Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d1e9e3ef-7335-4039-83e3-473cfcaf06c5.roa
File:                     d1e9e3ef-7335-4039-83e3-473cfcaf06c5.roa (raw, json)
Hash identifier:          HfEFZC8q+YOl7Pt1As9VJT4/CAuK4aC55PEY8r/e+5k=
Subject key identifier:   A2:BB:73:D4:F8:43:69:D5:5A:DE:7E:E9:A1:6A:65:A4:E6:66:EB:E2
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       05BDAEB73EBC323AFF82A945C185C8E190F4B492
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d1e9e3ef-7335-4039-83e3-473cfcaf06c5.roa
Signing time:             Sun 24 Mar 2024 00:00:00 +0000
ROA not before:           Sun 24 Mar 2024 00:00:00 +0000
ROA not after:            Sun 28 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bd:ae:b7:3e:bc:32:3a:ff:82:a9:45:c1:85:c8:e1:90:f4:b4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 24 00:00:00 2024 GMT
            Not After : Apr 28 23:59:59 2024 GMT
        Subject: serialNumber=0fd6b4a9e1adcaf1432fdf39e499f334474722125bbc606753735b534827c51f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:89:c6:06:8b:37:7b:00:68:f5:35:eb:5f:
                    26:11:18:d2:ad:ee:54:76:0e:40:1c:a0:0b:9c:6c:
                    82:a3:06:2b:0f:78:d9:df:0e:8d:25:05:73:46:9a:
                    64:1a:52:90:53:46:1c:6a:75:75:75:9c:31:fa:29:
                    77:8c:64:4e:83:3b:e4:c0:c2:ab:73:4a:ff:db:1d:
                    a9:98:88:d3:94:9b:9b:d4:2d:62:76:e8:bf:ea:83:
                    61:7a:9d:51:b8:b1:14:30:7d:6e:d4:44:68:4a:1d:
                    73:d7:14:0c:cb:8d:27:14:81:b2:89:54:b8:80:a5:
                    bc:61:25:09:74:ac:91:e4:a0:a9:c6:12:97:b1:67:
                    f0:e4:0a:e5:ed:ce:e3:73:34:86:7d:f8:11:34:b1:
                    da:04:ac:4b:4f:b2:36:93:b9:41:bc:cc:d0:e9:4c:
                    db:9c:d7:1e:9a:10:fd:66:33:7b:cf:d0:7b:31:e1:
                    24:5c:af:86:0f:46:7c:f5:7a:d8:c2:4f:81:12:07:
                    7f:23:f3:cc:ef:4e:8c:11:4b:2f:e2:96:b9:a9:4e:
                    b2:4c:dc:e8:78:c6:28:c2:ab:d4:53:9c:49:32:0c:
                    42:c3:ab:a8:a9:47:3f:c4:f7:e8:62:70:d3:b2:c2:
                    d5:20:70:a1:52:77:35:9f:25:0e:e0:4a:e4:54:20:
                    c8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BB:73:D4:F8:43:69:D5:5A:DE:7E:E9:A1:6A:65:A4:E6:66:EB:E2
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d1e9e3ef-7335-4039-83e3-473cfcaf06c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:d3:19:1d:b5:68:5f:a2:c5:67:2c:55:56:2c:cb:7e:d4:4e:
         dd:01:84:f8:d8:1c:f9:45:b7:9a:8c:2d:11:af:60:27:0a:aa:
         8e:b6:62:c7:9d:39:4d:63:f7:97:5a:4a:48:63:20:94:bb:7f:
         7c:9d:08:1f:88:a5:d3:8b:f3:47:49:ec:8a:d5:f5:4a:e1:dc:
         77:34:de:bb:2c:15:c5:3f:dd:f8:7d:86:e9:7a:eb:bf:e4:60:
         74:12:75:78:ab:0c:0d:b7:2d:00:0f:61:b7:e8:90:15:1c:30:
         80:dc:16:60:2c:da:6c:e5:99:4b:3b:12:ca:0b:04:b6:19:e0:
         26:ae:7c:70:16:62:e5:5e:cb:cf:aa:51:47:b4:e6:4b:5b:d0:
         36:39:19:bb:3e:ef:1b:a4:88:f0:a3:e3:50:09:59:5d:47:c5:
         56:8c:f5:67:ab:ea:b7:f1:17:55:92:17:db:d4:d2:c5:7e:eb:
         00:45:23:10:d9:75:42:7f:2a:92:1a:8d:55:3f:76:45:3d:1d:
         ad:b6:74:06:18:2a:53:3d:9d:28:f1:89:e1:7f:31:a1:8b:bb:
         62:d0:80:23:ce:d3:0b:58:f0:df:c4:9a:25:be:60:03:ed:e7:
         22:f0:68:6a:25:04:5a:c7:23:0e:ad:a5:dc:a9:76:85:c5:c3:
         4d:7c:88:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----