Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a835a59f-04c1-4b16-99cc-fe502e78b160.roa
File:                     a835a59f-04c1-4b16-99cc-fe502e78b160.roa (raw, json)
Hash identifier:          vbCB3sJT3DaGR4rLw1o/pXVz3OnGoWjbxQs46THUo4M=
Subject key identifier:   14:A3:F4:8E:8E:FD:22:A2:71:73:DB:4A:D8:32:C0:25:D6:E1:EA:24
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       535993E2544A001EE9DD9D1D987611878DA70C86
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a835a59f-04c1-4b16-99cc-fe502e78b160.roa
Signing time:             Wed 08 Nov 2023 00:00:00 +0000
ROA not before:           Wed 08 Nov 2023 00:00:00 +0000
ROA not after:            Wed 13 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:59:93:e2:54:4a:00:1e:e9:dd:9d:1d:98:76:11:87:8d:a7:0c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov  8 00:00:00 2023 GMT
            Not After : Dec 13 23:59:59 2023 GMT
        Subject: serialNumber=617684335482656bd2b87d88953bc60b4ca8c665799778d7f2d28db17d809eb3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:98:34:07:cc:d1:04:db:f5:e7:34:6b:18:aa:
                    36:23:73:45:7f:40:1c:19:d6:94:33:b6:48:fd:30:
                    2b:90:9d:58:30:2e:76:41:e5:a5:78:9c:35:2f:a9:
                    a9:a6:20:0d:83:6e:78:3f:d3:8e:36:b8:8c:4b:76:
                    72:ae:3b:9f:b5:f1:24:09:85:e8:2c:86:70:24:60:
                    47:2c:73:b9:64:57:b4:78:cc:aa:d0:26:c9:b8:ed:
                    ca:6e:1f:19:96:6b:cc:a9:e2:73:bf:e3:8d:66:8b:
                    1e:00:3a:0a:60:d2:a5:fc:e2:0c:04:b4:79:9b:37:
                    b5:de:d1:b4:26:10:ed:b7:56:4b:42:d5:d8:05:90:
                    62:71:33:fc:63:52:89:57:d8:0a:30:cc:cc:9b:2d:
                    77:f1:03:19:8c:4d:b5:ff:89:6a:c8:f7:a6:c2:9a:
                    29:e7:8f:ae:47:cb:63:9e:39:b7:c1:6a:9a:7b:42:
                    68:66:79:6d:63:0c:2d:7a:56:84:d4:99:4e:6a:5c:
                    0d:9b:92:81:b0:49:33:ae:55:63:98:52:3e:34:5a:
                    c4:c9:b9:22:b5:fb:0d:b3:63:c3:d7:b8:24:61:3a:
                    87:38:52:df:59:b8:bf:8a:33:6c:09:12:6d:79:f4:
                    cd:fb:b5:f3:43:ae:0d:ae:1f:73:43:5e:d9:a1:5f:
                    b3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A3:F4:8E:8E:FD:22:A2:71:73:DB:4A:D8:32:C0:25:D6:E1:EA:24
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a835a59f-04c1-4b16-99cc-fe502e78b160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:12:b3:00:b4:11:f0:df:dc:41:42:5c:46:e7:83:5d:e7:f7:
         8e:42:f4:60:73:f9:b6:0e:e2:61:fd:cc:27:e7:20:ca:1e:21:
         11:f2:3d:89:2d:90:1b:08:54:33:c4:67:e2:2e:6f:58:2b:2b:
         4e:4f:f3:18:f4:2a:91:80:18:8d:17:e5:77:60:b9:d3:a2:b6:
         00:c7:18:aa:02:43:12:d7:e0:c5:fa:89:6c:f6:d6:a6:64:0a:
         cc:2e:ab:fa:05:ba:5d:a6:a8:48:8f:12:44:f5:82:d8:7f:d8:
         d6:69:0d:7b:99:68:06:75:de:72:e8:cd:94:64:25:d6:0a:89:
         ad:82:12:73:03:f5:2f:da:c4:e5:c3:ee:b8:2e:a7:84:a6:15:
         75:bc:f0:6f:e1:1f:15:eb:3b:70:04:95:dc:03:bc:49:b3:5b:
         f7:9f:71:c1:f4:d0:ad:7b:27:3e:32:68:5b:a4:df:3d:87:fb:
         65:17:c8:bf:e6:43:16:14:99:94:8e:8e:b9:26:bf:46:c3:6f:
         58:52:f3:98:65:ed:88:89:4b:11:c0:b9:d3:97:9b:9e:a7:d3:
         19:37:f2:fd:3d:8c:37:12:f2:ae:9f:3e:04:1c:a4:e2:a4:53:
         29:86:35:5a:38:6a:83:f8:66:10:69:d3:94:d2:18:14:83:99:
         a9:29:7e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----