Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2bf551fd-ada9-42ee-9a88-be5f16fc77c3.roa
File:                     2bf551fd-ada9-42ee-9a88-be5f16fc77c3.roa (raw, json)
Hash identifier:          ZkHQPCGLa6+jwOzLmdqtqfJru839XTVrX4i3EMTC4Do=
Subject key identifier:   BE:E7:B7:F2:B0:BA:88:A0:F6:F8:67:44:73:6F:1A:A6:3D:0C:39:B9
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6B4561CC732935E0D04D4AC1D7CE84AB00B42595
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2bf551fd-ada9-42ee-9a88-be5f16fc77c3.roa
Signing time:             Tue 19 Sep 2023 00:00:00 +0000
ROA not before:           Tue 19 Sep 2023 00:00:00 +0000
ROA not after:            Tue 24 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:45:61:cc:73:29:35:e0:d0:4d:4a:c1:d7:ce:84:ab:00:b4:25:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 19 00:00:00 2023 GMT
            Not After : Oct 24 23:59:59 2023 GMT
        Subject: serialNumber=381808bbcffd71bbac31eabfe5872b371213fba595cb94b59c94c1e9e755a9fd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:79:1d:65:73:eb:1e:11:14:8d:35:09:6f:fc:
                    39:7a:db:f2:3a:c5:59:2e:e4:1e:fa:80:6b:a2:50:
                    02:b5:10:d0:b8:c5:e6:9c:8f:3f:da:12:cb:f7:1f:
                    65:53:8d:13:51:14:80:88:3f:48:84:f6:85:d7:61:
                    c8:1b:cb:53:e5:be:21:8e:3f:92:0d:f3:6f:c2:08:
                    cc:12:bd:28:a7:75:05:ad:bb:86:e5:fa:52:1a:15:
                    30:c8:dd:5b:16:72:2f:05:9a:f2:35:17:32:08:cc:
                    8a:4b:5f:03:c2:1a:8d:66:d8:06:6d:ba:45:37:2b:
                    56:6c:87:25:8e:58:ba:5b:9d:80:99:01:db:8c:da:
                    7a:f5:0c:95:55:b3:30:c7:4e:64:1a:36:02:67:a9:
                    9a:df:bd:b0:d2:4a:c5:84:dd:9d:79:50:2f:2a:37:
                    7b:c0:94:91:da:da:59:c8:93:ab:43:b7:a5:5b:8f:
                    ec:05:6e:8b:cd:ea:97:77:1d:c1:24:74:6d:7f:0b:
                    96:2b:37:46:09:50:46:a1:25:3d:59:76:41:77:1a:
                    fd:88:4f:15:46:c4:32:96:6c:07:d6:4e:e9:8d:d1:
                    ad:62:04:8b:9e:c7:98:f6:a1:47:f0:8e:a8:a7:1d:
                    35:f5:ab:d5:ee:89:10:8c:b9:1f:66:d9:46:98:68:
                    af:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E7:B7:F2:B0:BA:88:A0:F6:F8:67:44:73:6F:1A:A6:3D:0C:39:B9
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2bf551fd-ada9-42ee-9a88-be5f16fc77c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:76:10:14:5d:3a:7e:81:4f:8b:2e:ef:25:3e:cf:3d:be:a5:
         45:9f:01:cd:2d:49:a1:16:bf:c9:b2:d9:03:3b:ee:0a:67:bc:
         4b:77:08:84:1e:fd:1b:79:7b:05:ec:a5:c5:6a:32:6b:12:fb:
         c8:b8:98:21:bf:91:e8:e1:f1:53:0c:0a:9a:4b:60:d4:60:49:
         91:33:70:53:56:cd:d3:f7:af:e4:6b:9c:a9:0f:e5:8f:61:81:
         a4:20:c2:98:90:53:4b:1a:62:eb:2c:b0:be:84:7c:2e:0f:a2:
         29:1a:02:d5:5d:ff:38:f0:45:75:fb:4e:62:d9:18:8c:79:82:
         dd:32:a8:e1:45:31:27:79:1f:ac:46:1f:5b:ba:34:87:36:cc:
         83:0d:14:64:c3:f4:c2:6c:ee:04:a7:7e:10:33:2a:f4:a3:52:
         b0:da:1c:1f:3d:ad:07:b9:f0:0e:43:7c:93:cb:7a:33:81:42:
         5b:6c:a2:b5:23:11:0b:8f:e1:8d:6c:1a:62:6d:69:6e:76:60:
         b9:bf:ba:69:22:b2:20:60:17:f5:74:02:a8:3a:61:68:54:fc:
         ce:12:04:50:b4:b1:2c:cf:fd:d5:8e:15:d7:b3:d8:bd:ea:68:
         7a:e4:48:b5:cb:e9:81:43:2d:bd:ca:37:ee:23:c1:61:e6:c4:
         0a:ba:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----