Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f012c01-a4de-4efa-af87-3b74c7fe0b8d.roa
File:                     7f012c01-a4de-4efa-af87-3b74c7fe0b8d.roa (raw, json)
Hash identifier:          GJSHxbgyoO7oMqRJ3aLm/Qmobhxq/Qb41SwHUMdUYXE=
Subject key identifier:   FB:22:64:B1:1C:06:F1:9B:D1:7E:4B:2F:AB:90:AA:89:E2:55:DE:75
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       54E0A4446D4E8DCFB15DAFADC3C347980D07E9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f012c01-a4de-4efa-af87-3b74c7fe0b8d.roa
Signing time:             Mon 11 Sep 2023 00:00:00 +0000
ROA not before:           Mon 11 Sep 2023 00:00:00 +0000
ROA not after:            Mon 16 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e0:a4:44:6d:4e:8d:cf:b1:5d:af:ad:c3:c3:47:98:0d:07:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 11 00:00:00 2023 GMT
            Not After : Oct 16 23:59:59 2023 GMT
        Subject: serialNumber=72ed21e51581fa439c5959f0acb62283587d7a49c0e300f70ae49d3ea83af04b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:d5:22:b8:73:16:a4:5a:1d:85:1b:ab:29:
                    a4:78:12:4f:27:3a:00:58:c2:11:5c:c5:f6:15:e1:
                    d2:06:4e:61:6d:e0:23:45:ad:0f:2a:7e:89:40:d3:
                    7d:66:02:4f:da:fc:46:86:76:a4:a3:1f:a1:23:d2:
                    2f:92:e1:54:01:06:49:40:83:c3:3f:26:93:f6:ea:
                    48:18:95:ff:11:8c:30:ff:e4:39:4c:0a:6d:d1:3c:
                    57:dc:c0:ae:1c:74:55:1f:a2:90:76:47:53:a0:b1:
                    54:7f:e3:8c:32:2a:a8:2e:cb:ab:78:8c:f3:da:b7:
                    40:f9:68:0f:ba:ad:87:51:e0:09:07:89:49:bc:67:
                    13:3f:2e:34:82:30:c1:e0:ff:08:f3:6b:b8:c0:7b:
                    f5:23:b4:2c:df:03:d4:57:16:47:0d:21:5f:7b:a3:
                    b9:96:b3:62:ca:d7:d5:a6:84:39:1b:fc:5f:20:29:
                    a7:41:6b:60:9a:0d:14:54:1b:2f:a2:97:3b:e4:6a:
                    e2:c2:fa:de:6c:8b:60:8f:6b:d5:04:b5:d9:65:a5:
                    72:4c:3d:be:be:9d:36:01:df:00:8e:da:5a:9d:30:
                    2f:11:f9:f1:b7:8d:11:fc:98:91:99:32:09:18:de:
                    49:61:8b:cf:86:f2:5b:93:1f:98:30:a0:10:3e:9d:
                    ca:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:22:64:B1:1C:06:F1:9B:D1:7E:4B:2F:AB:90:AA:89:E2:55:DE:75
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f012c01-a4de-4efa-af87-3b74c7fe0b8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f1:2a:c7:84:33:79:a8:df:f9:7d:1b:84:66:45:85:79:6f:
         58:b7:a8:0a:73:fd:f1:51:76:02:34:dc:a9:16:96:2e:a2:01:
         2d:04:35:8d:01:30:c2:c5:6b:ef:f2:06:9e:d1:fb:65:a9:25:
         7c:1f:80:8c:62:0d:dd:8f:72:17:d2:88:13:a3:73:cb:5f:c8:
         02:27:7e:b3:e5:1b:84:29:40:24:c6:5e:bc:01:7d:98:71:d2:
         df:56:8b:52:a8:89:f0:15:a8:c8:4e:d3:bc:d7:90:64:77:48:
         c5:11:d2:33:3b:90:b8:b5:e3:0b:40:65:df:d1:a5:6c:9f:f5:
         ef:c5:0a:6c:ec:af:da:b4:26:76:b1:b4:39:13:94:a9:f3:b9:
         16:88:41:4d:39:98:ae:d0:b7:99:27:dc:bc:e7:42:47:ee:12:
         72:0a:5e:61:3a:8b:47:7f:00:47:e8:74:d4:ef:c0:57:ac:ab:
         bb:e6:76:d1:4c:42:b1:41:b0:d2:fa:73:3e:aa:92:ad:83:04:
         56:dd:57:00:6a:8a:c7:c8:a9:4e:2f:84:a1:b5:6f:4d:1f:fa:
         7a:85:48:57:e7:46:01:6b:58:39:d8:9a:ad:12:ea:6c:4d:07:
         5e:13:50:27:b7:ad:ff:52:57:7f:ce:45:7f:c1:43:93:4a:9c:
         a0:74:1a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----