Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5d5bbd71-0291-4925-98e5-a534016bf930.roa
File:                     5d5bbd71-0291-4925-98e5-a534016bf930.roa (raw, json)
Hash identifier:          YAwAqeCeb3yklHSCj6EOq/EyBxRLPxxwC9MLDAkwpBc=
Subject key identifier:   45:63:EE:7A:83:CE:6C:94:60:45:F3:BB:5A:F9:04:21:0D:A1:08:DF
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1A169094F0B5C396391D3ECE64289805E9F2F1B6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5d5bbd71-0291-4925-98e5-a534016bf930.roa
Signing time:             Mon 23 Oct 2023 00:00:00 +0000
ROA not before:           Mon 23 Oct 2023 00:00:00 +0000
ROA not after:            Mon 27 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:16:90:94:f0:b5:c3:96:39:1d:3e:ce:64:28:98:05:e9:f2:f1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 23 00:00:00 2023 GMT
            Not After : Nov 27 23:59:59 2023 GMT
        Subject: serialNumber=d4c46c37342992f0ce67a3bf32e330e7e333ec846484695ae2a3d502825c8b60, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a4:08:ea:56:d3:50:e5:23:a2:38:1d:79:70:
                    14:fe:18:49:10:09:16:81:d6:12:76:cc:c7:08:b9:
                    94:3b:c9:18:9b:a2:ef:20:4d:97:10:a7:8d:ae:a0:
                    0a:aa:e3:37:9f:18:7b:4b:07:65:d9:54:89:ec:03:
                    25:b6:0f:ac:d5:70:f8:3d:0a:49:2f:34:4b:5d:f6:
                    7d:2e:38:50:2b:07:b8:c5:e4:69:0a:3c:88:cd:c4:
                    f4:fe:95:5c:f5:19:6b:9a:60:55:c5:ca:79:69:82:
                    20:58:83:27:3d:62:3d:09:d8:94:dc:b2:30:a7:af:
                    18:58:6a:25:ac:27:4c:26:7f:b8:b3:e9:9f:2f:35:
                    1b:17:46:82:88:60:34:0e:79:61:54:f8:c7:1b:ee:
                    6c:dd:97:06:c5:91:16:4a:b3:75:86:29:97:41:a7:
                    2b:81:8e:de:52:74:94:c6:e5:57:53:c4:c7:d2:17:
                    22:55:bd:52:45:f3:ac:8b:50:7f:1a:54:00:2d:9c:
                    d1:69:52:9f:6c:28:5b:50:63:bc:e0:36:32:ad:82:
                    80:48:7f:c3:b1:c2:6d:17:ec:55:1e:13:a9:c8:ae:
                    ca:fe:42:db:9e:26:3f:62:31:73:d6:85:cd:56:39:
                    0f:21:26:fc:f0:b3:1d:53:74:59:98:ac:f1:da:48:
                    32:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:63:EE:7A:83:CE:6C:94:60:45:F3:BB:5A:F9:04:21:0D:A1:08:DF
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5d5bbd71-0291-4925-98e5-a534016bf930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:e7:68:4f:8d:21:5d:42:e6:e8:4b:12:b9:41:b7:8c:60:a2:
         33:02:e5:a6:2e:17:65:9b:d2:c1:ae:e4:9e:5d:38:c1:20:c5:
         23:28:a8:d9:45:86:99:f9:bb:64:59:ac:cf:12:35:50:84:be:
         2c:7e:73:57:f5:ef:67:90:96:26:aa:09:1d:30:2f:b9:0b:5d:
         77:1b:03:4d:83:79:5b:8f:e1:97:fe:66:ab:87:4a:7b:3e:08:
         d6:50:7f:36:2b:f3:a0:6e:61:72:ff:8c:49:df:c4:a8:6d:a4:
         e6:12:77:10:4d:5a:e0:20:39:ac:db:23:b5:f9:6e:8d:d7:2b:
         5e:95:25:f3:57:35:60:fe:40:0d:24:ad:cc:05:35:04:e7:4b:
         2c:b6:6a:3d:a9:5b:5d:71:91:18:31:0c:1e:3f:ed:22:50:33:
         5d:b0:36:24:e3:bb:5f:d9:18:29:9f:33:00:76:38:c2:2b:64:
         a1:1a:99:11:27:e9:9d:94:72:66:48:a3:36:27:f3:49:1c:66:
         51:96:ed:4f:e4:77:18:d7:e5:c0:e9:91:47:3e:89:5e:6a:72:
         18:39:db:91:b9:16:a2:d8:87:59:01:4c:5b:a0:0f:55:e0:4c:
         7d:43:56:24:f7:9a:23:2c:01:72:4d:13:65:15:c5:68:97:38:
         02:6f:b6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----