Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d0f25057-27ad-4d3c-babd-4c647a11aba1.roa
File:                     d0f25057-27ad-4d3c-babd-4c647a11aba1.roa (raw, json)
Hash identifier:          XikeExDGZZ0e3Tq6CefB5HHnTeypNTfh++zQztA5Abw=
Subject key identifier:   77:01:D4:9B:71:15:D0:FD:6E:9B:22:75:9A:A5:3E:B4:89:88:40:8C
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6FCA9DA659A1FE8FD7132864F1864273D9D92797
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d0f25057-27ad-4d3c-babd-4c647a11aba1.roa
Signing time:             Tue 27 Jun 2023 00:00:00 +0000
ROA not before:           Tue 27 Jun 2023 00:00:00 +0000
ROA not after:            Tue 01 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ca:9d:a6:59:a1:fe:8f:d7:13:28:64:f1:86:42:73:d9:d9:27:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 27 00:00:00 2023 GMT
            Not After : Aug  1 23:59:59 2023 GMT
        Subject: serialNumber=a37a0c42168a5d38475b6b6cf719a97adbd68a47f6ae7ca2f2f3ec73f94a0edb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ab:7f:ef:a1:89:17:1f:40:91:5e:84:e3:0a:
                    74:45:70:10:4b:7c:bb:f8:97:9c:26:c6:18:12:fe:
                    f5:9a:59:37:c5:cd:ed:45:09:48:06:e4:70:a5:8b:
                    8a:08:63:1f:79:8a:b2:65:0b:c6:71:62:5d:9b:c3:
                    34:a9:ba:b5:f1:e1:28:1c:df:d6:f7:4e:3b:eb:6f:
                    3d:f8:83:19:79:31:18:84:f5:de:04:e3:42:97:94:
                    08:c0:9f:a0:1a:7d:89:69:5b:8d:7d:4e:7a:5e:da:
                    7b:78:dc:a7:87:c8:37:e6:01:21:78:0d:a6:79:3a:
                    32:44:aa:8c:48:db:49:7b:31:fd:ec:2c:bd:65:c4:
                    50:59:bf:65:7e:8a:0c:fe:cf:0f:db:80:0b:4d:6d:
                    4a:03:84:e7:d7:5d:bb:2b:9e:98:93:f7:5b:20:9a:
                    c3:f5:8e:33:18:b0:23:63:3c:dc:39:bf:75:c2:40:
                    d8:3c:29:39:26:17:be:9e:9b:70:f6:1e:87:80:d7:
                    43:3a:54:37:74:24:16:bf:46:a8:1b:c2:a7:ed:47:
                    e3:e7:c1:8b:56:ff:b1:5f:c9:29:24:56:51:a4:e4:
                    bf:e3:70:35:c3:f3:c6:f8:d1:a9:6a:86:e0:eb:d0:
                    31:94:d9:ef:40:fd:92:06:70:2d:5c:42:89:5b:94:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:01:D4:9B:71:15:D0:FD:6E:9B:22:75:9A:A5:3E:B4:89:88:40:8C
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d0f25057-27ad-4d3c-babd-4c647a11aba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:86:d0:a5:1b:16:cf:1e:36:c7:b5:6e:62:b8:4c:2e:11:f7:
         05:74:7e:15:a1:8a:a3:fc:1f:82:c0:63:fa:be:aa:22:c7:0f:
         cd:56:9a:1d:7d:db:42:82:d8:b8:23:b6:86:c2:f1:10:62:9a:
         8c:ef:02:ec:44:10:75:a1:01:dc:cc:f5:8e:f9:3f:0f:3d:68:
         be:86:f1:12:54:6a:c6:a6:4e:dd:7d:99:5d:f5:9a:38:83:3b:
         6e:95:81:3b:07:59:6d:e2:ad:70:64:56:dc:96:de:ad:5e:68:
         d6:06:cb:47:e2:78:70:70:e4:2c:b2:aa:f0:79:47:be:41:17:
         46:49:83:47:42:4d:4a:4c:90:e5:dd:e5:93:d9:a9:09:d4:8b:
         1d:10:79:35:40:05:ba:7c:67:f9:fb:91:dc:df:95:d6:96:74:
         c8:43:c8:07:ef:32:63:12:f6:60:86:53:86:4e:a3:4a:c2:4c:
         5b:a2:0b:19:1f:5d:e8:21:34:0f:7a:9f:03:71:4f:e8:7d:ff:
         77:25:31:87:98:73:0e:36:c8:d5:be:69:22:39:84:dc:7d:0b:
         31:09:1e:99:ca:bb:3f:3c:61:de:07:16:47:76:5f:60:b5:5b:
         be:0b:02:c4:7f:a8:1d:52:2b:79:cd:6a:25:11:0a:c7:e7:64:
         15:22:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----