Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6383b604-d1ff-46f0-ae2d-327341aa41f5.roa
File:                     6383b604-d1ff-46f0-ae2d-327341aa41f5.roa (raw, json)
Hash identifier:          F8WTzTjFzHL+AK8qC33hh2m5TRakJUaP2SeCYcbz9tA=
Subject key identifier:   7F:09:53:A7:BE:49:CE:C3:2F:26:D5:D1:3E:54:20:69:D2:E1:53:5A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       334254927A63813EBC4AA7D0B245287CE8C38A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6383b604-d1ff-46f0-ae2d-327341aa41f5.roa
Signing time:             Sun 24 Sep 2023 00:00:00 +0000
ROA not before:           Sun 24 Sep 2023 00:00:00 +0000
ROA not after:            Sun 29 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:42:54:92:7a:63:81:3e:bc:4a:a7:d0:b2:45:28:7c:e8:c3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 24 00:00:00 2023 GMT
            Not After : Oct 29 23:59:59 2023 GMT
        Subject: serialNumber=8f995e7629b1e41d58bbec3903717b860b30a13677e5f649430139f3713bf1db, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d1:3e:5c:ac:3b:af:74:33:34:24:0e:57:97:
                    b7:e4:67:e3:20:af:2d:a6:13:5f:46:4f:0d:ea:54:
                    ef:2c:d1:26:22:ab:dd:17:cd:72:6a:c9:2f:ac:fa:
                    36:17:90:24:28:a2:c6:d5:cc:ee:69:27:a9:a8:4d:
                    23:39:80:25:ec:02:88:b1:e8:19:ba:ea:76:ed:b4:
                    8a:1f:f6:d2:a9:f4:7e:d8:73:32:b7:1c:34:ed:97:
                    45:f8:46:36:28:86:32:f5:84:86:82:66:cf:b8:ea:
                    43:ae:68:54:03:bd:45:78:4e:dd:69:99:d7:3d:84:
                    e2:d8:82:8a:c2:21:17:ed:82:24:c7:14:5a:ec:36:
                    3d:06:7e:52:f5:39:51:de:de:07:41:08:b4:13:c3:
                    ba:32:92:e3:e3:ca:dd:d6:1a:e3:4d:dc:b7:67:9b:
                    4b:8b:04:3d:16:9a:94:2e:d4:51:18:9e:50:0e:38:
                    df:72:9f:88:b0:5f:68:f4:ec:22:d2:32:4d:c0:e8:
                    4e:4a:79:04:2c:38:e5:c5:f4:d2:0a:0f:b8:70:22:
                    25:84:4d:a9:55:b7:12:3c:b5:01:53:ee:78:d1:c8:
                    16:bb:47:b7:1b:29:14:fa:ed:35:2e:4a:78:d6:bf:
                    6c:04:73:45:80:a8:44:18:88:ed:65:fd:ce:dc:6d:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:09:53:A7:BE:49:CE:C3:2F:26:D5:D1:3E:54:20:69:D2:E1:53:5A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6383b604-d1ff-46f0-ae2d-327341aa41f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:46:b4:d7:b1:5d:da:7b:a1:c5:0f:6f:ce:a6:79:58:21:ec:
         68:81:f7:9e:a3:0c:e7:9a:90:55:d4:74:35:e4:d7:33:f7:fc:
         7d:b0:67:17:c2:27:e1:c3:38:52:f4:6e:cf:df:7b:f4:60:79:
         c1:ea:ce:30:61:8c:6b:77:90:99:96:80:27:0a:0d:92:01:a0:
         0f:0d:fd:96:d9:f7:e0:2e:27:de:a2:77:56:8f:3c:0c:cd:e0:
         3d:d2:09:77:fe:15:9c:46:8e:9e:4d:4b:bd:19:b1:cc:60:6b:
         ab:0a:11:d2:4a:58:c9:14:99:0e:48:d6:4f:96:df:4e:fe:7f:
         f4:f0:11:33:30:14:20:9f:6c:4f:e5:c0:16:b9:2c:31:bc:6c:
         7f:ea:f3:15:ca:ad:82:da:92:93:a3:5c:a3:05:c7:87:0f:0e:
         2f:e3:18:0e:aa:9a:e3:aa:44:74:af:b9:30:86:f1:24:9a:80:
         09:23:ac:e6:b6:38:9a:2e:6b:dc:7f:b8:21:3c:76:a3:ed:b1:
         9b:e9:08:a6:48:88:11:66:91:48:54:7e:9d:ee:ef:06:f2:fd:
         44:e7:94:92:d3:a2:cd:fe:03:57:4a:e6:10:44:fb:4a:b3:ce:
         81:0e:98:13:d6:00:8d:86:af:82:68:c2:4b:6e:97:74:2e:c0:
         2e:62:05:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----