Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c953dd05-a5c4-4877-b058-9ccc82f24218.roa
File:                     c953dd05-a5c4-4877-b058-9ccc82f24218.roa (raw, json)
Hash identifier:          cJD8Mj+XUK5sFFNTnu+GCt1ZNfL1qXm8jOkYw2IveJ0=
Subject key identifier:   30:35:54:01:63:7B:D3:0D:7E:97:CB:E0:9E:5F:C0:CE:45:76:E5:6B
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2254A58973952905ABBF10DD6C295AEA29FB8F1E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c953dd05-a5c4-4877-b058-9ccc82f24218.roa
Signing time:             Sun 10 Mar 2024 00:00:00 +0000
ROA not before:           Sun 10 Mar 2024 00:00:00 +0000
ROA not after:            Sun 14 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:54:a5:89:73:95:29:05:ab:bf:10:dd:6c:29:5a:ea:29:fb:8f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 10 00:00:00 2024 GMT
            Not After : Apr 14 23:59:59 2024 GMT
        Subject: serialNumber=55713ee83ab78a1a672cc30c742f3d6bdf90d323589d8e88bde8535eec3a6cdb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:b3:dc:5a:b7:64:b0:76:b1:38:72:89:63:
                    f2:32:25:8d:eb:ff:8f:19:b7:62:65:5a:9d:33:a0:
                    4c:3a:72:f6:88:3f:fa:cd:1f:d9:7b:71:d5:44:35:
                    7d:d8:e9:0e:04:1a:ce:84:1f:2a:3e:70:6e:cc:d3:
                    fa:9c:c6:87:13:b4:80:26:b1:09:96:2e:fd:ae:5e:
                    a8:e0:96:b3:3c:15:b8:75:c4:67:c4:de:fd:aa:b3:
                    ba:10:54:ec:05:e0:de:ae:e7:52:34:4e:86:6f:3d:
                    a3:85:5e:e5:cb:b9:75:9a:4c:04:af:1d:e7:99:07:
                    9a:29:2b:31:7a:67:eb:5f:91:42:de:61:2c:a9:35:
                    b0:f2:e4:d9:94:fc:e2:e9:d5:27:fb:f7:37:65:36:
                    55:e3:a9:1c:d3:73:73:01:aa:aa:64:9f:1a:7f:3c:
                    ae:5c:c8:74:8c:7d:cf:2a:6e:5f:4d:42:78:8e:5d:
                    da:5a:f8:f8:ee:76:50:31:a6:a4:29:e1:4a:60:88:
                    2b:db:48:c7:a7:ac:a1:6a:c2:14:2e:f7:df:1e:8e:
                    d7:8c:20:64:79:04:fa:ce:1c:3f:29:a6:bf:6a:2d:
                    7b:83:39:da:2a:75:d5:36:91:29:67:1b:2f:6f:3d:
                    30:6e:f2:1c:6a:b3:15:75:3f:aa:65:72:e0:9b:3d:
                    95:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:35:54:01:63:7B:D3:0D:7E:97:CB:E0:9E:5F:C0:CE:45:76:E5:6B
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c953dd05-a5c4-4877-b058-9ccc82f24218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:0b:d3:82:e6:f0:66:60:04:38:bf:5a:e5:f2:07:71:a5:34:
         02:c5:14:67:a7:b9:3f:41:08:4f:55:0c:83:09:c2:48:43:9f:
         59:f2:50:a8:7b:69:6a:77:e9:03:85:c3:97:b4:be:c9:f6:03:
         e3:2c:89:62:be:1d:88:c4:9c:45:b7:a4:e2:e8:0f:f9:91:27:
         7a:ac:99:b4:e5:7e:d7:75:ab:1e:68:70:99:cf:19:b2:7e:b0:
         6b:96:e3:34:e3:05:21:4a:c9:d9:40:82:a6:c7:ab:79:24:e6:
         42:ea:84:8d:8c:3d:89:8d:dc:48:b0:5e:5b:b1:7e:20:94:28:
         1c:09:db:2f:03:09:0d:38:62:8c:24:d7:4a:12:69:71:35:fa:
         ba:2a:65:5d:3b:7b:fe:6a:83:7c:e4:40:08:85:ee:d0:c2:fb:
         78:56:de:20:9b:53:a6:e1:0e:a6:3a:a9:22:2a:96:79:4f:a2:
         33:23:c7:78:8b:9c:08:ba:46:3b:d6:2f:2c:5c:69:fc:8b:1a:
         01:93:a5:e0:db:d1:e3:dc:1b:bb:47:64:fe:7f:9c:2a:b0:57:
         15:da:c3:2f:c1:db:79:b0:ca:36:2b:b0:ac:cc:98:b7:83:52:
         b3:84:83:c5:c6:06:4f:e9:d2:29:36:55:fa:e6:82:33:f4:de:
         3b:69:c8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----