Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/241da99b-6305-40bc-9d81-c16940c68484.roa
File:                     241da99b-6305-40bc-9d81-c16940c68484.roa (raw, json)
Hash identifier:          uJM6JprzUmfW5Ovr5MKILMLuO9xtZXj6mLYo76m2vH4=
Subject key identifier:   8B:F9:10:26:0B:43:C0:73:51:51:DC:E5:1D:52:A4:0D:FE:1F:64:10
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3E2167537A883FE729189A3A52E43F0E843D4D25
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/241da99b-6305-40bc-9d81-c16940c68484.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:21:67:53:7a:88:3f:e7:29:18:9a:3a:52:e4:3f:0e:84:3d:4d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=9c6e8cb1f4ca16dd66e801692a6137784ed9cbea2b2739902f6e19fad000b03c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:80:62:18:9e:a2:a0:d8:d6:da:78:2c:7a:
                    13:74:b7:25:46:01:38:98:d0:f7:e3:e7:71:7e:76:
                    61:76:4b:9a:4f:44:e5:0d:c4:f9:01:55:db:36:e0:
                    2c:84:56:34:f8:7d:fd:4a:f3:1f:47:e8:8d:79:3b:
                    56:75:2b:74:98:19:91:6f:c6:dd:cf:bf:aa:6d:c5:
                    b7:32:36:19:7f:66:30:25:c3:16:49:55:99:4e:3b:
                    73:3a:f8:77:3a:2a:c5:77:2c:7e:76:bc:08:23:02:
                    e5:e9:fa:e5:80:59:9a:53:3b:c5:db:0c:a3:f7:e4:
                    9f:0b:fb:36:0e:a8:18:a0:a2:c2:4c:b2:91:a3:ee:
                    65:80:71:db:c4:91:e7:ae:0b:fc:7a:a4:f6:1c:b5:
                    a9:b4:1d:60:c9:b4:48:0e:5b:59:9e:31:3f:cb:4f:
                    ff:0c:59:e4:2d:1a:8f:47:50:cb:14:56:3a:54:96:
                    ff:01:b5:52:f3:f8:e1:39:f1:a4:1f:b6:82:b3:0e:
                    9d:41:04:a1:31:86:a2:50:3e:b2:04:19:df:3d:19:
                    17:d9:7f:6b:a4:8f:97:b0:1d:8d:4c:0b:ad:e9:9e:
                    12:fa:5f:34:01:ac:80:ab:da:19:5b:b6:8d:4d:88:
                    c7:f1:d3:fb:3e:15:b2:5b:ba:72:f7:8f:15:b9:6b:
                    d7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F9:10:26:0B:43:C0:73:51:51:DC:E5:1D:52:A4:0D:FE:1F:64:10
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/241da99b-6305-40bc-9d81-c16940c68484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:4e:f6:80:00:71:9a:95:c2:61:30:49:6e:9d:4d:fc:25:5c:
         a0:22:c5:99:ff:bf:b1:a4:9b:31:73:fa:bd:11:3b:8d:5f:7d:
         93:0e:6d:a6:cf:61:3e:55:38:7b:ea:4f:5d:db:fe:09:93:76:
         9e:46:4c:28:b6:97:14:03:ae:3b:1c:d6:12:9b:fe:72:db:5a:
         2e:fa:6f:43:3c:11:f8:cf:23:96:67:fe:75:7a:ed:64:96:a5:
         db:c2:d1:aa:d6:38:2a:e6:08:84:ce:77:da:10:d7:0d:88:4b:
         91:fd:0c:68:40:62:74:e2:ad:c1:f1:6b:1b:20:aa:68:f5:4d:
         a6:41:7d:1b:a2:46:f5:17:bd:9f:74:4f:ba:98:80:26:d4:43:
         a3:b2:0b:54:b9:08:98:49:62:61:b1:0b:65:2d:65:30:4d:3c:
         f0:d0:bc:51:ea:dc:f0:8f:bc:3e:8f:e4:fd:06:cb:94:aa:99:
         ce:74:2e:7e:b4:c7:32:10:08:23:d3:93:2b:24:a4:17:9a:02:
         31:1c:2e:7c:81:68:29:2e:61:6d:43:95:d7:15:e5:32:66:08:
         b7:42:65:72:37:66:ab:88:fd:56:81:33:22:7a:8a:d9:67:92:
         a4:a3:cc:68:62:03:8c:d6:a2:14:5a:a9:a5:bf:6f:41:18:de:
         ac:30:fd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----