Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a121538c-83e8-40ca-8faf-39576353a029.roa
File:                     a121538c-83e8-40ca-8faf-39576353a029.roa (raw, json)
Hash identifier:          PDor+OlK+SDTXnpCD1JVfYe4r4RXDMRztV5B/dM62RA=
Subject key identifier:   31:CF:93:29:EA:7F:B5:58:42:3D:4F:92:A2:E2:67:64:26:0C:10:C9
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       17BBBAA4F9EDC4B258F4B6AB496A6E592A7110D2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a121538c-83e8-40ca-8faf-39576353a029.roa
Signing time:             Thu 04 Jan 2024 00:00:00 +0000
ROA not before:           Thu 04 Jan 2024 00:00:00 +0000
ROA not after:            Thu 08 Feb 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bb:ba:a4:f9:ed:c4:b2:58:f4:b6:ab:49:6a:6e:59:2a:71:10:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan  4 00:00:00 2024 GMT
            Not After : Feb  8 23:59:59 2024 GMT
        Subject: serialNumber=51b2f7d84c12b711ccac8c8b33b59ee1ea96fd5e0357753e38baa1745ad5c914, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:6c:68:3e:4a:ab:da:29:f8:a9:03:fd:ad:
                    aa:38:d3:f7:6a:fc:3f:e7:b3:a6:3d:03:51:0f:c1:
                    59:5d:62:62:60:4f:21:15:4a:a0:e8:da:ff:a5:e4:
                    7a:5b:65:2e:ec:41:8c:e0:07:6d:2c:1d:f3:26:e5:
                    e1:76:2d:bc:c8:6e:4e:59:c2:af:bc:bf:64:10:42:
                    0f:92:a7:72:8b:e3:69:d3:42:68:e5:5d:04:a3:de:
                    95:2d:f0:39:ff:7a:9d:b0:6d:68:8b:0e:f9:24:88:
                    ef:69:2e:52:50:94:6f:ca:e7:ed:e6:c3:cf:36:01:
                    35:f0:71:5e:df:6b:be:b2:7e:fc:7e:b7:1e:6e:75:
                    29:47:2f:c2:9b:8d:9e:b2:c1:4e:75:59:7a:b1:a9:
                    6a:3d:4a:0e:b2:e5:5e:6f:88:dd:5a:9b:90:70:0d:
                    46:92:91:31:55:fa:03:d4:99:4b:54:6d:1a:c4:cb:
                    57:23:0f:23:2c:a6:79:e1:11:89:88:40:6b:ee:d9:
                    37:57:1c:aa:26:d0:58:1e:a0:8f:37:e6:05:27:25:
                    16:67:99:30:c9:ba:db:a4:6d:6b:ed:1a:3f:7a:b3:
                    59:43:3a:fe:58:f0:17:48:84:2e:4a:3d:b9:b8:30:
                    b5:c9:2a:1d:54:6c:a1:f6:28:65:85:ac:90:8f:b0:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CF:93:29:EA:7F:B5:58:42:3D:4F:92:A2:E2:67:64:26:0C:10:C9
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a121538c-83e8-40ca-8faf-39576353a029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:c9:95:99:d3:5d:a0:f1:a3:76:dd:12:86:0e:87:82:ce:1f:
         d5:01:ad:f6:e8:42:fa:78:a9:14:cb:30:ce:5a:18:ea:a7:4b:
         42:62:03:4c:0e:be:18:99:6f:ad:82:5a:ae:7f:50:ad:a7:6d:
         bc:b0:89:a0:51:07:17:f2:46:40:7e:1a:5e:fb:07:b6:10:fa:
         ef:e0:7f:54:49:49:aa:10:60:ab:ca:e2:3d:52:84:1c:1c:00:
         4b:78:d8:a1:8e:96:de:1a:04:57:4e:85:32:01:9d:54:fa:dd:
         49:94:05:ec:c5:3a:49:dc:09:1a:9c:30:dd:7e:8a:7f:2e:6f:
         71:b6:78:af:ad:a7:56:a5:ba:c9:c5:2c:d8:3d:f5:4e:d2:f9:
         b8:a5:65:de:5b:7d:fe:f6:6d:4a:74:ab:a9:09:60:3f:f8:ba:
         7c:73:70:11:03:7b:f4:5f:0c:c2:d5:d6:a2:ce:b5:46:8c:b9:
         48:37:f9:98:92:52:ae:dc:43:57:d3:bf:0d:66:1d:f6:41:98:
         96:c1:94:3b:b1:86:53:78:06:ee:0d:7a:63:e0:6f:af:0c:62:
         14:a8:af:13:5c:c9:36:18:e3:0e:12:2e:c7:f5:cf:f6:0c:8d:
         83:91:eb:e4:ef:37:fd:96:de:f6:92:21:9c:bf:0e:6d:63:cc:
         d4:a2:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----