Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3180e03e-d651-4c64-93bf-29998dc1fb47.roa
File:                     3180e03e-d651-4c64-93bf-29998dc1fb47.roa (raw, json)
Hash identifier:          GuGTm0pv+MzCmlecRIspP164Ok4f4Sdpt9fxsrp/OQs=
Subject key identifier:   7A:AD:21:6F:41:23:70:07:4E:B4:DC:30:DE:04:A0:40:D1:33:D0:C6
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3F67CEE7B37FBC83B63E2603B1CDA8E5F0FB1577
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3180e03e-d651-4c64-93bf-29998dc1fb47.roa
Signing time:             Fri 15 Dec 2023 00:00:00 +0000
ROA not before:           Fri 15 Dec 2023 00:00:00 +0000
ROA not after:            Fri 19 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:67:ce:e7:b3:7f:bc:83:b6:3e:26:03:b1:cd:a8:e5:f0:fb:15:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 15 00:00:00 2023 GMT
            Not After : Jan 19 23:59:59 2024 GMT
        Subject: serialNumber=20ddc30401fedb1c7bff4a74cc80bace2b1a25b47ffbf7f8a79dbb3bc891660c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:d1:4e:56:c6:4c:a1:b7:7c:3d:ea:cd:5b:
                    dd:a7:3f:19:67:20:fc:cf:24:c8:25:e5:0f:a6:a7:
                    47:77:b8:83:db:29:ec:30:59:9a:82:40:65:0a:74:
                    11:f8:d0:e9:37:44:03:b8:dd:62:7d:53:88:f8:08:
                    07:1c:4e:1b:6f:95:c3:41:92:65:6c:ba:ba:fb:fa:
                    b5:af:33:ca:36:92:48:6e:30:12:a6:2c:60:15:e8:
                    cc:b0:7f:9c:15:51:8d:1e:f2:80:1e:a5:bd:9d:dd:
                    e1:d8:38:8e:82:c8:bd:a7:8b:b0:20:ae:43:e5:97:
                    71:13:f9:7d:3c:6a:74:c5:7b:d5:e4:68:68:9e:98:
                    4e:15:4f:49:f5:3a:09:83:e2:62:fc:9b:71:e5:ce:
                    b1:55:8e:b1:d4:39:e1:e9:f9:62:5e:67:20:d8:42:
                    c3:e2:b0:9d:92:19:03:fe:7a:34:a1:a6:65:59:1d:
                    c5:20:c8:03:f3:c0:54:a1:b2:37:92:fe:77:a2:ab:
                    36:5a:7b:c4:f5:6d:6d:52:75:ce:59:1a:61:a3:57:
                    b5:f8:d8:94:13:10:18:83:34:4f:24:23:aa:65:a2:
                    f2:0a:05:f2:5c:ee:98:d4:d4:8a:c3:d5:e4:ca:cf:
                    cc:0d:d3:6c:fb:bc:d6:60:de:3b:94:47:32:63:c5:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AD:21:6F:41:23:70:07:4E:B4:DC:30:DE:04:A0:40:D1:33:D0:C6
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3180e03e-d651-4c64-93bf-29998dc1fb47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:6a:e1:12:6b:97:ab:c3:3e:73:77:32:04:a4:74:d3:51:c1:
         5b:a9:90:fb:b9:a0:58:9d:a3:ad:c2:be:a3:99:18:dc:c6:9f:
         03:a3:86:b1:92:0f:03:db:f1:fb:6c:61:1d:0a:2b:4d:0a:ef:
         96:ea:2e:4e:1a:e0:02:68:02:db:ae:12:a9:4e:5d:df:1b:f9:
         3e:72:04:f9:b7:a0:0a:5c:84:61:12:61:29:3b:88:46:d3:e1:
         e2:27:6d:dc:99:79:f2:65:1a:2b:51:2a:b1:7c:38:88:32:ca:
         3c:5f:b5:90:cf:95:4d:30:64:f0:b4:69:31:1e:e0:7c:09:a7:
         38:a8:99:fd:58:61:21:da:89:47:8d:c9:62:f9:9f:28:4f:81:
         95:25:c3:4a:d7:63:7c:79:46:5b:71:73:a1:17:3a:05:e5:89:
         37:45:a3:b4:c7:ae:3e:f4:81:10:ae:2c:aa:8b:65:ca:b3:41:
         88:80:bb:f7:c0:cb:ec:e5:71:e9:a7:64:ca:ed:d5:14:51:2f:
         9a:53:9a:a3:ca:36:fe:8d:f3:49:51:92:96:85:cb:af:65:02:
         1f:bb:59:0f:ba:b9:a5:97:2d:dc:d2:a1:f0:25:b9:66:10:1f:
         d6:2a:b5:a3:dc:39:43:46:5d:f6:ce:b9:ad:8d:2a:e8:ea:2b:
         81:a2:c1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----