Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b66c64d9-f981-4525-9c48-58bd0c965a71.roa
File:                     b66c64d9-f981-4525-9c48-58bd0c965a71.roa (raw, json)
Hash identifier:          zwo6ZLQfdwvrgEwaRC0pSq1Ga6frvj+Rk0ROOQUUfGc=
Subject key identifier:   0B:4A:58:5B:26:38:DE:5C:A0:88:78:B9:FB:79:E6:AC:67:F7:BD:40
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1F7D30C3E084E561DDFFD0961E0304869E7BFA11
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b66c64d9-f981-4525-9c48-58bd0c965a71.roa
Signing time:             Sat 15 Jul 2023 00:00:00 +0000
ROA not before:           Sat 15 Jul 2023 00:00:00 +0000
ROA not after:            Sat 19 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:7d:30:c3:e0:84:e5:61:dd:ff:d0:96:1e:03:04:86:9e:7b:fa:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 15 00:00:00 2023 GMT
            Not After : Aug 19 23:59:59 2023 GMT
        Subject: serialNumber=5f0ef213843e8a382197c3b18e248fca0e84d33f322533fa61ae39c7f18aca8f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:10:49:4d:23:26:3c:3c:1b:2e:08:9e:d8:
                    d3:ad:4c:40:b2:b7:61:df:40:ab:54:39:50:b4:51:
                    02:07:fe:7d:d3:1b:b3:fb:30:fa:f4:75:75:11:bf:
                    72:e3:11:2a:20:da:93:a1:f4:be:39:93:37:9b:c9:
                    ac:6e:76:0d:80:ba:5b:18:a2:bd:cb:f8:7b:71:6d:
                    aa:2a:d4:f3:7d:fa:81:a9:1d:43:0c:53:b8:da:d8:
                    63:89:83:f3:29:88:df:22:27:ef:4e:94:2b:a6:ee:
                    ee:6d:ce:14:52:12:25:7b:7d:57:91:4d:cd:90:94:
                    bd:c7:69:bf:61:70:b8:74:03:72:bc:18:a2:4a:ed:
                    2f:1e:24:9b:ff:f3:1f:93:51:42:e5:6a:fc:a5:eb:
                    b2:f0:cc:1a:99:2a:11:5a:75:95:dc:9f:ac:c6:ed:
                    7d:29:2b:19:1c:29:56:1d:8c:73:4e:08:8f:b1:cc:
                    b2:00:77:fc:9d:48:e9:39:9f:30:78:c5:8a:e9:df:
                    44:a9:07:4c:57:ff:bc:38:56:96:bc:dd:8f:1c:56:
                    e6:73:c8:92:17:c1:9b:da:cb:2c:70:30:e5:76:a8:
                    52:82:d5:bc:0d:d2:0d:18:7f:fd:5e:5b:e5:0c:da:
                    ef:53:2f:ae:95:64:86:bc:e5:99:16:66:b1:f3:e6:
                    94:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4A:58:5B:26:38:DE:5C:A0:88:78:B9:FB:79:E6:AC:67:F7:BD:40
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b66c64d9-f981-4525-9c48-58bd0c965a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:ec:fa:5e:87:89:90:51:c4:d3:58:90:92:e6:3c:2f:99:73:
         03:40:84:d7:7a:03:6a:63:fb:79:30:1a:af:86:89:b0:c0:13:
         62:c4:a8:63:84:77:37:1e:03:9a:12:ba:a9:b7:05:a4:d4:68:
         99:43:17:be:15:fb:f8:5b:58:63:33:31:a6:f8:a8:3e:62:9d:
         c7:e3:4c:99:b7:ee:f7:15:83:73:94:4c:22:59:15:f4:9b:14:
         9d:15:3a:52:15:4e:88:2f:ec:1f:5b:7e:f8:80:b6:ed:de:12:
         42:e5:f6:6f:d5:84:ea:bf:a1:5c:cf:c8:ee:51:df:96:1e:40:
         f2:2b:07:20:2d:1b:38:ce:9f:4d:d0:bf:24:69:1f:9b:0a:9d:
         98:f4:cb:ed:60:3b:ee:ab:68:4e:a0:76:5a:8f:d7:89:b4:64:
         34:a2:f3:d5:d8:78:02:e8:77:37:0a:e3:c7:a8:95:24:c7:b1:
         c3:7c:e3:ef:29:1d:b0:6b:6a:32:e1:03:e4:86:f2:78:e3:de:
         b3:f0:cd:e2:39:a1:0e:db:cc:8d:6a:58:a0:ae:b0:5e:5a:66:
         f6:b8:22:10:a7:33:cc:b5:52:c7:33:26:d6:b6:a5:a3:0e:07:
         f1:88:7f:ee:c3:2e:27:09:03:09:ec:ae:77:3f:5d:3f:a3:bd:
         92:79:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----