Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a632c620-23b4-4867-8fd5-1466cbf53fcb.roa
File:                     a632c620-23b4-4867-8fd5-1466cbf53fcb.roa (raw, json)
Hash identifier:          Hpy1dDZmcKHGkJrxCkmTTO2DbMrxp6fsluMqiJeE8l0=
Subject key identifier:   74:C0:0F:18:B1:80:34:24:69:41:7C:90:56:E3:05:05:CC:AB:27:66
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1C0FFE7B5037856E8999BEC76BDA639864137FBF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a632c620-23b4-4867-8fd5-1466cbf53fcb.roa
Signing time:             Sun 19 Nov 2023 00:00:00 +0000
ROA not before:           Sun 19 Nov 2023 00:00:00 +0000
ROA not after:            Sun 24 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0f:fe:7b:50:37:85:6e:89:99:be:c7:6b:da:63:98:64:13:7f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 19 00:00:00 2023 GMT
            Not After : Dec 24 23:59:59 2023 GMT
        Subject: serialNumber=5e4fb0896263c01ab796a0bf51274e787740e0e1e214b3bb33058de248ac23bc, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:71:39:27:37:8f:ee:ca:a2:08:59:40:08:
                    3c:a9:9c:c8:ee:00:a2:d2:e1:b3:43:22:ab:95:2a:
                    7f:61:2f:8c:d4:82:83:7a:c2:24:d8:b7:33:e7:6a:
                    26:f4:39:52:f3:fb:98:d1:1c:33:97:2d:7b:d8:74:
                    9b:cb:58:27:ed:af:d6:60:09:51:7d:93:8a:2b:b5:
                    11:08:db:ad:74:d1:31:cf:23:95:8f:74:b0:26:82:
                    a0:5c:43:23:2e:38:0f:c4:92:72:9b:85:6c:ba:bf:
                    fa:4d:24:43:e1:30:d6:5e:4d:34:16:ab:a1:2d:f4:
                    9f:ae:ef:90:a8:46:56:1a:cb:c3:64:4f:81:98:0d:
                    d9:6e:7d:a4:94:2c:9f:78:64:80:51:29:55:f1:98:
                    da:33:5b:1a:44:14:69:a4:d1:91:c3:fe:82:02:d1:
                    4d:0d:05:7c:17:69:69:39:44:cc:30:81:05:52:f3:
                    5e:0d:06:b2:7b:e6:55:af:8d:5c:43:f3:6d:62:c8:
                    1e:0e:b0:1d:3b:d2:97:60:77:3d:a1:63:0b:45:30:
                    f9:ae:f6:de:5b:18:e0:91:2e:1c:2c:27:28:b0:d2:
                    27:f6:6f:ab:6b:3f:27:7a:74:0f:52:38:98:a2:ce:
                    8b:df:96:41:c5:07:04:f9:48:e0:ef:42:f7:1d:1a:
                    6b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C0:0F:18:B1:80:34:24:69:41:7C:90:56:E3:05:05:CC:AB:27:66
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a632c620-23b4-4867-8fd5-1466cbf53fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:e4:a9:99:bb:46:04:f9:c4:3b:e7:ea:e9:1c:f5:77:6a:99:
         75:76:ec:69:e8:5f:87:a2:e4:7d:bb:ad:75:bc:25:66:e9:e4:
         48:09:47:37:45:38:61:aa:f3:6f:f8:fb:41:0c:c7:08:f2:b6:
         37:4c:d8:16:76:28:30:0b:1c:82:44:79:8e:96:61:62:1f:7b:
         4e:4a:b6:f9:04:95:ed:e9:c2:6d:a9:12:bf:4c:dd:d1:d4:69:
         5f:fe:19:1d:a3:f7:c8:91:1c:a1:b3:c7:a9:96:9d:6a:18:b3:
         9e:48:34:53:63:07:0d:f9:da:2e:cb:c8:b0:af:77:79:3a:ca:
         01:1e:57:b0:b9:fd:a3:3e:d1:96:01:07:66:93:30:ef:bc:88:
         26:f4:54:6d:d2:69:60:3c:34:b8:3d:b9:a1:8b:57:08:7f:12:
         51:e5:89:a9:67:de:8c:a7:fa:52:f8:9d:bb:20:2f:3b:b8:5e:
         72:4c:89:1f:74:46:dc:b5:54:01:53:ac:47:2c:be:b8:4a:e0:
         8c:83:1a:57:cf:cd:7a:fa:ba:61:89:68:c8:c0:a2:8e:9f:36:
         44:5e:97:e2:93:1e:d3:c6:da:0f:68:32:06:4e:ef:0f:cd:f8:
         72:38:31:b0:24:d7:96:aa:29:ea:8d:88:dc:e6:63:1d:30:d9:
         3f:88:3e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----