Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec207e51-e3cb-4b84-b2dd-187ba5a4e7a2.roa
File:                     ec207e51-e3cb-4b84-b2dd-187ba5a4e7a2.roa (raw, json)
Hash identifier:          UlhUnX/zXypKYUCC8OvEhKMjA5U6h2A9qRz+sgu06WE=
Subject key identifier:   B2:8A:05:23:5B:C3:87:2D:88:73:51:B4:0F:AC:4E:36:DD:C3:1E:EA
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       111C3EF76EB0E204DC9AB28256ECF948B9F12C1E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec207e51-e3cb-4b84-b2dd-187ba5a4e7a2.roa
Signing time:             Fri 18 Oct 2024 00:00:00 +0000
ROA not before:           Fri 18 Oct 2024 00:00:00 +0000
ROA not after:            Fri 22 Nov 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1c:3e:f7:6e:b0:e2:04:dc:9a:b2:82:56:ec:f9:48:b9:f1:2c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 18 00:00:00 2024 GMT
            Not After : Nov 22 23:59:59 2024 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:3f:66:ea:bf:8d:cc:50:5e:33:90:eb:6c:
                    17:1e:51:3d:5a:9b:4e:34:52:ea:a1:e6:16:9d:2c:
                    6f:d3:0f:ba:36:2d:83:a2:e3:cb:7d:f1:3a:b6:3d:
                    8a:88:34:10:14:09:42:92:2e:79:c6:12:eb:5b:05:
                    ac:ce:7f:f2:d8:d9:93:49:1f:f7:8e:2d:04:9a:33:
                    80:a0:4a:cb:49:d6:9e:22:88:09:d5:04:86:6f:f3:
                    e5:13:e5:0f:a5:78:04:b8:84:50:1b:67:ba:3c:14:
                    f8:0e:36:6e:6a:0f:47:e5:5f:2c:d5:81:54:bc:e4:
                    86:cf:9e:12:31:6b:91:64:8a:af:05:bc:d6:01:48:
                    ae:78:ba:13:f6:d9:b7:5a:e7:75:53:36:63:02:2a:
                    97:41:f8:71:c9:f9:e8:63:6e:ac:c5:f8:9f:57:2d:
                    ba:c5:bc:e0:52:00:93:87:1b:c5:3c:37:f1:d4:5a:
                    bc:8a:69:a9:16:4c:6c:32:45:df:14:46:fe:d9:f0:
                    6a:22:d8:04:11:d9:99:6e:a1:03:12:28:89:c7:5a:
                    42:a7:4d:03:7f:9e:35:48:97:6c:6a:ae:7e:f3:49:
                    37:df:ce:bd:58:84:5d:d2:08:ab:fe:53:10:e5:ee:
                    2f:a8:2c:27:eb:a3:37:aa:45:8a:b1:a1:05:e3:f4:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8A:05:23:5B:C3:87:2D:88:73:51:B4:0F:AC:4E:36:DD:C3:1E:EA
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec207e51-e3cb-4b84-b2dd-187ba5a4e7a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ce:bd:f6:48:20:86:28:be:26:5f:3e:6e:7d:79:f6:e7:0b:
         e5:07:8d:78:92:8c:c7:11:06:d5:a0:17:40:ae:b9:f3:9a:ae:
         07:17:b4:d6:ce:62:d5:d4:4e:4e:b0:43:a2:f4:1c:20:fd:8f:
         52:82:a7:af:f7:b4:bd:98:20:f3:1e:35:9f:65:86:92:85:36:
         5f:74:66:ba:44:0b:b6:d9:1e:5e:66:a7:31:bd:fd:1b:84:83:
         14:49:41:1d:aa:a7:7f:da:5b:6d:79:05:33:5b:6b:5e:92:4f:
         a2:53:f2:31:9a:a9:31:0c:22:f9:0b:f3:88:18:64:bc:9a:0f:
         d4:b6:03:f0:9d:13:79:83:f2:d8:5c:0d:09:f7:34:bb:d7:80:
         ec:2a:b8:3d:e8:56:6d:f8:9b:52:39:5d:04:a2:5b:c2:e1:b7:
         5c:78:ac:8f:ea:da:a5:47:b0:97:f0:e0:13:d2:0c:91:c7:80:
         1d:fe:13:2a:57:3e:51:54:52:e6:6e:75:33:6b:8c:73:68:4a:
         8b:49:72:e4:4d:e5:1d:59:5c:18:40:d8:38:14:3b:ba:2b:72:
         03:d2:b8:c5:1e:c5:66:46:b1:36:a5:ad:de:52:d7:08:e6:54:
         cf:d9:da:21:1c:56:95:12:fa:83:75:6a:87:72:0e:cf:c3:fa:
         09:7e:f0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----