Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb4155f4-14ff-4075-8e8b-7214b7132616.roa
File:                     eb4155f4-14ff-4075-8e8b-7214b7132616.roa (raw, json)
Hash identifier:          wTC8s7+xzW0DRbc/HTLhup+yfXpn91PBTodrseZ2G2c=
Subject key identifier:   5B:1F:A2:8B:A7:4C:DC:8E:98:60:54:19:4E:73:D7:0F:98:88:1E:25
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7CAD109D91217B4599C22E3B11246D2A1FD65CA5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb4155f4-14ff-4075-8e8b-7214b7132616.roa
Signing time:             Tue 24 Oct 2023 00:00:00 +0000
ROA not before:           Tue 24 Oct 2023 00:00:00 +0000
ROA not after:            Tue 28 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ad:10:9d:91:21:7b:45:99:c2:2e:3b:11:24:6d:2a:1f:d6:5c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 24 00:00:00 2023 GMT
            Not After : Nov 28 23:59:59 2023 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:f9:e9:85:b4:5a:d4:6e:ca:ac:75:c1:6c:
                    10:bc:4c:91:aa:e8:10:26:91:f1:40:b5:da:b1:fa:
                    42:82:83:cb:fb:6a:2f:0e:76:54:d1:1c:51:c0:26:
                    cf:53:af:04:b7:f6:62:d0:35:15:fe:7c:71:05:f2:
                    9e:59:04:e8:e8:cc:9f:b5:59:9b:a6:84:32:e0:20:
                    eb:7c:63:97:f4:55:17:53:b2:53:db:3f:74:4a:16:
                    6c:46:cd:e6:fc:2c:dc:c2:33:ad:7e:07:00:44:15:
                    f4:60:05:f4:95:61:7d:11:0d:f4:14:65:7e:db:56:
                    59:56:bc:ff:99:74:69:05:0a:8f:14:5f:91:61:35:
                    cf:db:49:5d:c3:d0:2b:6b:42:95:43:f5:a9:e6:11:
                    75:f0:e8:5a:1b:7f:58:72:29:e8:c3:1f:fc:92:a4:
                    f6:0a:c0:d8:cd:4b:02:b4:91:86:3c:6a:be:4b:a1:
                    14:55:62:bb:36:99:98:e7:42:f3:14:56:ad:c9:bf:
                    bc:d9:32:cd:27:a8:fa:b0:48:82:26:9a:a4:b1:45:
                    67:d2:e7:1c:a1:e8:25:3a:ee:56:70:d5:f1:59:8c:
                    d6:8c:b5:28:39:fc:dd:da:9b:11:70:ec:92:7e:c6:
                    ec:a8:15:f0:0f:4e:37:63:86:84:11:55:04:53:f3:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1F:A2:8B:A7:4C:DC:8E:98:60:54:19:4E:73:D7:0F:98:88:1E:25
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb4155f4-14ff-4075-8e8b-7214b7132616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:40:c6:3f:87:9a:eb:3a:31:4e:8d:fd:05:01:b9:8d:26:a9:
         97:87:59:7f:7d:87:e1:6f:d8:41:34:9e:eb:37:49:4e:61:38:
         8b:16:46:7d:6d:66:44:f4:34:f0:c7:7a:8e:4e:5b:3f:9a:6e:
         a4:dd:e6:2c:32:46:5f:be:9f:1c:02:2b:22:c2:98:40:97:56:
         29:84:e2:85:fe:de:71:d6:b8:f3:bf:50:93:27:0d:c2:1f:64:
         4f:cc:39:49:69:39:56:b3:ef:e2:10:bc:af:e9:09:d4:a3:1c:
         b6:09:ee:2c:e5:04:b0:6f:81:1d:01:67:cf:55:16:68:80:18:
         5a:bd:4f:bf:8e:82:af:4e:ad:c5:31:29:f4:a5:60:27:6c:af:
         e6:b0:3b:83:cd:a4:a1:29:06:38:c6:33:41:dc:3d:7b:d2:97:
         d5:c9:55:f5:74:37:f5:b3:d2:a9:c2:35:14:fa:ad:0b:3e:17:
         54:3e:83:53:7e:12:09:83:db:2e:1a:8b:fd:fe:42:e0:cc:c6:
         c8:d4:9a:4a:76:01:d1:d6:aa:9d:59:35:5d:83:dc:7f:b7:99:
         76:e4:c8:6d:a8:54:39:dd:3e:6a:a5:51:ea:74:09:a3:8b:94:
         0e:ac:ae:a3:c4:6b:ab:b6:3d:f8:d0:62:73:bf:e6:c9:30:d1:
         63:34:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----