Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d466e5e5-0d4c-49f4-afe7-f62039e4a14f.roa
File:                     d466e5e5-0d4c-49f4-afe7-f62039e4a14f.roa (raw, json)
Hash identifier:          NNJ22cu7X6IWmPivkiNmT8fZQOVytSOJT43yRprYXz0=
Subject key identifier:   A5:18:5D:22:54:CE:20:74:9C:E8:A7:C7:A7:0C:43:16:EC:69:8A:C9
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1567D6EC0B317FC80A8CC52F3F2FB9CEC0B4F1BB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d466e5e5-0d4c-49f4-afe7-f62039e4a14f.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:67:d6:ec:0b:31:7f:c8:0a:8c:c5:2f:3f:2f:b9:ce:c0:b4:f1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=1d2904d6fba2c8b3703fb926d2b5821f4fe9cd8d7537d5a4512e6e8bf1f06beb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:19:7c:fc:f0:64:ea:34:96:eb:ee:51:21:
                    93:a8:3f:02:7f:61:70:9f:d7:14:21:29:86:09:38:
                    e3:96:51:c0:16:21:a1:81:be:11:1b:a0:d9:35:9d:
                    68:5e:06:c6:19:92:cc:e5:3e:7c:8d:18:a8:e6:52:
                    9e:83:15:a0:8c:69:79:f9:97:b1:82:24:12:34:e5:
                    d8:de:fd:40:3a:e7:ab:34:f9:0e:47:80:ea:ff:86:
                    df:5b:2c:44:08:35:2b:46:41:c8:6c:65:fa:1e:bc:
                    44:8e:ef:44:fb:d8:0f:10:b1:12:d5:27:04:8a:55:
                    41:a0:9e:60:8e:86:92:2e:0d:c3:7b:f3:be:c1:ef:
                    89:fa:70:81:35:bd:95:bd:d9:ae:d6:4a:2e:75:ef:
                    46:84:21:e3:fc:5e:ae:2a:1a:af:6e:5b:ff:7c:4b:
                    60:08:68:88:ba:3a:8a:48:ae:0a:20:1d:8d:ba:cf:
                    22:8f:cb:5b:67:1f:76:58:86:db:28:e1:09:a7:a2:
                    67:1c:6c:af:c5:f9:af:71:78:ac:04:4b:0f:dc:e1:
                    53:df:67:4b:9d:51:83:26:3a:9e:0e:6b:9c:b4:6b:
                    61:3a:63:3c:83:e7:74:db:21:04:f0:96:e5:22:fa:
                    7e:e1:d8:7e:8b:c7:b8:1b:c3:ea:57:47:f4:b9:ae:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:18:5D:22:54:CE:20:74:9C:E8:A7:C7:A7:0C:43:16:EC:69:8A:C9
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d466e5e5-0d4c-49f4-afe7-f62039e4a14f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:06:ba:d4:8e:51:78:35:05:49:c3:06:89:e1:eb:60:95:
         2d:97:1a:1e:af:d8:02:f9:2c:d6:7c:1d:48:41:1d:da:3d:c2:
         9c:17:12:fe:a1:cb:65:11:e9:fa:61:5b:f4:0b:0d:c1:5c:24:
         24:7e:7d:b4:ad:7b:30:68:96:6e:d0:9d:f2:13:11:da:c6:2e:
         0e:bd:3b:80:4c:dd:01:54:e7:03:1a:b1:d6:a3:8e:53:f4:81:
         6f:41:d8:db:08:ae:09:e5:73:ae:f9:e3:b5:f4:0e:70:ce:5d:
         36:21:b8:7b:53:49:d9:49:1e:fb:41:6c:f2:ef:08:4d:52:5c:
         a6:1d:af:7a:ac:a7:d8:2d:d2:69:92:f2:3a:44:d7:52:2c:14:
         39:35:f9:0f:98:49:64:09:72:56:f1:1d:ac:30:a2:8d:bc:b3:
         4e:8f:25:b2:6f:dc:3a:42:b4:c7:0f:2f:de:a1:4c:b4:8b:91:
         f2:86:0c:7c:3c:c5:7c:6a:57:60:4a:34:cb:cb:4c:f7:f8:26:
         9c:46:ba:a1:ea:02:2e:26:7d:d4:69:dc:92:9c:11:fb:f5:8f:
         42:60:3d:af:31:c5:d7:13:c8:a1:9e:79:93:33:08:0f:e0:43:
         52:d2:65:c8:bc:82:17:bd:2c:a2:2d:d1:ea:a7:cc:8b:4d:19:
         fc:54:ac:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----