Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/afa5503e-b0b1-499e-afbb-e8dd62fff400.roa
File:                     afa5503e-b0b1-499e-afbb-e8dd62fff400.roa (raw, json)
Hash identifier:          UJ0M+FOA1NRD3MrnLUwMch4WWL+4IN7it+cyEj1dMxU=
Subject key identifier:   37:E6:D2:F8:1C:3F:7B:27:98:4E:B8:B8:F1:20:C4:F4:BA:C2:9C:CE
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       710EFF14480A7865867CBFCA9D47C388F7B3233A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/afa5503e-b0b1-499e-afbb-e8dd62fff400.roa
Signing time:             Sat 08 Jul 2023 00:00:00 +0000
ROA not before:           Sat 08 Jul 2023 00:00:00 +0000
ROA not after:            Sat 12 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0e:ff:14:48:0a:78:65:86:7c:bf:ca:9d:47:c3:88:f7:b3:23:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul  8 00:00:00 2023 GMT
            Not After : Aug 12 23:59:59 2023 GMT
        Subject: serialNumber=78e3850038f80a0eede6b9fed5919380ce048ef85bd76940b503f6be7cf53ad6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:76:a7:fb:19:59:c0:d9:65:1d:81:c6:92:fa:
                    21:4c:8c:1c:e4:9e:52:da:d9:4c:32:a0:43:a4:3c:
                    c3:7f:28:28:bf:e5:10:0c:2f:18:f9:2b:9b:5b:a5:
                    47:a2:8f:6a:4b:53:7e:3f:50:c0:e8:66:b5:6a:59:
                    55:28:a4:1c:38:6a:96:3d:7a:39:a7:5c:14:ae:d4:
                    cc:81:3e:c1:a1:22:1e:ad:75:09:80:41:c4:3d:23:
                    30:b7:17:99:29:f1:b2:1e:6c:2f:6a:c4:6f:c7:6d:
                    98:05:ea:84:e8:02:69:b5:6c:a0:96:2a:f2:9b:d8:
                    26:33:96:1d:e1:ce:5b:d0:7f:58:75:f4:d5:6c:23:
                    ec:4f:db:9c:ba:af:e6:50:99:e0:5a:18:f8:5d:ee:
                    08:68:90:a4:66:9b:93:d3:a2:3a:a2:35:33:40:36:
                    dc:cf:0e:04:00:8b:5b:86:93:66:1a:4c:d1:36:05:
                    87:51:95:55:66:5c:8e:d1:af:82:d0:e8:e4:9c:b0:
                    ce:55:56:58:c5:a7:a1:5a:07:fb:03:5d:11:34:c9:
                    64:41:77:fe:8f:54:ef:ad:4c:cc:d4:b9:9d:cd:10:
                    be:c4:9a:f1:ab:82:eb:fa:74:88:c0:f4:32:b6:29:
                    da:70:ab:28:b2:f0:bd:a7:e4:8c:5d:72:b3:68:d4:
                    74:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E6:D2:F8:1C:3F:7B:27:98:4E:B8:B8:F1:20:C4:F4:BA:C2:9C:CE
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/afa5503e-b0b1-499e-afbb-e8dd62fff400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:ef:72:c0:d1:50:42:b0:67:03:73:36:3a:b3:4a:bb:7e:70:
         fa:a4:f8:25:b6:94:5c:32:19:5f:9f:b4:29:e8:b3:d7:bb:64:
         c0:78:35:7c:62:68:88:44:43:6c:89:5a:79:d9:7a:ac:d0:30:
         8e:12:54:69:00:3c:90:97:32:ba:14:03:52:ac:20:9f:41:06:
         2f:29:80:2c:21:eb:4d:c3:33:8e:35:fc:3b:56:99:00:ae:49:
         70:84:f3:2f:af:f1:af:d8:d0:04:42:93:f4:a2:d5:ed:99:fa:
         1b:67:26:95:80:e2:1e:42:69:85:f3:2f:ad:a6:a1:5f:a7:50:
         32:72:5f:df:62:67:83:50:73:53:5f:89:77:84:40:d1:0d:f6:
         d0:b4:d0:20:6a:b9:8d:ca:84:65:6b:3c:dc:e0:f4:47:78:c6:
         2e:72:3b:9e:3e:ec:1f:6f:79:53:bd:38:70:75:fb:1f:14:f8:
         7c:cb:e9:32:c8:6a:c4:ee:62:b3:8e:eb:1e:d1:03:55:4d:7f:
         70:3d:19:5b:fa:09:b5:b1:ec:d9:af:02:55:a7:d3:8b:19:d9:
         6b:5a:9e:12:ee:2b:9a:cd:76:13:5f:f9:fa:bf:9e:24:69:15:
         2a:ea:b9:f1:75:7f:a6:8d:96:30:24:6a:05:a2:a9:62:9e:14:
         93:a0:a1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----