Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d2ae5479-d4b6-4967-8771-abf09eee6578.roa
File:                     d2ae5479-d4b6-4967-8771-abf09eee6578.roa (raw, json)
Hash identifier:          r1Rm99g1pL/Av1us7KtU0l3uFK0KO8QBN52Uj3zCIZ4=
Subject key identifier:   BF:70:7D:9C:FB:B6:0C:E7:5D:B3:8E:12:7A:6F:D3:97:1C:8E:95:D7
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       08423B050EABBA777E5F4ABA275BC1EEA34218FF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d2ae5479-d4b6-4967-8771-abf09eee6578.roa
Signing time:             Sun 14 Jan 2024 00:00:00 +0000
ROA not before:           Sun 14 Jan 2024 00:00:00 +0000
ROA not after:            Sun 18 Feb 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:42:3b:05:0e:ab:ba:77:7e:5f:4a:ba:27:5b:c1:ee:a3:42:18:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan 14 00:00:00 2024 GMT
            Not After : Feb 18 23:59:59 2024 GMT
        Subject: serialNumber=6949e6b3c83da4dc10b9597a2d4d47fb1fb1e922973743ae140c273c493a35bf, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b6:b1:33:8b:b2:4f:ac:da:a5:22:05:74:4a:
                    b8:1e:72:d9:14:0b:66:48:19:f8:77:cc:f7:38:26:
                    5b:c0:50:f2:6d:30:5f:b1:47:4a:2a:18:e6:13:e9:
                    dd:c2:06:e1:5f:94:a1:c8:b2:e2:39:db:4d:24:a7:
                    dd:03:0c:df:2e:d7:24:9f:0e:d1:89:08:2f:57:50:
                    d9:a9:15:ee:06:c5:f8:32:e3:8c:72:d2:0c:01:05:
                    5e:95:17:83:22:49:71:d2:c1:2e:49:13:73:9f:a5:
                    e2:0b:3e:c9:37:34:54:d9:f2:c5:83:e9:03:64:6f:
                    17:00:7e:22:0a:7d:f7:63:cc:ff:e5:ca:d9:79:b7:
                    9c:56:30:89:6b:e8:ea:9b:03:c3:92:8b:c5:9b:b0:
                    f3:8b:d7:78:65:da:54:97:f6:f0:42:20:49:1c:63:
                    62:23:f5:18:c9:15:dc:a5:24:48:34:6d:85:cc:a5:
                    7f:de:f9:f8:de:4e:84:e0:fd:65:44:86:94:ec:fd:
                    c0:1a:0e:81:80:c5:38:7e:a1:1c:46:ba:b1:7c:42:
                    d7:f5:2d:3d:41:bb:08:a8:5a:ca:8a:87:68:39:86:
                    9d:c8:76:dc:04:1a:60:5e:a2:29:34:1a:2f:b4:ec:
                    fa:e4:c8:e2:44:28:4f:e9:b4:72:f4:26:87:1c:2b:
                    f0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:70:7D:9C:FB:B6:0C:E7:5D:B3:8E:12:7A:6F:D3:97:1C:8E:95:D7
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d2ae5479-d4b6-4967-8771-abf09eee6578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:b8:74:bb:29:c0:6d:0c:44:66:99:60:0d:1d:42:5a:45:1f:
         83:d3:96:65:ff:69:16:45:a0:78:b1:c7:1e:97:58:8a:e2:bf:
         ec:89:7a:58:e2:25:4e:68:04:24:69:fe:3b:d5:c6:6a:cb:6c:
         3b:72:d5:f2:92:d8:e9:5f:f3:76:a8:5c:92:bd:ef:57:d0:b6:
         1e:9c:2d:fc:5a:0f:8c:47:4e:48:41:ff:5b:0c:4c:07:01:07:
         a3:a5:0c:c5:9f:cf:0d:9a:a7:3c:22:05:1b:3f:62:fd:7c:3f:
         00:72:db:3e:34:bd:8e:ef:d9:e8:61:1c:f4:3a:e6:da:7d:aa:
         a0:9a:45:52:a5:56:c2:26:26:86:ab:81:f6:9f:93:03:f9:59:
         04:d4:43:5a:92:12:ea:c6:6f:04:e8:e3:af:5c:56:a7:70:6c:
         6f:f5:0f:5b:3d:80:47:4b:d0:cd:e5:20:47:98:66:12:93:60:
         c9:6e:b3:f2:4d:e4:0b:f8:17:63:fe:d2:3d:bf:8a:58:33:39:
         ff:d6:1c:a0:83:db:01:74:d4:a9:6d:60:39:f0:83:33:1f:c8:
         bc:72:ea:b2:04:72:17:58:1d:82:49:6f:8e:c6:30:07:75:bc:
         07:77:9a:f2:ca:71:4d:2f:af:17:58:ac:6a:c4:26:dd:44:43:
         98:3b:5b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----