Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c6193a1-dbf7-46b8-9ca1-365a8d6db63e.roa
File:                     6c6193a1-dbf7-46b8-9ca1-365a8d6db63e.roa (raw, json)
Hash identifier:          fr1HG7wYr5ENM7rNBu5nM6KDWRq9/o71x/kD8yDgFXo=
Subject key identifier:   D3:D9:C8:25:5B:21:D9:C8:50:DB:B7:BD:7F:AD:5E:8F:91:DA:37:8A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       328D70A80C3B1794C3209B23A16BAE99F52E49BF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c6193a1-dbf7-46b8-9ca1-365a8d6db63e.roa
Signing time:             Sat 09 Dec 2023 00:00:00 +0000
ROA not before:           Sat 09 Dec 2023 00:00:00 +0000
ROA not after:            Sat 13 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8d:70:a8:0c:3b:17:94:c3:20:9b:23:a1:6b:ae:99:f5:2e:49:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec  9 00:00:00 2023 GMT
            Not After : Jan 13 23:59:59 2024 GMT
        Subject: serialNumber=5b9b9628d65054b2d649ae86bab2c0d43a7a35e12ddb9ee71d9439c2e6f1c9df, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:b9:d5:ad:da:79:80:17:c3:2e:b4:dc:dc:
                    21:c1:e2:6f:8b:62:f5:39:59:d8:95:b2:58:11:fb:
                    b2:6b:2a:92:5d:e5:1b:76:25:f2:ae:52:ce:ef:e2:
                    3c:04:d3:83:17:81:6e:c4:bb:5b:16:57:40:e2:75:
                    ca:bc:8c:5a:fb:34:2c:55:2c:01:e6:68:6f:bc:bd:
                    0d:a3:51:bc:e5:82:5f:e0:9b:4d:bf:61:37:35:c7:
                    bc:a1:97:4e:fc:66:81:1c:11:0c:91:c3:5d:f8:ff:
                    e1:f1:18:d7:07:13:e2:0d:6b:76:ae:b5:02:8e:e4:
                    4d:fa:d2:40:93:95:b2:6e:77:0a:8c:46:28:43:fe:
                    e3:09:bb:78:0a:b7:44:d0:ce:b4:95:bb:bf:db:b1:
                    d6:94:a3:9f:dd:25:98:b3:b9:bc:a9:2c:c7:7a:43:
                    18:7d:a3:45:ad:1d:99:97:31:68:d0:32:f0:ba:ad:
                    a0:48:e9:de:34:1a:e6:d9:17:20:9d:bb:c2:db:b8:
                    5a:8b:b1:69:8f:bb:18:94:59:01:87:d4:d3:29:79:
                    a5:99:6c:1f:e8:92:fc:81:1f:63:fe:43:aa:99:a5:
                    88:1e:24:f2:05:97:1f:d3:f2:b5:98:26:9a:23:f7:
                    a5:34:2b:39:a5:d9:6d:81:f0:49:b1:9b:b8:a8:f4:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D9:C8:25:5B:21:D9:C8:50:DB:B7:BD:7F:AD:5E:8F:91:DA:37:8A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c6193a1-dbf7-46b8-9ca1-365a8d6db63e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:1c:35:b6:53:11:5f:9f:b0:c9:08:47:9c:8d:50:b6:1a:fd:
         65:7b:d2:4f:fd:65:7f:9a:5e:14:7d:92:f2:01:b3:ab:15:18:
         2f:49:0c:bf:32:2e:5d:de:c6:75:20:d5:5a:bf:8d:36:ca:09:
         01:2e:b9:0c:da:d1:ea:74:74:9e:b4:09:40:53:88:45:d0:39:
         51:ad:7d:cf:02:fb:f9:81:6e:13:d9:07:d7:0a:7a:f7:f8:1b:
         93:64:1d:b8:1d:77:01:c4:87:ee:66:91:28:c1:dc:76:d3:84:
         e6:38:2d:cc:70:f4:84:fc:cf:6d:39:76:b7:43:92:2a:d6:a7:
         5b:a1:e5:5f:96:a2:c5:8b:48:d4:c2:78:61:45:a5:17:24:10:
         95:6a:96:f0:42:f4:5f:8d:7d:7d:2a:69:e0:df:c7:38:99:3f:
         05:48:1a:66:0c:1d:cb:7d:79:da:62:25:69:f8:d8:04:0e:f4:
         32:2e:18:81:bf:96:b7:73:e5:47:f0:1b:e5:69:d2:5f:1a:f3:
         29:e9:58:ca:82:87:20:36:ad:0d:6a:f4:c2:32:b8:10:a0:e5:
         a9:20:de:d5:8b:0c:c1:0a:06:c1:36:fd:77:df:33:85:a4:84:
         72:2c:78:e8:6e:3f:4e:dd:2b:6c:6e:27:9f:05:79:33:88:b8:
         89:4a:80:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----