Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce898255-d271-4c9c-a030-5af13bf3f990.roa
File:                     ce898255-d271-4c9c-a030-5af13bf3f990.roa (raw, json)
Hash identifier:          CgpkKe+zfdapqWRq9n/8WlEmXJR8bJCI8Ji3PKr6dA0=
Subject key identifier:   86:27:67:55:F3:A9:82:EA:0F:D9:54:65:59:10:F3:CC:3A:4E:08:FE
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6F28A00272BB281B1234967D4C47F7FB0BE514F3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce898255-d271-4c9c-a030-5af13bf3f990.roa
Signing time:             Sat 09 Sep 2023 00:00:00 +0000
ROA not before:           Sat 09 Sep 2023 00:00:00 +0000
ROA not after:            Sat 14 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:28:a0:02:72:bb:28:1b:12:34:96:7d:4c:47:f7:fb:0b:e5:14:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep  9 00:00:00 2023 GMT
            Not After : Oct 14 23:59:59 2023 GMT
        Subject: serialNumber=f41b5dc7d1880602cd0543cca6ee5f21f8a64cd8313b784f4a7e7f9a77b7c065, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:58:4f:38:cd:ab:8f:ea:33:17:5f:8d:96:
                    f8:aa:fd:bf:a6:80:9d:0a:ae:fe:ed:87:e1:71:dd:
                    56:07:f2:b6:e5:89:41:c1:a9:00:df:ae:00:22:7a:
                    04:ce:0f:4a:e4:ae:77:3d:1f:c8:7f:f3:0c:c5:76:
                    cb:28:2a:38:b1:a1:26:e6:1a:7c:16:12:36:9a:5c:
                    99:48:65:d3:13:71:01:e4:e9:aa:be:a9:ce:59:45:
                    20:9f:17:9a:bb:ce:d0:95:61:01:46:f7:df:a8:0c:
                    f2:61:4e:ef:60:76:ba:03:2e:76:4f:76:c0:e9:50:
                    54:38:3c:4e:55:51:fe:78:e6:f3:3d:f9:34:95:e7:
                    2b:28:76:24:2e:ae:0d:ef:4b:8a:8e:b4:67:64:69:
                    6a:bb:6c:76:2f:2f:4a:e8:c4:a4:eb:d1:ba:ed:9b:
                    0a:c4:8c:93:87:10:85:38:56:83:78:ba:49:d9:35:
                    eb:71:00:3a:5d:f4:29:ca:3e:fa:bb:a8:ed:5a:da:
                    b8:e5:3d:1c:7c:4e:bf:1d:4d:90:eb:8d:6c:cd:01:
                    d9:5e:74:43:98:37:5b:17:ee:23:64:35:fa:03:9e:
                    69:0e:9b:63:be:4e:9a:83:08:a1:32:2d:d1:40:da:
                    ed:4d:4d:02:cc:09:78:92:dc:da:8b:9b:1f:da:2b:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:27:67:55:F3:A9:82:EA:0F:D9:54:65:59:10:F3:CC:3A:4E:08:FE
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce898255-d271-4c9c-a030-5af13bf3f990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:5b:ed:e7:26:0c:37:91:7e:16:ec:d1:25:1d:91:8a:62:b1:
         34:6e:e8:04:44:5b:02:57:30:af:9a:a3:87:93:d1:81:37:b0:
         87:dd:e8:fd:d0:19:ff:59:6c:fe:0d:69:c3:00:71:9f:07:26:
         9a:71:c3:0e:5f:f9:83:b8:3c:ce:5f:cc:bf:1f:fc:e5:ba:8b:
         b4:e3:89:07:5b:1e:92:81:b1:04:9c:1b:c7:19:c9:c1:e2:50:
         16:0a:37:88:16:31:4d:69:e4:c9:0a:af:49:0d:22:01:09:b3:
         4d:6c:c9:e2:d1:ec:a9:e5:5b:94:84:78:50:93:39:26:8b:9f:
         c5:53:66:14:b7:f5:51:4a:e1:7d:4b:28:65:d3:c0:3b:d1:2f:
         9c:07:1b:db:b9:61:de:81:b0:23:c2:a3:b4:87:b0:3c:e4:b1:
         d9:bd:7e:67:85:f7:a1:7a:b4:d0:3d:b8:6d:ec:8e:fc:e0:f0:
         47:82:d2:1a:b4:03:74:9d:f0:fb:b0:d5:87:25:ed:7c:ef:67:
         04:89:e7:2f:62:3c:8f:c0:fd:d8:4b:20:53:72:c2:47:6f:be:
         77:bf:b9:d6:a0:0c:8c:7b:b0:8a:c4:59:d7:5c:59:06:31:98:
         02:5b:bb:da:5f:f4:14:35:96:d3:1d:e8:a3:c5:eb:73:83:20:
         b5:d4:89:87
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbyigAnK7KBsSNJZ9TEf3+wvlFPMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTA5MDAwMDAwWhcNMjMxMDE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNDFiNWRjN2QxODgwNjAyY2QwNTQzY2NhNmVlNWYyMWY4
YTY0Y2Q4MzEzYjc4NGY0YTdlN2Y5YTc3YjdjMDY1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGb1hPOM2rj+ozF1+Nlviq/b+mgJ0Krv7th+Fx3VYH8rbl
iUHBqQDfrgAiegTOD0rkrnc9H8h/8wzFdssoKjixoSbmGnwWEjaaXJlIZdMTcQHk
6aq+qc5ZRSCfF5q7ztCVYQFG99+oDPJhTu9gdroDLnZPdsDpUFQ4PE5VUf545vM9
+TSV5ysodiQurg3vS4qOtGdkaWq7bHYvL0roxKTr0brtmwrEjJOHEIU4VoN4uknZ
NetxADpd9CnKPvq7qO1a2rjlPRx8Tr8dTZDrjWzNAdledEOYN1sX7iNkNfoDnmkO
m2O+TpqDCKEyLdFA2u1NTQLMCXiS3NqLmx/aK+qhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhidnVfOpguoP2VRlWRDzzDpOCP4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NlODk4MjU1LWQyNzEtNGM5Yy1hMDMwLTVhZjEzYmYzZjk5MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAI1b7ecmDDeRfhbs0SUdkYpisTRu
6AREWwJXMK+ao4eT0YE3sIfd6P3QGf9ZbP4NacMAcZ8HJppxww5f+YO4PM5fzL8f
/OW6i7TjiQdbHpKBsQScG8cZycHiUBYKN4gWMU1p5MkKr0kNIgEJs01syeLR7Knl
W5SEeFCTOSaLn8VTZhS39VFK4X1LKGXTwDvRL5wHG9u5Yd6BsCPCo7SHsDzksdm9
fmeF96F6tNA9uG3sjvzg8EeC0hq0A3Sd8Puw1Ycl7XzvZwSJ5y9iPI/A/dhLIFNy
wkdvvne/udagDIx7sIrEWddcWQYxmAJbu9pf9BQ1ltMd6KPF63ODILXUiYc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:21 2024 by rpki-client on console-ams.rpki-client.org