Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8e2d84da-a2f8-4c07-80fb-23a0da668bd2.roa
File:                     8e2d84da-a2f8-4c07-80fb-23a0da668bd2.roa (raw, json)
Hash identifier:          CwmEo7KPC+Q7PFI9Pc03/MacJY6jtgJ0gyN3jSLOI0M=
Subject key identifier:   F8:7A:6B:18:1E:47:CE:56:7C:A2:8F:2A:51:B0:D0:9E:F5:6D:19:64
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0355DBB1B9CBD35C79C44A9616D380FAE5C29147
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8e2d84da-a2f8-4c07-80fb-23a0da668bd2.roa
Signing time:             Sat 18 Nov 2023 00:00:00 +0000
ROA not before:           Sat 18 Nov 2023 00:00:00 +0000
ROA not after:            Sat 23 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:55:db:b1:b9:cb:d3:5c:79:c4:4a:96:16:d3:80:fa:e5:c2:91:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 18 00:00:00 2023 GMT
            Not After : Dec 23 23:59:59 2023 GMT
        Subject: serialNumber=d76bd7859465f0eb3f2c73bedf0464b60d7d33e4cc18834d99192aaa3888361a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:12:8c:e6:f1:23:f3:77:13:f9:a4:d3:90:75:
                    e4:ce:35:ab:81:be:c6:06:93:63:75:c4:94:99:53:
                    d7:71:51:aa:aa:fb:18:0b:06:29:f4:e8:6b:96:73:
                    ad:96:d9:bd:41:51:a7:6d:67:9d:8c:57:f3:8b:e4:
                    79:e1:4b:7d:b0:2e:91:ac:53:6b:4a:15:f8:90:ff:
                    df:02:7d:ae:0a:25:45:1f:9e:f7:82:5d:bc:08:b6:
                    56:49:41:e4:82:11:a1:9f:78:dc:1c:73:ca:cd:54:
                    3c:55:e0:f0:a9:bc:fd:ed:02:fc:cf:8c:5c:f0:dc:
                    5a:7c:62:e8:75:07:c4:1d:c1:9a:8b:c7:45:dc:97:
                    85:9f:3b:7e:91:7d:74:06:29:14:21:73:9f:f5:5a:
                    56:11:44:14:cb:b7:e3:d5:c1:06:1a:16:09:f9:c1:
                    e2:86:54:64:ae:e9:4f:39:15:b8:41:18:1d:a5:8c:
                    24:06:76:7b:06:fc:12:cf:5e:52:25:71:64:48:a4:
                    1f:b0:68:1c:f1:65:77:c0:31:e3:0c:24:51:db:6f:
                    cf:56:24:0d:fc:89:2f:8a:8b:a4:93:b2:23:59:07:
                    e6:05:2d:8e:76:ca:13:f9:16:14:28:16:b0:ca:f8:
                    27:d8:ab:d2:03:9e:e7:3f:23:26:1a:e1:7c:84:e4:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7A:6B:18:1E:47:CE:56:7C:A2:8F:2A:51:B0:D0:9E:F5:6D:19:64
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8e2d84da-a2f8-4c07-80fb-23a0da668bd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:73:48:2e:99:57:75:58:7b:df:01:1f:64:5e:e3:d1:dc:7e:
         cd:42:47:68:21:20:8b:bb:26:d0:f0:5b:7a:53:a9:7c:e4:6d:
         d4:22:0c:b1:34:c9:3d:db:79:a3:3b:75:71:4f:d0:0e:97:c8:
         b6:d7:3a:b7:1b:5b:26:07:92:b6:24:07:8e:3e:58:21:78:0a:
         65:50:81:03:ee:07:03:96:3d:92:bf:bb:d6:b9:00:54:d5:1c:
         8b:c3:07:48:57:fa:b4:08:74:8f:ba:4c:b7:b0:ba:9b:ce:fa:
         06:ec:fd:6b:71:bc:0c:5a:7a:f1:f8:f0:34:25:fc:9d:3e:eb:
         e6:ff:67:b8:18:dc:bb:75:54:dc:57:63:59:c2:8d:52:42:59:
         ec:0b:0c:27:28:27:f0:7f:37:7f:72:eb:08:b6:5d:af:06:67:
         f5:b4:10:1f:d4:61:cf:5d:39:62:90:56:4b:37:12:28:95:96:
         66:d0:85:07:cb:46:d3:a1:72:de:8f:50:81:ed:5a:03:25:f5:
         fb:cb:62:51:58:f3:51:ff:1d:90:74:10:25:74:fd:a1:09:6d:
         7c:c3:46:dc:15:38:af:45:06:90:1b:54:64:67:9b:30:0a:c4:
         09:ab:6a:05:e6:ed:4a:a2:82:36:aa:27:3e:d7:5b:c3:0d:74:
         a9:d3:35:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:00 2024 by rpki-client on console-ams.rpki-client.org