Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a2104faf-d6e5-4625-82ee-ce05df8981c5.roa
File:                     a2104faf-d6e5-4625-82ee-ce05df8981c5.roa (raw, json)
Hash identifier:          /qP10GjBcOnteLvqPI7772HCK0iwrpogqXlGsjFk3SA=
Subject key identifier:   50:87:5F:9B:C3:C2:EF:98:FB:F9:A1:26:DD:94:41:2A:10:5F:7A:61
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       14126F1672B90492C5D1B7FC2C4572647AC0F0CB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a2104faf-d6e5-4625-82ee-ce05df8981c5.roa
Signing time:             Sat 26 Aug 2023 00:00:00 +0000
ROA not before:           Sat 26 Aug 2023 00:00:00 +0000
ROA not after:            Sat 30 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:12:6f:16:72:b9:04:92:c5:d1:b7:fc:2c:45:72:64:7a:c0:f0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 26 00:00:00 2023 GMT
            Not After : Sep 30 23:59:59 2023 GMT
        Subject: serialNumber=eba1743170441f6ee3773eb46390dadd8ac209e55f76333a3903c60e68a9bb7f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:52:2a:0b:d6:4f:e4:fe:04:c3:a0:fc:30:97:
                    00:5c:d0:11:a7:f1:e2:e6:d5:df:5f:8a:6f:08:e7:
                    a1:68:c2:af:3c:52:f3:62:da:66:37:55:9d:f8:b8:
                    69:cf:46:df:2c:70:5b:97:6a:18:4d:11:b1:b1:01:
                    f3:53:0a:1a:40:da:36:92:31:d1:de:25:27:6f:23:
                    8b:b5:3c:63:20:42:c0:c0:d5:5d:be:b8:04:9d:ef:
                    d1:1c:57:8a:6f:77:f4:e5:77:e9:a7:f8:75:58:19:
                    f4:c8:88:d1:f8:68:80:70:0a:d2:dd:01:ab:e1:65:
                    a5:10:bd:8d:4d:97:f9:25:0a:b9:8f:8d:63:c1:8f:
                    6d:7b:9c:22:4a:14:0a:ca:f7:33:60:c9:60:b1:56:
                    ef:bd:7f:1d:97:4c:4a:bd:0c:81:98:dd:f0:e5:b6:
                    a3:05:74:75:ad:0a:dc:20:0d:ee:ce:c1:56:bd:b0:
                    63:a9:32:d5:87:c2:21:43:0e:37:39:3f:93:31:14:
                    ed:d6:df:55:8d:0f:24:2e:c8:80:d3:07:5c:ac:20:
                    db:d8:1b:e1:d6:60:1b:bb:04:11:6b:80:5a:0f:c6:
                    59:d2:07:8e:a0:63:44:dc:98:e4:62:2f:c6:86:ef:
                    7c:c6:a8:cd:cd:25:29:f9:5a:e0:9e:8a:55:4b:f8:
                    03:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:87:5F:9B:C3:C2:EF:98:FB:F9:A1:26:DD:94:41:2A:10:5F:7A:61
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a2104faf-d6e5-4625-82ee-ce05df8981c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:58:b3:84:79:c2:30:bb:d5:3a:17:5a:27:69:0d:46:19:1a:
         99:f4:80:a6:b0:f1:72:eb:15:b7:6c:5c:f5:77:6b:ea:d3:65:
         0d:70:a5:1a:58:e9:a3:2d:d7:78:f9:3d:20:ec:ba:72:41:12:
         f8:6f:f0:e5:6d:43:f6:e0:57:e3:b0:17:3e:06:66:cc:99:f8:
         03:bb:29:70:52:a9:67:76:4b:b5:aa:ba:d7:d7:30:b4:ae:4c:
         85:c1:89:87:72:e3:82:ec:09:7b:e0:5c:45:01:b0:95:a1:3f:
         eb:8d:ff:c1:45:73:27:ff:9f:26:5c:48:26:47:41:86:24:cc:
         0b:27:a1:d9:13:f1:59:51:ed:68:a0:9e:98:35:b1:b9:70:bd:
         de:8d:89:b6:dd:e8:7d:e1:51:ea:08:0b:6a:3e:10:1f:b9:55:
         08:c8:f3:ec:59:f3:15:e0:57:8d:1e:86:92:d3:92:aa:5e:4a:
         f8:40:bb:f0:30:ce:ee:61:de:b4:dd:99:39:1e:10:36:13:6f:
         99:c5:a9:45:49:20:45:a7:c0:54:ad:47:c9:98:ee:80:bc:df:
         46:80:d4:48:cf:d0:c1:ad:6a:2c:70:6f:97:06:e2:38:c2:79:
         b5:2e:3d:0a:59:cd:e7:1a:b1:2c:48:78:47:0f:f6:89:d1:44:
         a5:6b:a6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----