Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6fe8bcf7-40d9-453a-9b06-ef1d95b31c6e.roa
File:                     6fe8bcf7-40d9-453a-9b06-ef1d95b31c6e.roa (raw, json)
Hash identifier:          97m1TxJ/OZJgpX65XNU7Xyvj6FDO3Owq68xyrg2DPgw=
Subject key identifier:   37:C2:ED:7F:62:E0:79:56:95:3C:FD:1E:BC:81:E3:1D:A7:A4:DA:45
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       257FD4F64C16C2F466F53D6E524CA16E04B04685
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6fe8bcf7-40d9-453a-9b06-ef1d95b31c6e.roa
Signing time:             Tue 22 Aug 2023 00:00:00 +0000
ROA not before:           Tue 22 Aug 2023 00:00:00 +0000
ROA not after:            Tue 26 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7f:d4:f6:4c:16:c2:f4:66:f5:3d:6e:52:4c:a1:6e:04:b0:46:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 22 00:00:00 2023 GMT
            Not After : Sep 26 23:59:59 2023 GMT
        Subject: serialNumber=96ace668d3802b66f28a1f57317a269aed417f2b3ec912d1cfe896751aba4489, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:70:66:c9:70:e5:98:ef:94:eb:8e:ee:cd:
                    88:13:ea:0a:ce:d6:68:92:f9:3a:72:b2:8e:7f:31:
                    59:be:d3:c7:ee:53:4a:d0:c4:81:b8:e0:eb:a9:d8:
                    75:9a:5a:71:5c:6a:e2:57:0c:a0:39:c5:fa:f1:a0:
                    5c:fc:56:1b:81:ee:f6:d1:f3:42:68:49:65:1b:7a:
                    7c:39:9a:c6:a9:e6:af:4e:3c:f9:49:b3:16:fa:87:
                    0f:31:ef:d7:16:a7:01:00:ed:fc:06:9b:a6:c4:5d:
                    e0:aa:4d:f7:49:33:76:b1:ff:9c:06:8f:fd:bd:40:
                    ed:22:e2:e7:7b:79:f1:32:dd:8e:99:4e:bb:24:5b:
                    d1:9a:34:ed:54:1f:18:9a:b6:50:27:f9:73:c1:df:
                    cc:3c:1f:8e:2b:07:fc:d6:c6:87:64:07:40:81:32:
                    f8:db:91:dd:62:b1:5a:89:20:25:0f:ca:fc:67:e1:
                    4b:a8:f8:68:0e:44:c3:9b:88:fc:0a:16:7e:38:c3:
                    be:09:87:bc:75:0b:0e:07:06:eb:b6:90:fe:e2:ac:
                    ea:ef:8a:ed:bf:73:6d:ea:14:85:99:f3:bb:16:27:
                    8b:d0:45:5b:2e:b1:07:de:e0:a7:3e:b9:a9:e2:6a:
                    db:1b:0e:10:25:b2:26:60:6e:c2:ae:72:e7:57:c7:
                    2f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C2:ED:7F:62:E0:79:56:95:3C:FD:1E:BC:81:E3:1D:A7:A4:DA:45
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6fe8bcf7-40d9-453a-9b06-ef1d95b31c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:67:ac:a9:d1:af:98:68:88:4f:d2:2f:af:00:f0:ea:d8:ba:
         5c:3e:32:62:80:2c:f4:fb:1d:ae:53:de:5b:03:51:cd:88:8c:
         a0:e8:5c:70:3e:df:c8:e1:36:17:3f:74:8a:17:c8:dc:a6:d4:
         47:2b:77:f8:3c:86:8f:cd:28:b7:fc:c4:41:c3:f1:64:ed:61:
         c5:a2:0b:b1:b2:26:4d:b6:60:8c:79:10:78:4d:36:59:59:26:
         11:aa:21:fa:57:21:a4:24:f3:95:b2:65:42:5e:92:b3:c6:84:
         27:bc:b8:b8:2a:79:dc:12:41:62:eb:ac:22:1f:6f:f3:b2:71:
         55:47:a6:30:22:f5:e6:a4:2f:f0:37:5b:0c:bd:6c:00:fd:86:
         5d:2d:32:45:ec:22:00:bc:e6:f7:ab:fa:4b:44:45:5e:a7:57:
         7d:db:e2:3d:10:b4:90:46:98:64:2e:f0:be:96:24:78:bc:b8:
         3e:bc:55:f1:b9:be:e6:4e:47:35:90:7e:a1:60:ec:a8:47:45:
         69:f2:09:bb:13:5d:c4:a5:a4:da:6d:1f:35:a6:99:9a:14:60:
         57:05:f2:ec:a0:b4:64:9d:a6:ab:36:5c:d5:14:46:9a:76:a2:
         86:1f:7a:9d:4e:c9:27:28:b2:45:7e:b9:1b:1c:82:bd:c0:57:
         a2:58:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----