Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/929c6df9-32a6-4fcf-b5b6-85798a45d1ef.roa
File:                     929c6df9-32a6-4fcf-b5b6-85798a45d1ef.roa (raw, json)
Hash identifier:          PF7lu48n4ZxImd+l/Ea5m9AZoqmcYlfP0wcK6J2ETBI=
Subject key identifier:   8E:B6:A0:65:04:8D:7F:1C:EC:47:55:FE:01:57:17:06:FA:7C:BB:89
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4A188340D3CFCBB4A3B32BC41C54446BD36D7ABC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/929c6df9-32a6-4fcf-b5b6-85798a45d1ef.roa
Signing time:             Sat 07 Oct 2023 00:00:00 +0000
ROA not before:           Sat 07 Oct 2023 00:00:00 +0000
ROA not after:            Sat 11 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:18:83:40:d3:cf:cb:b4:a3:b3:2b:c4:1c:54:44:6b:d3:6d:7a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct  7 00:00:00 2023 GMT
            Not After : Nov 11 23:59:59 2023 GMT
        Subject: serialNumber=5b4ecd0ad92e3d6e868ca4af633aa086183522f22e614787c15026a5b21f41b7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:2c:c1:7f:3b:9d:2c:1c:ce:59:54:99:e6:
                    82:5e:94:4e:17:fa:8e:e9:ab:6b:f4:86:d8:0a:b9:
                    71:2b:b2:93:78:de:70:c0:ba:92:b3:92:d1:d9:e2:
                    09:74:29:89:a0:b8:9c:75:c7:d2:19:41:0d:37:97:
                    8a:18:06:4c:48:b0:0b:47:15:97:c2:e9:c3:9d:90:
                    1e:07:a6:f3:eb:a3:27:f4:2a:43:e0:d1:48:52:f3:
                    32:13:d9:2c:d7:61:5f:9c:8f:96:2b:d9:19:19:5c:
                    17:a0:0a:9a:68:c0:8e:b7:e7:59:7c:15:03:26:91:
                    8f:2e:98:1f:69:b2:7a:15:9e:3a:5b:d2:3f:61:3a:
                    97:bc:8c:70:23:8c:20:18:54:b7:b7:68:ee:a8:e7:
                    60:ad:6b:d3:af:1c:ae:d9:23:fd:4a:14:9c:cc:74:
                    9b:51:c8:5e:4d:fd:c4:6c:8c:f0:48:90:b3:15:a8:
                    25:1b:1b:0c:55:d8:82:ed:f2:89:1b:88:0e:f2:b8:
                    04:7c:f0:75:7d:42:1d:f0:cc:01:84:94:b3:b2:4e:
                    35:39:38:a9:fb:35:b6:95:8b:aa:7e:e5:51:a9:0e:
                    9e:0c:66:96:d9:e1:bc:09:a0:aa:27:9b:93:19:cc:
                    71:55:48:f8:7a:94:ae:51:df:28:19:6c:11:2f:d5:
                    1b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B6:A0:65:04:8D:7F:1C:EC:47:55:FE:01:57:17:06:FA:7C:BB:89
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/929c6df9-32a6-4fcf-b5b6-85798a45d1ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:e6:e1:fc:43:aa:db:04:a4:1a:b7:f1:8b:11:45:53:0a:5f:
         a6:97:72:a0:80:39:de:25:f4:1f:cc:3b:e6:a9:a7:a4:66:0b:
         0b:1b:a8:d3:83:06:9f:3a:99:07:95:88:83:3f:d8:f0:47:10:
         2e:93:b1:ed:98:9a:6f:89:c4:91:7b:73:01:e6:b0:bc:a7:20:
         8d:ba:3f:9a:03:29:ce:9c:07:17:ef:ea:41:9a:19:7a:75:ae:
         3e:c0:83:8a:2a:8f:f3:14:a1:72:6e:92:ac:7a:39:e8:e4:c5:
         39:70:b6:87:86:f4:f3:ef:23:ac:ea:4e:44:46:62:94:eb:e2:
         e6:5e:84:67:c4:72:0a:ab:0d:b7:cc:70:ef:c6:3c:05:f3:22:
         51:89:7b:99:1a:6a:23:7f:79:c3:be:14:70:5a:06:38:dc:0e:
         9f:61:fb:e5:ce:e6:2e:1e:95:51:5d:c5:e1:05:e1:6c:77:e8:
         a4:34:73:57:17:e8:9e:6f:7f:b1:9f:6e:93:5c:dd:bb:db:bc:
         5b:32:c1:da:5c:c9:86:82:ce:03:9a:7f:d2:e2:ca:dd:f7:97:
         5c:9c:46:41:7e:9b:5e:cb:0e:4e:54:a3:69:64:3b:c3:66:a4:
         4a:a1:ad:ad:9c:de:20:34:5c:5e:7d:8b:6a:71:be:9a:1b:63:
         83:5e:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----