Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/750574d0-53b4-4df5-a18a-00fca207badc.roa
File:                     750574d0-53b4-4df5-a18a-00fca207badc.roa (raw, json)
Hash identifier:          mE63AS2ICjBRjB3CYslpTkrVxXFLnYWswfe3q+pSmu4=
Subject key identifier:   56:9B:8F:F6:2D:AA:41:75:20:0D:20:B0:6D:0C:C9:49:A3:B8:FF:D8
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7BFE899C3E0D8114EFB125FB2AF3B0449114B19E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/750574d0-53b4-4df5-a18a-00fca207badc.roa
Signing time:             Tue 12 Mar 2024 00:00:00 +0000
ROA not before:           Tue 12 Mar 2024 00:00:00 +0000
ROA not after:            Tue 16 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fe:89:9c:3e:0d:81:14:ef:b1:25:fb:2a:f3:b0:44:91:14:b1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 12 00:00:00 2024 GMT
            Not After : Apr 16 23:59:59 2024 GMT
        Subject: serialNumber=55a4c8576a7685f2d7f1fa4f9fb0666bf6d5ef0742c02f3234b476ffbce6f885, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a7:e1:f7:36:72:22:da:bb:3f:e9:4a:0b:71:
                    4c:aa:c8:a7:65:c2:dc:6e:61:2b:f8:51:36:6c:1e:
                    43:33:14:d9:50:7a:29:44:76:cb:c6:e5:00:b9:75:
                    6e:ce:f1:3a:76:6f:64:d9:f8:91:8c:f6:31:f1:d6:
                    7e:70:6c:b3:34:e0:ed:43:08:fd:c1:57:69:40:bf:
                    d3:16:29:2b:2d:8d:dc:2a:29:bf:4d:cf:8e:93:8a:
                    40:c8:59:01:ff:84:5e:ea:71:20:0b:35:6b:d8:11:
                    4e:9c:60:a8:49:c6:f3:95:22:50:ad:4d:23:16:dd:
                    3b:fd:f3:54:ae:ee:41:e5:ae:65:be:6f:40:d2:42:
                    71:88:5f:90:3f:d7:18:2d:f3:79:48:a8:74:6f:f7:
                    e6:51:43:17:d2:17:a6:34:19:11:2c:2b:be:2a:1e:
                    46:86:78:af:b2:15:a9:2e:52:7f:6b:72:38:1a:8b:
                    1f:71:ab:12:cb:80:c9:29:1f:fa:ab:31:29:43:29:
                    29:f0:71:0f:d5:f7:95:c4:de:04:8f:89:12:13:4c:
                    41:3a:67:92:5f:fa:8f:bc:23:a0:aa:25:7b:0e:3b:
                    f0:2c:48:20:89:b3:c9:6f:76:7d:14:cb:f7:62:92:
                    c5:9a:34:e5:b2:0b:4d:f3:f9:7d:1e:1f:1b:92:48:
                    fa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9B:8F:F6:2D:AA:41:75:20:0D:20:B0:6D:0C:C9:49:A3:B8:FF:D8
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/750574d0-53b4-4df5-a18a-00fca207badc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:59:4e:d1:3f:c1:71:67:f5:44:5f:79:9d:30:5f:c3:26:07:
         2d:28:6d:52:93:b2:6d:53:3c:ee:45:7a:ed:5e:cf:cd:ca:a2:
         54:2a:06:ab:dd:43:f3:4d:90:07:35:98:c6:e8:6a:1b:e5:89:
         0a:bb:9a:1a:4e:dc:2f:c2:c5:23:3d:40:95:30:94:d9:cb:9e:
         90:3e:83:63:f5:fc:14:3c:20:43:59:d3:71:76:c8:ab:d5:d1:
         d4:23:ea:d8:32:e3:e0:7b:2f:97:8b:38:41:20:c4:15:53:3e:
         45:48:69:67:c1:ce:fb:98:ec:ae:e4:31:31:09:f5:6a:2c:c4:
         b4:ab:af:41:52:ec:42:eb:d8:7c:66:fd:e5:ba:73:62:fb:5e:
         aa:9d:8b:01:d9:95:25:59:7b:8d:0a:d6:e1:2e:87:27:bf:9d:
         fa:e8:8e:fc:cb:0b:06:07:eb:7b:ae:34:16:c9:cc:f1:06:b2:
         ff:d1:75:52:4f:5c:fa:f7:29:37:50:da:56:15:95:c8:22:da:
         8f:e0:63:b4:b2:0e:62:01:ca:21:63:37:fe:dc:77:b5:e8:17:
         d2:5c:7d:93:43:47:d1:8e:53:95:4d:2c:a4:6b:36:98:67:b1:
         0f:c5:ad:20:8c:d0:8d:33:75:b8:ea:3c:ac:95:43:14:f4:39:
         e9:d4:c1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----