Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/90a73d2e-e820-4eff-8360-a3099d4fc395.roa
File:                     90a73d2e-e820-4eff-8360-a3099d4fc395.roa (raw, json)
Hash identifier:          Uy4TXsIhxoC3s3e7gJFMGSvZkzxS9hAo4dkcaIQ4Z4g=
Subject key identifier:   62:91:6D:99:C7:11:1B:6B:9D:B6:60:45:19:45:32:7F:86:D0:66:79
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       200ECE9BD5FF7D2D86C59E576C64DFD55AB2B20C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/90a73d2e-e820-4eff-8360-a3099d4fc395.roa
Signing time:             Fri 15 Dec 2023 00:00:00 +0000
ROA not before:           Fri 15 Dec 2023 00:00:00 +0000
ROA not after:            Fri 19 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0e:ce:9b:d5:ff:7d:2d:86:c5:9e:57:6c:64:df:d5:5a:b2:b2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 15 00:00:00 2023 GMT
            Not After : Jan 19 23:59:59 2024 GMT
        Subject: serialNumber=8f99a6eb82fcb484b9cdad36eb0e8475d08badba2538adc074b8c6eedefccbe4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9e:69:58:3e:81:40:fa:0a:2e:6e:37:fc:9f:
                    fd:e8:55:c9:e4:92:52:c2:e2:10:73:54:1d:00:50:
                    e0:24:47:cd:02:59:d1:20:38:a1:92:86:67:e7:af:
                    b1:59:9b:73:cc:c8:a4:af:3c:e4:af:0b:f4:54:b0:
                    fc:5e:2e:41:99:ca:a0:03:30:bd:b0:ab:1d:43:b9:
                    3c:ac:8f:69:28:b7:32:60:65:24:fe:44:8a:06:0a:
                    39:ea:d3:9a:08:06:72:f9:e2:1e:38:8a:36:2a:a6:
                    c4:3e:bd:7f:77:76:7e:00:0f:78:92:ee:78:2b:d9:
                    4b:13:b2:bf:e9:56:34:d1:6e:11:67:2b:8d:3b:7e:
                    5f:ac:4d:3d:06:18:3d:a8:8a:7b:71:14:6d:8a:c4:
                    7a:c9:47:f4:07:f4:d6:45:ac:27:6d:8e:65:5e:ce:
                    87:4b:19:23:d1:75:c5:89:1c:e0:d2:64:b1:93:72:
                    2f:d0:0e:28:b8:0e:a7:c5:36:6b:3b:75:7b:3f:73:
                    33:0f:5b:cb:c2:24:d8:d9:d7:87:b6:7f:97:d9:c5:
                    b9:cd:5f:a6:81:42:91:f2:da:e9:89:1d:85:af:1d:
                    9d:d1:6a:78:80:f3:98:ce:99:de:26:ad:a9:16:45:
                    2a:34:c0:3d:f7:44:8a:25:48:dd:6b:2c:38:dc:01:
                    08:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:91:6D:99:C7:11:1B:6B:9D:B6:60:45:19:45:32:7F:86:D0:66:79
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/90a73d2e-e820-4eff-8360-a3099d4fc395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:07:fb:00:0e:5c:fc:97:00:14:82:ac:e8:91:2d:55:e0:16:
         b0:23:21:70:2f:08:e6:72:e4:3d:da:0f:be:44:86:59:05:15:
         cf:db:90:27:f2:cb:55:dc:8a:1f:9b:f7:e6:e6:15:4c:44:45:
         10:d3:df:5f:18:a7:90:97:d2:4c:b9:c5:10:18:35:7c:7e:dc:
         6d:04:18:5e:74:db:0a:fc:66:82:b2:36:08:f6:66:8d:f5:9b:
         19:7c:7d:42:14:a8:45:e7:ac:8e:ad:4a:e0:40:c3:84:5c:ce:
         a9:94:2e:d0:58:37:d2:83:80:85:ef:0f:8e:e6:0a:65:47:df:
         a9:2f:22:c9:36:57:75:40:ed:5d:ef:34:15:4f:55:fd:64:73:
         da:84:c4:49:2e:29:bc:15:05:6d:8c:57:9d:67:3d:3f:0e:d7:
         f9:65:4a:9f:71:23:5f:e7:b6:f8:18:0f:53:30:a0:37:1b:54:
         52:31:b6:66:65:84:47:ff:6b:61:3b:c3:a7:c9:ce:02:e5:78:
         f9:0f:d9:f2:93:3c:bc:a0:78:3b:78:bd:26:7e:e9:9a:fd:47:
         93:1e:56:23:9d:69:71:9e:66:91:d2:5e:89:d1:2f:92:3b:cb:
         10:5e:c1:51:32:91:43:7a:f0:d2:fe:a7:9d:12:ce:af:c1:30:
         6f:cb:ea:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----