Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8b36ed0-ffdb-480f-8337-f182d2c3d9bb.roa
File:                     e8b36ed0-ffdb-480f-8337-f182d2c3d9bb.roa (raw, json)
Hash identifier:          vYfcLkR7iGdpLkZR/XNalOYeLIL4whhImkZ5PCp4cZQ=
Subject key identifier:   84:21:CA:6A:44:1E:94:BB:6D:1B:F7:63:91:58:F5:C8:7D:83:30:94
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       04EA111239FAF1BD6CE587AE7D05820AAB48DB7C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8b36ed0-ffdb-480f-8337-f182d2c3d9bb.roa
Signing time:             Mon 27 Nov 2023 00:00:00 +0000
ROA not before:           Mon 27 Nov 2023 00:00:00 +0000
ROA not after:            Mon 01 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ea:11:12:39:fa:f1:bd:6c:e5:87:ae:7d:05:82:0a:ab:48:db:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 27 00:00:00 2023 GMT
            Not After : Jan  1 23:59:59 2024 GMT
        Subject: serialNumber=8bd15a312f3512eae96f7bb6ed19ea2c5e4e69f0464c9e486a9cb7bbee1188ac, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:bd:3d:f3:48:f6:b0:dd:6b:01:17:f5:99:
                    d4:99:58:1e:1c:07:3c:57:4d:5c:fd:08:a4:7d:4a:
                    78:f6:ec:7f:1d:20:ca:ba:7f:15:68:2c:3b:cf:75:
                    61:d5:17:2d:eb:4f:60:94:40:48:82:9b:e7:69:ad:
                    23:a4:fc:88:8c:8f:8a:8b:c7:1b:6a:b7:ab:d4:bd:
                    93:92:5d:2d:3f:de:d4:ab:2c:ce:74:d6:db:98:27:
                    8e:d3:cc:ac:e3:ec:a2:d1:05:2f:86:5e:0a:d9:7f:
                    bf:fe:b6:de:3c:fd:a7:75:ce:fc:63:1d:e9:80:f3:
                    6f:35:ac:6e:8b:2c:e0:53:ee:c6:95:a6:d7:2c:2f:
                    18:c2:99:10:67:86:c2:04:81:bc:c0:fb:00:a2:4f:
                    a8:ea:cd:69:2d:49:dd:d4:cf:28:13:65:df:d6:a1:
                    38:7c:c5:1e:9c:bd:74:35:56:87:62:d7:35:50:9a:
                    06:e0:d7:b4:f4:72:45:ed:0f:73:57:4d:f5:80:39:
                    b7:c3:27:30:6c:bd:56:ec:7c:66:8d:ba:8b:77:01:
                    90:ba:17:ed:09:d3:ee:fe:aa:f6:cf:9e:5f:20:37:
                    fc:02:37:7d:7f:38:74:7c:03:5a:57:06:6c:ec:23:
                    35:83:74:cf:74:1b:ea:6c:ed:dc:0e:11:88:b1:63:
                    f4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:21:CA:6A:44:1E:94:BB:6D:1B:F7:63:91:58:F5:C8:7D:83:30:94
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8b36ed0-ffdb-480f-8337-f182d2c3d9bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:77:27:dc:5e:38:fe:e5:2e:fd:1c:98:03:12:65:9c:c2:27:
         9a:fb:22:28:60:5c:7e:64:6a:c4:8e:96:49:19:b3:7c:48:9c:
         a6:9b:ae:b1:95:a6:05:4c:78:d6:2b:67:f7:b8:78:c2:19:9e:
         fd:22:9f:95:6d:bf:07:1e:7d:2a:7d:2e:1a:6e:b2:c7:17:0c:
         79:2a:24:00:ad:5b:35:77:32:9b:02:34:ad:aa:58:1d:70:d3:
         3b:6e:43:78:d9:fb:fe:7b:48:44:62:58:90:a6:1c:96:e3:b7:
         c4:69:a9:99:67:1f:06:6c:52:7b:73:84:22:7b:6f:91:02:ea:
         d7:94:a9:15:e7:af:15:fc:d2:3c:9b:72:93:ef:18:a1:d9:99:
         09:2c:a8:3a:ed:80:45:e5:d1:82:39:1e:52:d9:fd:e4:48:76:
         88:46:4e:03:91:35:b6:3e:5f:da:2c:80:d8:f6:d9:f8:86:91:
         33:bf:6b:b1:e0:4b:e3:58:23:63:51:ca:b0:9a:06:3b:9e:b2:
         7e:07:b2:9d:3e:42:8b:46:0d:d3:90:55:64:45:6e:b3:ca:f6:
         bf:5d:25:17:9f:99:fc:60:a0:ea:bf:52:e9:9e:a2:be:e5:e7:
         91:ed:5d:ff:ab:22:00:7b:1d:44:d0:87:70:98:ff:1c:08:b6:
         79:13:2a:b9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBOoREjn68b1s5YeufQWCCqtI23wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTI3MDAwMDAwWhcNMjQwMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4YmQxNWEzMTJmMzUxMmVhZTk2ZjdiYjZlZDE5ZWEyYzVl
NGU2OWYwNDY0YzllNDg2YTljYjdiYmVlMTE4OGFjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/Q70980j2sN1rARf1mdSZWB4cBzxXTVz9CKR9Snj27H8d
IMq6fxVoLDvPdWHVFy3rT2CUQEiCm+dprSOk/IiMj4qLxxtqt6vUvZOSXS0/3tSr
LM501tuYJ47TzKzj7KLRBS+GXgrZf7/+tt48/ad1zvxjHemA8281rG6LLOBT7saV
ptcsLxjCmRBnhsIEgbzA+wCiT6jqzWktSd3UzygTZd/WoTh8xR6cvXQ1Vodi1zVQ
mgbg17T0ckXtD3NXTfWAObfDJzBsvVbsfGaNuot3AZC6F+0J0+7+qvbPnl8gN/wC
N31/OHR8A1pXBmzsIzWDdM90G+ps7dwOEYixY/RPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhCHKakQelLttG/djkVj1yH2DMJQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2U4YjM2ZWQwLWZmZGItNDgwZi04MzM3LWYxODJkMmMzZDliYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAH13J9xeOP7lLv0cmAMSZZzCJ5r7
IihgXH5kasSOlkkZs3xInKabrrGVpgVMeNYrZ/e4eMIZnv0in5VtvwcefSp9Lhpu
sscXDHkqJACtWzV3MpsCNK2qWB1w0ztuQ3jZ+/57SERiWJCmHJbjt8RpqZlnHwZs
UntzhCJ7b5EC6teUqRXnrxX80jybcpPvGKHZmQksqDrtgEXl0YI5HlLZ/eRIdohG
TgORNbY+X9osgNj22fiGkTO/a7HgS+NYI2NRyrCaBjuesn4Hsp0+QotGDdOQVWRF
brPK9r9dJRefmfxgoOq/Uumeor7l55HtXf+rIgB7HUTQh3CY/xwItnkTKrk=
-----END CERTIFICATE-----