Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/87b19505-ff55-4159-a89f-4d674f2ae616.roa
File:                     87b19505-ff55-4159-a89f-4d674f2ae616.roa (raw, json)
Hash identifier:          k1BpxWG7GkO36QSGU3gCJbJG+0QQNUsxJPXavU7J2yg=
Subject key identifier:   E7:63:03:33:1B:EE:BC:34:A6:0E:10:B7:66:B9:40:5F:70:40:79:28
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       13F44BD61210E01D51D21DE3953AAF80E2B3B1F2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/87b19505-ff55-4159-a89f-4d674f2ae616.roa
Signing time:             Mon 25 Dec 2023 00:00:00 +0000
ROA not before:           Mon 25 Dec 2023 00:00:00 +0000
ROA not after:            Mon 29 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f4:4b:d6:12:10:e0:1d:51:d2:1d:e3:95:3a:af:80:e2:b3:b1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 25 00:00:00 2023 GMT
            Not After : Jan 29 23:59:59 2024 GMT
        Subject: serialNumber=54bf7eb7825815ff3cdf7aebb79aa0483bb331484c5d7f27e9bc43bdfaab3830, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:13:78:5b:61:45:b4:17:9d:e4:65:6e:2a:93:
                    1a:0c:68:d2:c7:a2:c5:77:35:75:b7:67:33:24:be:
                    45:0b:3c:e9:e4:ea:80:57:4b:1e:db:79:a8:7a:3b:
                    c4:30:25:2f:34:ee:cc:ea:72:9a:cd:76:46:5e:35:
                    a1:ff:5b:e5:87:d1:a7:be:19:19:5d:42:b3:f8:e0:
                    45:db:7f:4c:8f:4f:f4:44:55:cd:0c:a3:c0:9e:37:
                    10:eb:59:c3:39:82:7a:4f:6f:25:4f:46:f2:43:c8:
                    98:61:a6:66:a9:70:e5:69:b0:80:3e:68:21:6e:44:
                    ec:8c:c1:dd:cf:c4:2e:2f:d4:4b:a4:1e:a9:34:fc:
                    09:4f:7c:8d:c2:97:94:c5:d3:0c:12:78:f5:14:db:
                    05:bc:0c:e3:af:09:75:fd:4b:3d:04:62:eb:b3:c6:
                    54:3b:26:23:a0:c6:4b:17:4b:17:2f:f1:32:f5:fc:
                    dc:49:59:b2:8e:35:5b:d3:8c:30:82:2e:19:23:4f:
                    f6:69:6a:1c:7c:38:63:f8:f6:8b:5c:a5:78:7c:fe:
                    56:47:32:2a:43:35:14:c2:e6:f9:8a:b6:f3:5b:ea:
                    4b:30:94:0c:01:28:10:c8:2b:e9:c4:f3:c0:01:87:
                    62:ea:4a:aa:ca:b9:47:72:18:28:65:1f:88:93:26:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:63:03:33:1B:EE:BC:34:A6:0E:10:B7:66:B9:40:5F:70:40:79:28
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/87b19505-ff55-4159-a89f-4d674f2ae616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:66:6b:eb:80:52:8b:6f:46:aa:b6:bf:e7:97:75:fa:1c:c7:
         74:da:9a:7c:21:1f:1f:5d:0b:6a:ee:87:e4:1f:3a:d8:0a:c4:
         72:81:e2:cf:83:e9:25:ff:7c:e9:6c:57:83:56:a1:53:41:8c:
         0b:47:bd:08:34:24:97:75:01:be:38:4a:7e:52:bf:4e:9f:aa:
         9b:36:1c:ba:76:8b:e6:58:5e:ee:74:ec:f2:f4:7a:db:ed:68:
         2b:f0:90:2b:34:f7:04:f1:57:2b:6a:fd:eb:2f:cc:07:0f:86:
         9c:13:eb:b2:49:fd:49:f5:4f:99:76:40:7a:ac:d9:eb:ed:69:
         2a:3b:29:ca:90:2a:bd:1f:4f:5c:45:f7:7d:f2:2a:ea:5b:ef:
         99:37:36:f1:d0:e1:12:bf:e9:53:d2:2a:c9:60:97:17:78:18:
         b3:60:29:7b:93:e2:af:0e:67:82:a4:fc:2e:2e:9c:59:15:7f:
         3f:a9:b8:ef:f1:e9:28:24:b0:84:6a:e6:18:ef:40:89:f7:50:
         e8:48:29:ec:bf:dc:58:ce:b0:ae:27:87:38:a8:6f:06:e0:53:
         d3:f7:91:5b:33:90:4e:e0:58:6b:44:50:1e:df:0f:d8:c5:d0:
         78:14:72:9d:d2:0b:ad:44:08:8a:7c:7a:a0:1a:92:9c:34:66:
         ed:b9:82:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----