Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a91f2d4c-ade7-4a5b-820c-af2f43295b9f.roa
File:                     a91f2d4c-ade7-4a5b-820c-af2f43295b9f.roa (raw, json)
Hash identifier:          +jAF96IKqRgePUpKVuF2L8O/TLXLgy7n6TQWoT4AMOg=
Subject key identifier:   CE:4F:46:43:44:E2:C8:9E:80:43:A1:7B:95:6F:5B:1A:29:DF:00:BA
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       536418D465537FCEA2B2DF3162C23B62956F092E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a91f2d4c-ade7-4a5b-820c-af2f43295b9f.roa
Signing time:             Sun 10 Dec 2023 00:00:00 +0000
ROA not before:           Sun 10 Dec 2023 00:00:00 +0000
ROA not after:            Sun 14 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:64:18:d4:65:53:7f:ce:a2:b2:df:31:62:c2:3b:62:95:6f:09:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 10 00:00:00 2023 GMT
            Not After : Jan 14 23:59:59 2024 GMT
        Subject: serialNumber=1c4cfd08708c9249708664561d3c77e20041e3d18b338f143f49b0798508f689, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6f:fa:7b:dd:a3:63:cb:8b:73:b9:47:b1:b2:
                    8b:c2:b3:b5:2f:6b:dc:c5:ca:35:32:fb:3e:5c:17:
                    ad:80:9a:48:9c:71:5a:6b:74:d5:c1:7d:97:56:03:
                    6a:8f:98:8c:8f:26:9d:c0:b8:e5:b9:c0:86:d7:b4:
                    0f:a2:30:c0:2a:64:d5:9b:7a:6a:19:09:ee:60:e1:
                    1b:2f:19:9a:e8:e3:c1:33:d8:c9:18:80:56:5b:e3:
                    70:35:6d:33:aa:9d:a0:a3:fd:40:59:02:ad:a6:eb:
                    d6:1f:6e:3d:3a:71:43:b9:36:e7:78:e8:0e:07:05:
                    3d:ed:0f:de:dd:9a:4a:a4:ef:cf:24:2d:bd:54:99:
                    13:33:fc:65:62:24:53:15:92:3b:1b:e4:99:a8:6b:
                    23:83:e7:3d:b4:88:34:d5:6e:c2:63:d3:e9:1d:11:
                    21:1f:c8:4c:90:d9:c6:db:1f:52:74:00:27:86:3d:
                    4e:04:f6:d6:5a:b7:ed:3e:5e:51:08:8e:8b:5d:2f:
                    32:d5:05:b3:3a:e1:04:bb:42:bf:0b:03:15:e3:27:
                    63:d6:7f:f5:08:b9:c0:03:83:81:d8:01:79:ab:b7:
                    b3:bf:8c:8c:68:17:26:37:3a:73:4c:07:8c:63:c9:
                    3a:20:03:9a:af:29:04:f0:e3:b3:70:c3:3d:a2:47:
                    79:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4F:46:43:44:E2:C8:9E:80:43:A1:7B:95:6F:5B:1A:29:DF:00:BA
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a91f2d4c-ade7-4a5b-820c-af2f43295b9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:30:de:14:cd:b6:c2:1c:24:96:fc:e9:02:51:a9:1b:bb:c9:
         8f:53:af:88:06:a6:46:6b:ea:06:d0:2e:7c:51:d2:84:46:63:
         11:cb:55:85:6f:8d:91:c4:65:80:c7:4f:59:e4:c8:70:c8:c7:
         8c:31:8d:b4:4b:7a:9a:51:a7:47:43:04:1d:66:1f:1a:5e:ba:
         6f:a2:0a:4c:a4:ae:4d:82:65:69:1d:68:3c:11:cc:a5:2b:d0:
         06:87:05:77:0a:4a:d7:ef:ac:59:fd:e7:0b:0a:0f:dc:f6:0e:
         03:59:5d:c5:f6:88:bd:38:a8:ff:b4:59:fe:c6:6b:25:2c:70:
         e0:85:af:0b:ca:b8:1e:c0:c4:75:87:59:0b:f1:8c:43:f6:fd:
         7f:74:87:c7:94:4b:f1:ff:f7:75:27:84:5a:bc:1a:ee:79:f2:
         69:a4:a4:c9:61:aa:e0:83:b7:d1:06:8c:69:10:e7:6d:21:20:
         ac:31:2e:07:e1:98:fa:fa:ae:2b:9f:40:ff:24:39:08:9c:06:
         9f:a0:b5:1e:b0:7a:9c:e7:6d:26:f6:4a:5e:44:b0:ff:92:a8:
         68:a3:2d:29:29:a9:05:51:31:15:05:2c:6b:da:7c:82:55:80:
         38:4c:27:45:41:45:5e:43:84:03:5e:61:b7:f3:91:5a:82:6a:
         6b:47:1a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----