Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fc4fddb7-8d81-4c3c-81ee-6cddfa531f5a.roa
File:                     fc4fddb7-8d81-4c3c-81ee-6cddfa531f5a.roa (raw, json)
Hash identifier:          oQZQz4YUxcH09IFSfrNrstuhgMv0qqvfFs+cMgslce4=
Subject key identifier:   F9:FC:27:D2:90:D7:BC:D9:14:E2:32:ED:E1:57:DD:F2:B0:EB:0D:5C
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       262CB43308E0F102997F977C42E83D324A43802B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fc4fddb7-8d81-4c3c-81ee-6cddfa531f5a.roa
Signing time:             Fri 22 Dec 2023 00:00:00 +0000
ROA not before:           Fri 22 Dec 2023 00:00:00 +0000
ROA not after:            Fri 26 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2c:b4:33:08:e0:f1:02:99:7f:97:7c:42:e8:3d:32:4a:43:80:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 22 00:00:00 2023 GMT
            Not After : Jan 26 23:59:59 2024 GMT
        Subject: serialNumber=39e31e67d28bb8e9633867f241ea6c7178ed96b9b4dc4d44c57034cbfdc7894b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:f9:1e:d1:93:97:21:eb:b8:da:ba:06:1f:
                    d0:fa:77:af:bc:f8:3a:61:43:78:68:c3:57:66:75:
                    2b:51:22:0e:91:07:60:0a:ef:38:66:c7:11:67:2e:
                    11:9c:de:dc:fc:48:7d:2c:b0:ac:85:4d:4f:fa:d1:
                    1b:98:43:d7:16:d8:1d:c4:79:4f:3f:1d:c9:15:57:
                    b4:28:13:13:48:16:89:4d:a6:14:7f:08:55:6d:4a:
                    b9:2e:f8:5b:f6:50:a4:52:64:b9:c2:80:f6:5f:2a:
                    d8:3a:83:03:00:22:f6:b0:39:d9:fa:76:3b:c9:53:
                    6e:91:23:8b:dd:53:2f:0f:57:2b:74:0b:4a:e5:df:
                    b7:66:51:f2:27:31:b4:d8:73:3c:ca:4c:c5:e5:ce:
                    7b:5d:b2:5c:f2:77:88:ed:54:70:43:ae:62:8c:39:
                    b0:70:47:ea:9f:18:8c:8b:5d:7b:4d:71:c7:99:f9:
                    2f:ae:c5:af:69:96:d9:20:d8:9e:6d:5b:3c:3b:8f:
                    2b:28:2f:31:bf:7c:f3:fb:9b:0f:31:58:14:10:1d:
                    46:dd:53:db:76:50:01:e7:fa:31:e1:a2:b0:c1:9f:
                    18:53:ed:76:be:7e:14:23:1d:89:50:4e:7f:ca:5b:
                    84:d0:10:e0:52:d3:38:61:59:c2:0e:9b:65:eb:b5:
                    4c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FC:27:D2:90:D7:BC:D9:14:E2:32:ED:E1:57:DD:F2:B0:EB:0D:5C
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fc4fddb7-8d81-4c3c-81ee-6cddfa531f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:3c:5e:e6:fc:5d:94:71:eb:88:a2:90:0d:4c:ac:34:86:a6:
         4d:2e:0f:f1:d0:8a:4a:a2:17:68:5d:90:de:44:9e:58:f3:34:
         0d:61:58:80:fe:9d:11:18:13:2f:35:62:2a:73:c8:bd:48:67:
         62:7f:c8:33:d5:1a:bf:53:9e:6e:e8:99:c9:98:2e:9e:a1:df:
         fd:54:eb:b7:14:92:38:cf:c9:24:bd:23:21:c4:e0:c1:c2:a6:
         6e:69:d2:56:15:48:dc:1d:57:ce:a2:45:e7:4e:59:30:c3:b2:
         4a:e0:ca:83:3a:77:04:45:3d:f4:a8:ce:0d:4f:73:18:54:6b:
         55:27:f7:b3:37:83:fe:c7:c2:6f:a1:2e:f3:a0:50:43:6b:51:
         4b:c7:2c:85:b7:ed:f4:11:c6:f1:57:f2:47:7f:77:1f:1c:6e:
         da:8f:fc:9c:61:4b:c1:b1:20:68:2c:ba:81:2f:da:e5:1c:57:
         f9:c6:85:bd:07:78:b4:c3:dd:f4:02:14:9a:34:bf:d2:bb:18:
         41:54:fa:e5:36:34:0d:e5:ce:60:6d:28:c7:a4:1f:63:70:d3:
         3b:95:af:16:27:06:b7:bf:e5:ab:3f:35:91:86:16:39:a8:69:
         8d:c5:3f:64:db:fc:33:70:2d:e9:29:4f:3a:27:87:82:0a:86:
         03:5c:02:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----