Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d9f173b-55da-4829-969d-88754bdaac18.roa
File:                     2d9f173b-55da-4829-969d-88754bdaac18.roa (raw, json)
Hash identifier:          vjSw8dU1rAh28V6jjS8aD4h8M+RkM8azU/ykTS2IJDI=
Subject key identifier:   16:1F:21:EF:10:F8:76:EF:89:F8:6B:77:B8:B2:49:24:D6:0E:A9:73
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0C48F37DCD8ECDEE249E4CB759E2F3E97EDCB3ED
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d9f173b-55da-4829-969d-88754bdaac18.roa
Signing time:             Sat 16 Mar 2024 00:00:00 +0000
ROA not before:           Sat 16 Mar 2024 00:00:00 +0000
ROA not after:            Sat 20 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:48:f3:7d:cd:8e:cd:ee:24:9e:4c:b7:59:e2:f3:e9:7e:dc:b3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 16 00:00:00 2024 GMT
            Not After : Apr 20 23:59:59 2024 GMT
        Subject: serialNumber=1f891aaeada7bd699bafee447e8e5f49cdf3e3e88d328cc2bb1ab6fc7e9a2127, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:c7:f1:00:45:c1:aa:2b:16:a8:e4:14:4a:
                    24:28:09:26:5c:b7:e7:9d:83:b1:8f:83:23:81:54:
                    41:23:38:92:2f:4a:0d:2a:68:ef:be:a3:10:5f:f7:
                    b2:f0:2d:11:3d:a7:f0:03:51:fd:03:82:7a:aa:6a:
                    36:b4:c1:43:99:86:46:8d:7b:15:1c:53:f1:a9:de:
                    d6:10:5f:da:a4:b2:a9:31:a6:ed:41:7e:df:fa:c8:
                    04:7a:98:a4:f7:7a:58:b1:43:f1:c9:83:70:70:9b:
                    9d:05:6b:38:51:11:3f:f6:d6:a9:11:27:ca:33:06:
                    db:91:4f:49:b8:51:f6:74:0e:9d:2a:c5:77:c1:42:
                    09:92:e7:b2:00:53:2d:a0:f0:5c:d7:85:b6:43:14:
                    ed:d0:02:d9:a2:54:0c:70:6b:cb:3f:1b:fd:54:ae:
                    77:82:04:eb:36:79:f5:b3:b7:36:ae:4a:4f:41:73:
                    bf:57:1d:3b:7a:16:89:fc:59:b4:26:01:3e:6f:20:
                    3d:94:d0:55:ba:88:03:ec:6c:7a:2a:65:0e:a0:e9:
                    8e:e8:6c:cf:70:6f:b3:c4:cf:2e:47:c1:6a:33:f7:
                    a9:bf:21:6a:f5:b3:36:c8:32:c8:e0:37:87:8d:f5:
                    78:44:15:48:25:f7:89:56:da:a5:5d:4c:e3:9b:40:
                    5d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1F:21:EF:10:F8:76:EF:89:F8:6B:77:B8:B2:49:24:D6:0E:A9:73
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d9f173b-55da-4829-969d-88754bdaac18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:ca:8c:40:98:7f:4c:c9:57:42:33:7e:2e:ea:78:88:75:be:
         48:de:97:05:bd:0c:46:33:06:d7:60:8f:c4:6e:00:b3:6a:28:
         7b:e5:04:b9:6c:89:cf:83:39:2e:d4:f4:fd:f8:dc:fe:91:3e:
         36:c5:f1:9f:c3:89:f7:75:cf:74:8d:50:75:b8:a4:db:9f:27:
         e0:cb:b7:e6:fe:8d:02:05:03:56:de:3b:41:ad:87:5b:b3:51:
         98:bb:2a:78:b5:78:b1:81:7f:d2:a6:d3:3f:ca:91:f7:43:10:
         8c:06:51:2f:e6:cc:11:4c:61:a5:ed:41:54:48:4e:a3:44:04:
         92:1d:a3:40:f1:98:1e:2a:51:f2:21:d4:f0:cc:a7:c2:39:48:
         cc:85:69:eb:79:0d:30:a2:6b:86:df:3d:df:b3:d4:55:23:80:
         d4:c9:21:bb:d3:63:df:06:70:c3:1e:f5:a3:a6:4a:7d:63:fd:
         25:d5:93:e6:86:53:b7:e1:4a:9b:d0:bb:a4:9d:16:f5:93:ab:
         6b:82:89:13:aa:82:84:46:e6:83:63:a0:d3:2a:4e:57:b0:2d:
         b9:5e:89:88:7b:75:d8:40:77:63:e2:06:d4:04:d4:5f:15:6b:
         b1:42:6d:6c:e5:7b:e4:1f:06:58:45:3d:03:6c:d5:eb:50:4a:
         bd:ea:9f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----