Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce400c28-f82f-4e49-83e8-c6faf7b748f5.roa
File:                     ce400c28-f82f-4e49-83e8-c6faf7b748f5.roa (raw, json)
Hash identifier:          ryMPQ7MCEI4Jpk2ng3TGJmXVdZcT9WufLSmxe5dz7Es=
Subject key identifier:   89:DB:46:94:3D:42:FA:9D:E7:1A:A7:BB:79:FD:D8:78:C4:BF:C0:18
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       69FC6FF303E02EF8D89A02841EA030CE17FAFDEA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce400c28-f82f-4e49-83e8-c6faf7b748f5.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fc:6f:f3:03:e0:2e:f8:d8:9a:02:84:1e:a0:30:ce:17:fa:fd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=f83a2ab02f73b75aac629edc31f8508300d7087d9157db8122bc428d8e04bc69, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:16:06:62:e8:d1:80:05:7a:4b:e4:bd:63:ba:
                    9d:11:3a:9c:86:3a:d8:c9:b7:77:f4:51:69:cb:1e:
                    07:50:07:fc:1f:fb:83:4c:61:11:32:cb:2a:a1:98:
                    5e:8d:e1:27:85:0d:37:c5:21:53:82:fa:5a:68:6d:
                    e0:5e:3f:41:5b:8b:93:6b:3a:2f:a6:b9:c6:6f:18:
                    ba:ad:89:b6:5e:f0:84:c9:a8:f9:9a:45:05:a0:d2:
                    5f:9c:b0:24:a7:93:54:57:18:5b:32:8c:c8:8e:a9:
                    fa:dd:6d:35:b9:71:5f:e4:6f:85:8d:53:0a:41:d0:
                    a6:a1:6d:08:4f:aa:08:a2:de:3e:cf:26:6d:80:5a:
                    0b:20:61:e6:c6:c2:27:6b:67:31:63:e4:16:f1:08:
                    c7:85:92:e4:f3:1f:1c:fd:52:d7:50:30:26:6c:c8:
                    8f:92:3d:6d:c6:8f:16:fa:ec:1d:b0:b8:1a:85:a3:
                    40:bb:b1:1e:bc:b9:2b:6e:02:09:08:f0:4f:6c:28:
                    67:65:82:74:9e:cb:bd:20:b4:b1:ef:e7:3a:7c:ce:
                    8b:e5:29:e9:0f:1f:39:e1:1f:eb:b5:54:97:3f:ef:
                    52:ac:f6:e0:f2:07:b1:fb:84:b3:e0:4f:b5:fa:bf:
                    77:69:0f:22:7c:fe:4c:08:3e:11:c1:bb:22:63:54:
                    b7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DB:46:94:3D:42:FA:9D:E7:1A:A7:BB:79:FD:D8:78:C4:BF:C0:18
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce400c28-f82f-4e49-83e8-c6faf7b748f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:81:1a:fd:1e:d4:ec:52:c5:03:5e:94:f8:3b:c2:6e:b4:74:
         28:bd:45:b7:71:72:e0:3a:b6:3e:c5:f7:7e:e5:d8:d5:6c:c3:
         34:ea:87:3c:87:4a:b0:b6:f5:a8:77:e6:e4:6c:82:97:6d:d0:
         fa:3f:64:f7:15:7c:47:f5:65:b2:06:d1:79:2b:e7:dc:35:05:
         d9:00:cf:c8:30:85:c7:30:26:df:a7:7d:ca:97:cd:80:e2:2e:
         b0:ee:12:49:4d:ac:4b:b1:fc:bb:0c:a6:23:b0:47:4b:ee:6b:
         74:3e:95:ff:32:8a:f0:af:8b:e9:83:f4:6f:c9:65:bc:ef:63:
         9f:6e:96:37:aa:43:04:7a:84:47:fe:7c:21:b5:73:2f:a0:dc:
         fd:13:6c:3e:c8:f2:53:5a:9b:ed:a7:24:f7:9a:f7:85:16:2b:
         4d:87:34:2c:d3:60:31:6d:25:3a:38:93:ef:dc:10:c5:8d:14:
         bb:5d:88:77:86:fe:c0:6b:72:86:ce:f2:0c:f2:91:df:4b:4f:
         af:9a:b5:8a:c8:e6:6a:b0:a7:c2:9e:97:89:d8:97:3c:f2:83:
         a3:99:98:83:22:4e:22:3e:59:b1:09:f4:da:62:3d:bd:b4:8b:
         27:c5:c1:af:86:d7:f9:20:7c:5a:dd:69:b8:98:24:14:1f:20:
         b4:56:fb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----