Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9cb4e5d8-1a6c-4426-a8d3-3b9ec410e6eb.roa
File:                     9cb4e5d8-1a6c-4426-a8d3-3b9ec410e6eb.roa (raw, json)
Hash identifier:          wLWmiT8YbwtNI6cVXSeLzyGezR7tAK1S7rTPNxm+xyg=
Subject key identifier:   4B:02:F8:29:98:AD:47:59:D7:20:2A:DB:E9:E9:74:4D:6A:CC:9E:3A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       30FC71808339BE02493A7B1FE3FC1F5208297A71
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9cb4e5d8-1a6c-4426-a8d3-3b9ec410e6eb.roa
Signing time:             Tue 19 Dec 2023 00:00:00 +0000
ROA not before:           Tue 19 Dec 2023 00:00:00 +0000
ROA not after:            Tue 23 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fc:71:80:83:39:be:02:49:3a:7b:1f:e3:fc:1f:52:08:29:7a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 19 00:00:00 2023 GMT
            Not After : Jan 23 23:59:59 2024 GMT
        Subject: serialNumber=731a78c2c4278b401bae9e49acd9e9bec7cafceb44fe82cae5765f338f2681eb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0e:25:59:0c:df:fe:d9:b8:54:de:74:fa:1a:
                    19:85:72:54:f8:6e:7f:bb:e6:9b:3d:e4:f9:ec:93:
                    fb:99:c2:29:ae:f5:59:5a:8a:56:d4:0c:7e:74:2f:
                    65:ab:1f:4e:4b:57:08:e0:59:0c:e2:8d:04:77:32:
                    1f:25:1a:8e:c9:68:bc:5e:a4:35:e9:2f:46:01:21:
                    c4:6b:01:54:4a:20:a6:6c:14:c0:85:19:f1:e1:e5:
                    31:ae:7e:f3:ed:88:bc:f7:4c:db:6a:42:d6:58:e8:
                    87:68:7c:1d:1c:79:d2:5a:48:8b:26:89:4d:35:8e:
                    5a:d7:aa:00:09:24:2d:6d:7d:8a:38:1e:b3:f1:88:
                    af:21:5f:fd:33:4f:c3:6e:af:ae:f6:2f:5e:9f:aa:
                    6b:33:70:a5:b2:89:3d:f3:d0:49:c9:b8:68:9f:18:
                    41:21:7a:5c:26:fb:8b:9c:2d:3c:20:01:75:1a:91:
                    63:21:4f:c3:40:2e:38:33:85:eb:48:01:ff:a2:99:
                    e5:54:ca:fc:09:7c:84:c8:05:5b:1f:67:31:75:fc:
                    52:ee:c8:fb:c5:7d:06:87:af:c1:e2:fa:5c:bd:a0:
                    ea:bc:e6:d7:8b:4a:32:80:50:a3:80:c7:86:e3:a6:
                    ea:b2:19:4e:bd:72:8d:4a:ff:5e:80:f1:b4:c1:cb:
                    ae:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:02:F8:29:98:AD:47:59:D7:20:2A:DB:E9:E9:74:4D:6A:CC:9E:3A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9cb4e5d8-1a6c-4426-a8d3-3b9ec410e6eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:bc:67:9c:70:84:8c:02:3d:20:bf:d6:69:c5:f3:09:5c:98:
         2c:97:c9:03:c6:4b:af:27:53:37:cb:82:19:8f:7f:a1:16:69:
         9e:33:3d:bc:83:bd:c8:34:1f:13:8b:79:e0:a6:0a:8d:f5:3b:
         cb:1e:84:fc:37:e8:d3:09:37:9e:47:e5:2b:d2:d4:ea:24:95:
         f6:d3:73:94:dd:f1:ca:7f:9f:5d:b6:12:04:95:ba:18:f4:73:
         a9:2b:4d:b4:0e:bb:9d:76:b5:b7:6e:e5:f2:52:8c:d0:f9:ee:
         c7:5c:e8:8b:88:d8:a1:e2:ae:43:3f:8e:a5:f2:20:8e:cc:0b:
         e3:9b:4e:31:37:f7:b9:8e:b3:a9:97:d7:f6:7d:a6:7b:01:c5:
         2e:e7:7d:32:41:eb:69:96:3f:cb:56:a8:e5:fd:06:23:8e:17:
         aa:1e:2a:5d:17:e2:7f:05:78:d0:d3:3a:4d:b1:d1:f1:20:0f:
         e3:25:c8:91:1a:c8:25:05:1b:31:67:14:94:22:07:fb:81:cb:
         26:30:dd:1d:a8:63:bb:87:23:cb:b1:8d:d8:09:ed:c8:61:8d:
         67:d6:fa:86:fb:cf:4c:f2:82:67:1a:c2:8e:39:7e:21:98:31:
         2c:ea:0b:fc:a1:71:6b:51:61:12:7c:3f:a4:9b:c0:de:8d:70:
         0f:68:c9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----