Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf67722f-bde4-432d-94ac-9110b0d8ad8f.roa
File:                     cf67722f-bde4-432d-94ac-9110b0d8ad8f.roa (raw, json)
Hash identifier:          yslPayaDFB1k1EfCBgYwsOYTV5Q2yKtrwHaRx0jpJp4=
Subject key identifier:   78:2E:C4:D4:D8:B9:B7:58:98:71:90:DC:E2:2F:7F:43:FC:FE:F5:93
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       462F0C3EBE7E2431AE27AD5676233517B4E2A945
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf67722f-bde4-432d-94ac-9110b0d8ad8f.roa
Signing time:             Thu 23 Nov 2023 00:00:00 +0000
ROA not before:           Thu 23 Nov 2023 00:00:00 +0000
ROA not after:            Thu 28 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2f:0c:3e:be:7e:24:31:ae:27:ad:56:76:23:35:17:b4:e2:a9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 23 00:00:00 2023 GMT
            Not After : Dec 28 23:59:59 2023 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ac:ca:f6:47:b8:a7:c4:02:9b:c5:bf:36:9e:
                    d3:dd:e2:e0:35:1a:09:d5:75:9c:ff:c4:2d:41:d8:
                    61:80:27:3e:b2:37:b6:c6:83:72:79:7b:14:c0:5c:
                    73:2b:59:74:1f:2b:34:ee:13:47:f0:12:ea:d9:49:
                    66:b1:15:9b:0c:8d:3f:da:8a:25:aa:bd:ad:37:1e:
                    90:fb:d9:4c:b6:00:b0:37:8a:d3:7e:56:c9:47:95:
                    64:16:99:f2:ee:9d:c0:3d:53:38:4e:14:35:cf:e3:
                    8a:aa:a4:ed:cf:e3:4e:09:39:5a:d6:56:0d:5c:f1:
                    f3:e9:b6:b8:b9:45:fd:2d:08:fb:3f:35:d5:90:30:
                    ec:f4:3b:0f:d3:e2:c0:e4:f6:ac:f7:68:84:b7:6e:
                    48:7d:84:bf:c6:ff:78:46:1a:9b:35:4a:82:e0:bc:
                    1f:e0:df:f6:1b:c7:9a:10:c6:0a:1c:3b:7c:e6:0e:
                    5e:61:7a:d3:39:c9:ab:80:b8:1a:4a:ff:9e:87:1b:
                    b7:7e:df:6c:2e:7c:5e:66:15:db:77:93:ec:1c:5e:
                    ea:27:df:4c:96:ac:3a:50:98:c4:ab:a5:18:41:e3:
                    ac:88:59:cb:76:6a:d7:7d:0e:16:49:6c:9b:ba:fa:
                    4c:83:84:f2:b7:55:9b:a5:e3:3a:09:82:32:7d:84:
                    78:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2E:C4:D4:D8:B9:B7:58:98:71:90:DC:E2:2F:7F:43:FC:FE:F5:93
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf67722f-bde4-432d-94ac-9110b0d8ad8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:16:32:b9:f8:5e:2a:7b:e1:de:e8:b8:c1:bb:a5:6d:16:8b:
         b0:3c:0a:33:0c:11:f5:46:5c:61:ef:7f:1f:3d:b0:36:cb:49:
         c5:fb:ae:8a:e3:71:3b:43:11:8e:80:4f:17:6a:c0:69:40:ae:
         f4:28:87:37:83:c2:ad:3b:8e:59:74:81:92:84:37:bb:3b:b6:
         3e:cd:dd:a1:d6:3b:c5:b6:ba:7f:55:2c:2a:4f:e2:5a:c5:44:
         b4:2a:7b:c1:aa:a5:66:87:e0:10:7d:5e:29:47:42:03:7d:38:
         49:4c:9a:90:dd:07:ee:96:6c:25:55:41:04:2f:bf:08:a3:26:
         49:8b:2b:0d:c7:2a:2e:e4:ba:4c:fe:50:ba:a2:a5:a4:0e:bc:
         de:87:c9:23:37:43:0c:8e:de:08:d3:e8:19:33:f6:70:3d:bb:
         e1:25:fd:9c:50:8a:79:21:7b:1e:1f:7a:10:b2:0f:4e:89:4f:
         fb:49:10:80:b9:a5:62:fb:a7:7f:ec:2d:c6:9f:d3:50:63:f1:
         5a:d5:69:b4:dd:59:9d:13:73:08:71:b3:06:34:4d:84:ab:a3:
         69:d9:a0:51:6e:28:e2:0f:dd:b9:0e:6a:12:15:c5:e5:13:a6:
         bf:49:cc:1b:3f:f7:4b:09:14:b1:71:cc:cd:50:f2:69:8c:79:
         b4:b1:61:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:50:35 2025 by rpki-client