Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/be174279-e6cd-4452-9b20-8bc74d308569.roa
File:                     be174279-e6cd-4452-9b20-8bc74d308569.roa (raw, json)
Hash identifier:          Q6anXv/nV14bR9xn1+ihYO2HXSIKTk1ia1Bw06olofA=
Subject key identifier:   06:3D:4C:52:EA:03:4C:0B:C4:1D:E0:7A:A7:05:73:EA:9A:F4:71:F3
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       214F674B756BA807C775ABAD3E3F2E14A3110A6C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/be174279-e6cd-4452-9b20-8bc74d308569.roa
Signing time:             Tue 12 Dec 2023 00:00:00 +0000
ROA not before:           Tue 12 Dec 2023 00:00:00 +0000
ROA not after:            Tue 16 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4f:67:4b:75:6b:a8:07:c7:75:ab:ad:3e:3f:2e:14:a3:11:0a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 12 00:00:00 2023 GMT
            Not After : Jan 16 23:59:59 2024 GMT
        Subject: serialNumber=0e654547e3df8d4af984f3620d3b1d700b00feb585b39027e47e30adcb871395, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b8:8f:f4:17:a5:b3:ae:a0:e9:18:bb:a7:4a:
                    52:59:62:55:f5:bf:f4:d9:1b:ca:6f:0d:e9:0e:ae:
                    74:1e:cd:71:64:72:c9:6d:ab:6a:bb:f9:42:8e:93:
                    f0:d9:19:aa:e0:01:f9:92:98:0d:87:8a:c4:ac:28:
                    f6:30:1d:6f:a7:86:04:e5:23:fd:85:24:55:aa:f9:
                    02:b2:6f:80:83:36:fd:d0:4e:fa:d9:55:36:9b:6d:
                    e9:29:f3:f4:58:9b:6d:0b:74:bd:7c:ed:ee:64:cc:
                    ed:2c:de:51:24:46:0f:96:46:29:49:68:0d:09:dd:
                    35:40:9d:e8:f1:01:76:aa:21:b1:dd:c6:3f:ee:98:
                    a3:75:af:17:42:c7:b5:8a:69:56:64:06:fb:20:6e:
                    aa:f5:db:21:df:af:ae:2b:98:77:48:7b:d2:ef:6e:
                    10:4e:f6:42:4f:32:d4:2c:b5:ba:17:7e:76:af:0f:
                    86:03:a8:c2:3b:2b:7d:e6:30:e9:c3:c0:99:ff:88:
                    61:00:c7:c3:92:17:cc:6c:2d:d8:95:6f:e2:e5:ab:
                    2b:38:e0:76:73:5e:d0:cc:38:1e:8b:c6:9e:3b:89:
                    dd:f9:f4:5d:6b:1c:3e:04:04:ef:ef:2a:11:62:e1:
                    7e:45:27:32:3c:4c:df:1e:84:ea:1a:43:e3:7f:7c:
                    45:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3D:4C:52:EA:03:4C:0B:C4:1D:E0:7A:A7:05:73:EA:9A:F4:71:F3
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/be174279-e6cd-4452-9b20-8bc74d308569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:be:58:7a:4e:2f:e8:97:37:01:58:89:7e:a8:d7:32:7a:ff:
         5c:dd:10:06:16:84:19:8f:75:91:1f:96:7c:52:54:b4:c7:72:
         54:71:a7:da:1e:66:15:dc:80:e3:4b:d3:35:b0:89:7f:34:43:
         39:1b:d7:42:3d:d1:59:5b:1b:97:57:3f:b8:1d:dd:cc:19:8d:
         ca:13:4a:81:00:d7:1e:6f:03:f3:75:5e:79:24:f3:2c:9f:ea:
         90:83:e0:12:27:0c:9e:f0:28:14:eb:b4:68:6e:4b:cd:6a:c9:
         fb:85:27:d5:5e:b1:56:1b:fd:96:17:6a:7f:c2:b7:35:4d:ed:
         85:52:e2:23:11:9e:b1:17:8c:28:74:c2:26:a4:0e:7c:da:38:
         b9:ac:df:20:84:c1:67:77:c0:58:61:26:1f:e7:bb:4b:dc:97:
         49:c7:9b:08:c0:2f:fa:bf:56:87:46:65:fb:c5:5d:2f:73:d3:
         4a:b4:90:6a:e9:57:10:f0:da:cd:71:9e:d6:9c:d4:74:a8:01:
         84:71:5d:6e:de:17:59:51:40:6a:eb:8e:f0:8a:07:e6:e9:4b:
         d2:bc:27:48:3b:80:9d:62:24:71:73:6d:62:ce:d1:e9:f3:f7:
         6b:69:73:3b:bf:ae:65:40:c4:25:5d:1a:8c:27:2e:02:45:c7:
         01:a6:36:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----