Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c5275a3e-191b-4bbd-ac9e-7c09fce2057c.roa
File:                     c5275a3e-191b-4bbd-ac9e-7c09fce2057c.roa (raw, json)
Hash identifier:          4j1mxEZE3NRfSutXCNTzJlFePKb5oIA8P7W3e5qyG6s=
Subject key identifier:   55:FB:B2:5E:9A:3E:0D:CA:B8:FB:36:3D:76:F1:CA:F9:C4:4A:32:B0
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       10C253334ECDF071F5EEC21D51770C6EDD709680
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c5275a3e-191b-4bbd-ac9e-7c09fce2057c.roa
Signing time:             Sat 19 Aug 2023 00:00:00 +0000
ROA not before:           Sat 19 Aug 2023 00:00:00 +0000
ROA not after:            Sat 23 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c2:53:33:4e:cd:f0:71:f5:ee:c2:1d:51:77:0c:6e:dd:70:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 19 00:00:00 2023 GMT
            Not After : Sep 23 23:59:59 2023 GMT
        Subject: serialNumber=d8bd17739bfa80facb3f772204047f35a1e019c3f234c2e52de524a1b5eb6476, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:50:00:eb:d6:3a:09:90:97:2e:d4:77:f6:
                    ca:41:6f:30:7c:fb:b5:f6:78:5c:6d:ad:43:d9:60:
                    4c:da:9c:29:5d:51:77:3b:9c:59:f7:66:37:d1:de:
                    56:99:c9:a7:69:9a:4d:91:51:b2:13:97:77:0d:ab:
                    1d:84:90:7a:8e:16:75:b5:0c:bd:7b:fb:bf:bc:9e:
                    0c:cd:7c:bc:02:02:25:59:0b:86:ff:0a:37:6d:36:
                    d2:77:ed:96:8c:d8:27:ad:24:b2:85:b7:60:05:d2:
                    9c:be:19:00:53:b4:ab:2d:da:26:60:eb:e6:52:be:
                    64:20:eb:a5:d4:72:66:72:c4:59:d4:c0:22:1b:70:
                    d3:e3:d9:10:02:c6:0d:b1:18:a9:44:14:5d:7d:0e:
                    80:95:1f:9e:e6:97:79:56:b2:35:b4:e0:6f:e1:85:
                    ee:e0:fb:3f:ac:50:e3:76:03:41:37:06:00:68:8a:
                    87:b1:4e:1a:67:bd:9d:9e:0b:88:d3:bd:85:9f:9b:
                    43:36:50:bd:6f:6b:3e:95:7c:86:65:de:86:99:4f:
                    df:84:34:1d:c8:67:30:e3:6e:56:c7:c4:59:06:98:
                    3b:0a:fb:33:5f:ac:65:1e:e9:ae:6b:fd:e7:7d:d2:
                    3b:ea:5a:fc:e8:c5:6c:49:e5:2a:e2:74:44:3a:4f:
                    55:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FB:B2:5E:9A:3E:0D:CA:B8:FB:36:3D:76:F1:CA:F9:C4:4A:32:B0
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c5275a3e-191b-4bbd-ac9e-7c09fce2057c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:e8:7d:eb:40:19:91:5d:5d:35:c9:32:8a:53:f3:cc:2b:3d:
         6f:6e:30:3c:05:44:d2:6f:d8:e6:6d:1e:3a:67:f6:9d:01:bd:
         80:d3:93:4a:f1:45:5f:a4:d1:7b:92:13:d6:35:aa:92:00:fa:
         76:9e:ed:50:83:6a:8c:04:bb:63:0f:b3:77:10:75:7d:2d:15:
         d7:3d:94:a3:be:66:37:3d:12:7c:a3:60:f2:2c:c6:e9:b9:d5:
         67:26:17:bf:cf:56:3c:2e:67:f3:24:5d:63:5d:60:0c:fb:b7:
         2d:70:c7:b2:23:d5:2a:56:9a:a9:a8:4d:43:3f:e2:b8:c6:42:
         3e:30:0a:6a:c3:ac:f3:f4:6d:8e:a6:db:a5:6e:89:aa:0d:51:
         98:2a:9e:84:89:0e:f1:90:ea:92:23:a9:92:b9:7f:fd:e8:2f:
         cf:ef:5c:34:ab:f7:f6:cf:95:23:a3:2f:92:4e:56:b2:31:43:
         f0:a7:73:5f:4b:e4:83:e2:ca:c9:35:d1:17:01:f4:ad:b3:9b:
         eb:4d:d5:cd:49:83:d3:c0:dc:8e:40:d2:64:4d:4f:31:3e:81:
         a4:7d:70:66:dd:c4:0a:b1:86:bd:c9:33:93:b1:b5:8d:29:cb:
         fd:1d:4b:ec:8f:39:c8:46:bc:2c:53:d5:8d:50:3d:bb:cf:de:
         b9:67:3f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----