Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b341e0c-c1d1-4c42-b048-bd7f7b413a35.roa
File:                     7b341e0c-c1d1-4c42-b048-bd7f7b413a35.roa (raw, json)
Hash identifier:          NHmh6BQpu0Bnd7mLdxERY/GS+ZM7Z2Z8PG66BON5zAc=
Subject key identifier:   45:F3:0B:84:A9:A1:A0:06:5A:05:B1:85:E8:CC:92:4F:26:F7:C8:3F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0C2B143AA6FE3C816E5940B564BD7954EA1DCDFF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b341e0c-c1d1-4c42-b048-bd7f7b413a35.roa
Signing time:             Sat 11 Nov 2023 00:00:00 +0000
ROA not before:           Sat 11 Nov 2023 00:00:00 +0000
ROA not after:            Sat 16 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2b:14:3a:a6:fe:3c:81:6e:59:40:b5:64:bd:79:54:ea:1d:cd:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 11 00:00:00 2023 GMT
            Not After : Dec 16 23:59:59 2023 GMT
        Subject: serialNumber=00c1cd37ece090d2bb97aef6f8d9fe96d123620f962df00aa54ed74d6e44dd34, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:29:26:27:97:f2:02:35:3b:ac:d1:65:f2:ea:
                    0c:05:84:7f:98:b5:6f:58:d9:c3:e0:30:94:c5:19:
                    ed:84:1e:9f:3f:f2:05:5f:64:15:e5:98:ee:5e:56:
                    57:30:e6:55:ad:64:17:d6:ee:4f:d7:7d:ed:0c:b9:
                    a1:4c:13:31:34:b3:19:44:64:02:6f:16:be:3c:3d:
                    a0:95:ea:6d:e3:bc:bc:74:0b:ad:56:f4:88:49:90:
                    e4:9c:a1:dd:f1:c6:f9:e0:07:dc:66:8d:e7:5b:0b:
                    a9:2a:f2:d6:4f:4b:1a:d5:6b:84:89:8b:3e:c4:d6:
                    2b:c1:f9:8d:74:5e:9e:a2:ed:ba:cd:ef:cb:e3:78:
                    a1:30:8c:89:1b:b8:3f:0d:96:b4:94:af:54:11:7b:
                    7e:8f:18:fd:ff:5a:1d:7f:c7:8f:59:6a:fa:72:87:
                    d0:8b:af:61:46:bb:14:35:1c:b2:91:b2:db:e3:c0:
                    a8:db:1e:60:f7:62:20:39:c4:0c:9c:e5:b3:96:f5:
                    8b:24:08:f6:63:a4:21:ad:7a:2c:c7:67:df:32:72:
                    88:3a:f8:10:c2:bf:3a:0b:2f:bc:d4:35:df:1e:15:
                    fc:ac:c8:24:e4:90:0e:a7:5c:aa:4e:b2:af:4e:d6:
                    ce:77:b7:89:8e:df:4a:d0:21:04:52:5a:cc:18:6e:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F3:0B:84:A9:A1:A0:06:5A:05:B1:85:E8:CC:92:4F:26:F7:C8:3F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b341e0c-c1d1-4c42-b048-bd7f7b413a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:6e:52:91:b6:7c:d0:9e:49:b8:55:5c:34:91:dd:31:87:cb:
         48:6a:e6:87:c2:19:dc:47:01:dc:31:65:5b:8b:80:46:b4:93:
         23:3a:b9:bf:01:e0:ec:b4:8a:cc:44:c0:e2:c1:c6:d2:1d:2f:
         ac:01:09:db:94:33:d2:6a:15:f6:3f:db:8b:18:85:4f:a3:ca:
         47:11:f8:a7:ca:7a:3e:e1:2a:04:8d:00:ac:81:24:e5:40:04:
         35:da:30:b2:25:5d:d7:ff:b9:45:f8:35:82:7b:0d:74:f1:0a:
         81:2c:2c:38:3a:70:d8:bf:f3:77:c1:d1:7e:13:10:03:a0:71:
         f3:2f:db:d1:71:19:b5:6e:62:1f:1c:4c:50:1c:fd:0b:1e:0c:
         ea:e4:4b:f2:e2:dd:cc:96:39:9b:d5:c7:f6:0e:f2:6c:f0:07:
         67:3c:59:63:07:48:0e:a1:70:7b:9e:e0:cb:b3:5d:c5:c0:0e:
         68:81:c0:20:7e:2d:c0:34:ea:da:39:b9:ac:59:51:0c:c4:bc:
         f6:5b:cb:3f:3b:2d:25:de:b7:a1:b2:ac:c9:44:8c:e2:e7:7e:
         d5:3e:ed:da:16:76:f3:de:7d:59:32:b3:d1:1f:58:e9:b9:da:
         d3:dc:e8:57:60:c1:e0:48:55:3e:bd:f9:aa:71:23:46:82:43:
         37:e7:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----