2-4209-41ec-b41e-f25deddea7e9.roa
Signing time:             Sun 09 Jul 2023 00:00:00 +0000
ROA not before:           Sun 09 Jul 2023 00:00:00 +0000
ROA not after:            Sun 13 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:89:0d:f7:5b:06:7f:ff:cf:45:d8:c5:1b:68:0d:c8:cf:20:2f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul  9 00:00:00 2023 GMT
            Not After : Aug 13 23:59:59 2023 GMT
        Subject: serialNumber=2a26a948f392b020be08b54b250fc245eaa4ceac0661b219e5148eeae4249d87, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9f:18:d5:09:2b:92:b8:8f:f9:e1:02:65:4d:
                    6f:65:76:f6:5f:04:a7:b4:0b:66:01:1b:76:0e:cb:
                    7c:34:39:62:ee:fd:b6:e8:4b:13:84:d5:7f:98:04:
                    6c:a9:13:64:9e:2d:e7:59:9f:75:29:0e:fc:54:a8:
                    06:3a:5d:2c:a6:30:c0:8d:fc:77:36:ce:d8:b9:b9:
                    d0:cb:da:34:0f:ca:b0:ac:d8:f6:98:f9:34:07:fb:
                    28:a0:50:69:97:db:5a:f8:47:b4:31:e0:97:9d:9c:
                    d5:7a:29:f0:2e:ff:66:29:1c:b3:86:8e:ce:f8:e7:
                    bc:68:b9:c6:e3:5e:3c:1d:05:58:98:65:3c:94:b1:
                    ca:a0:03:fe:55:2b:ea:c3:56:4b:e1:88:79:fe:00:
                    85:46:92:a1:db:5c:8e:50:61:9e:91:df:4e:0a:eb:
                    8e:dd:82:bd:8b:2a:89:79:66:d9:80:75:3a:9a:c6:
                    d1:01:f8:fc:54:ba:e0:55:78:77:bc:da:6f:1d:c2:
                    5c:20:35:4d:44:04:9e:4d:3b:d6:8f:55:f1:53:c1:
                    a3:42:e4:0d:4b:0d:71:49:dd:77:c7:05:d9:e1:2b:
                    ce:d1:05:bf:33:1d:36:25:ae:64:a3:34:50:bd:6c:
                    57:ed:1a:8f:5b:66:80:16:d8:bf:9a:97:3c:ea:dd:
                    1f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F2:EB:CD:D5:D1:8B:EB:C3:3E:CE:42:BB:67:6C:79:82:4F:D5:6F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2209fdf2-4209-41ec-b41e-f25deddea7e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:b9:df:2d:79:8b:39:09:90:61:b6:d3:9b:46:b6:04:ff:c0:
         b1:7b:c1:80:de:b8:7c:b7:71:e8:79:80:3d:ae:27:89:64:1f:
         4c:bf:6f:3d:5c:88:ed:30:e9:a8:dc:9c:41:25:28:f3:a1:4b:
         c9:12:47:74:11:e8:e3:fd:11:46:3f:db:cb:3c:7d:fd:d5:b8:
         23:29:3d:25:99:a4:49:62:d6:47:5b:6c:c0:05:89:f1:9c:67:
         06:44:ec:52:9f:9a:16:d1:f4:9d:4e:5e:a5:0e:74:64:d9:20:
         2d:71:d0:17:df:3f:d2:cd:d3:ab:0e:86:b7:44:52:b7:61:43:
         8f:2f:be:28:d2:7c:b8:d8:a1:03:cd:f1:2f:e9:30:16:5e:be:
         a5:33:a5:2a:30:0e:1d:5c:e7:37:3f:19:48:44:08:17:f0:b4:
         22:2c:05:60:13:01:04:f5:ff:a4:d7:59:f4:10:c1:e5:af:44:
         36:2d:f2:05:e6:00:37:9d:2e:cb:a6:d1:d9:bf:9e:4f:f1:47:
         2b:50:93:03:49:5e:29:0d:d0:2e:e1:59:22:f7:f7:86:70:7d:
         8b:5e:66:93:5a:c6:40:a9:bc:c8:8f:ec:7c:5c:06:ea:dc:5d:
         20:1a:0a:16:cd:dd:84:aa:f8:57:4c:ab:31:6d:8a:46:1a:8d:
         9d:1d:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----