Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26788c67-659c-4d1d-9c54-22eff1c7554f.roa
File:                     26788c67-659c-4d1d-9c54-22eff1c7554f.roa (raw, json)
Hash identifier:          p/S1wyBx8HHePKaVW4G3E2VLZEHjSgbNboHauJXOGRY=
Subject key identifier:   91:8D:D9:9D:0D:20:FF:A5:DD:D6:E0:0F:08:F0:5C:0F:75:40:86:3A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2E2BB9995C1F2865CE60128B43F4F19050404D41
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26788c67-659c-4d1d-9c54-22eff1c7554f.roa
Signing time:             Tue 25 Jul 2023 00:00:00 +0000
ROA not before:           Tue 25 Jul 2023 00:00:00 +0000
ROA not after:            Tue 29 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2b:b9:99:5c:1f:28:65:ce:60:12:8b:43:f4:f1:90:50:40:4d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 25 00:00:00 2023 GMT
            Not After : Aug 29 23:59:59 2023 GMT
        Subject: serialNumber=8371508038cf7442607d8a845e3d29d56d71a1b9d4b3109da436a9f6fd06f914, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c6:d1:84:76:b4:f6:0b:4d:bb:c6:db:24:00:
                    fe:d1:d5:35:30:33:2f:38:a7:ae:21:b7:6b:fa:c9:
                    33:64:2f:63:0b:e6:14:cc:10:15:80:0e:5f:b8:94:
                    e2:9b:37:20:d8:64:ed:36:87:da:0a:ac:bd:ce:2b:
                    0c:06:bb:d9:ce:fc:55:76:e9:22:5a:9b:b9:96:9c:
                    a0:5f:ac:6e:68:3d:c4:1b:02:b7:f6:34:c7:ed:ce:
                    cf:73:1c:27:ff:6b:c0:de:01:01:2d:fe:28:0a:9c:
                    a1:4e:75:0d:74:e8:4a:c3:16:69:81:a9:0b:51:84:
                    cd:63:35:90:3e:8e:8c:fa:6a:b8:31:53:32:bd:3e:
                    26:fc:e5:ab:cc:e2:ca:1e:c9:48:fb:8b:ac:db:84:
                    8e:e6:dc:0f:a3:e7:1f:1a:0d:3f:15:d7:68:e1:28:
                    9c:d5:24:8d:1b:40:17:81:9f:ff:1e:bb:bc:28:26:
                    ad:e0:c6:39:03:7f:20:e7:73:e3:83:99:01:52:a7:
                    2c:61:7c:39:e8:79:8e:2f:04:a6:75:0e:60:6e:2f:
                    d0:ec:1c:3a:ea:32:7b:39:e5:ac:56:2e:2f:93:de:
                    52:fc:26:20:7b:d0:3a:84:dd:b8:7c:c6:9f:2d:cd:
                    5b:50:91:59:68:2f:b1:98:63:86:87:df:3b:e0:ae:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8D:D9:9D:0D:20:FF:A5:DD:D6:E0:0F:08:F0:5C:0F:75:40:86:3A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26788c67-659c-4d1d-9c54-22eff1c7554f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:65:71:f1:71:ef:ce:53:10:49:88:a2:51:c8:dc:5b:6b:79:
         86:57:bc:4d:97:76:fd:01:fd:d7:ba:5d:f1:d7:2a:e4:31:32:
         63:33:fd:ac:fe:fa:6e:17:58:3f:76:87:b5:ad:a7:e1:bd:f9:
         e3:78:dc:79:73:95:26:9a:94:cc:8b:df:e1:a6:df:4b:ae:f6:
         ec:bd:52:0d:ee:4a:19:15:89:6e:f4:0c:f8:d4:1d:8c:48:30:
         08:8e:ec:3c:63:23:ac:58:d4:69:a3:c1:12:7a:57:f9:68:8c:
         32:1f:e9:fc:01:7c:93:ad:1e:d9:bf:9a:e7:fe:fb:72:2e:6e:
         6f:aa:fd:5e:ab:11:93:2a:14:88:a8:57:f9:d4:39:f3:e3:13:
         77:44:f3:dd:b0:c0:6d:cb:90:12:dc:14:10:cb:42:6f:ec:06:
         7d:e7:c2:81:15:49:fa:99:b5:36:13:d0:5b:9d:57:65:90:67:
         87:81:29:7a:20:76:1b:a7:08:48:cb:7e:65:57:c4:e5:f4:63:
         1c:2d:c9:78:9d:41:6a:66:74:ba:85:c2:41:2f:9a:10:20:da:
         4a:6d:3a:b4:57:2e:20:a9:b4:ff:36:3b:3d:e0:46:6e:75:9a:
         4c:cb:0a:9c:ef:a3:ca:70:d0:ea:1f:85:e6:b9:ee:0c:66:61:
         b4:ab:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----