Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/203b312e-d1a9-4f20-82c6-47bd2a1abd03.roa
File:                     203b312e-d1a9-4f20-82c6-47bd2a1abd03.roa (raw, json)
Hash identifier:          CbDMalhsNxXeFrpr8T3aCEXs6Aq9evonm6SBMkIcg2w=
Subject key identifier:   63:33:98:C7:16:AD:A4:55:07:8A:CF:D4:2D:C3:D5:76:76:8C:3E:33
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       126ECBB0650E20B1A8A10A3549EF81AF68D4BD18
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/203b312e-d1a9-4f20-82c6-47bd2a1abd03.roa
Signing time:             Tue 26 Sep 2023 00:00:00 +0000
ROA not before:           Tue 26 Sep 2023 00:00:00 +0000
ROA not after:            Tue 31 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6e:cb:b0:65:0e:20:b1:a8:a1:0a:35:49:ef:81:af:68:d4:bd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 26 00:00:00 2023 GMT
            Not After : Oct 31 23:59:59 2023 GMT
        Subject: serialNumber=ea9de3b700e38441feb3edec3b9bf98752f73d881dd6873bd92324579565e7c2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:90:70:e3:c0:3d:99:fe:56:62:89:25:e8:15:
                    21:91:2b:7a:c6:79:c1:0e:1f:94:19:d2:c2:c7:1e:
                    f2:d1:d5:07:05:d3:5d:b0:c1:f5:b3:fb:b5:60:8f:
                    dc:46:f7:0e:d3:66:a6:b4:de:a5:15:9c:e0:7f:91:
                    7d:93:b0:03:18:cc:2e:1d:84:21:0f:ff:55:58:b4:
                    c5:89:00:c3:f5:6d:d1:f0:50:1f:6c:d9:5b:e1:9b:
                    64:c1:54:a0:e4:b8:28:6f:4c:78:6c:24:8a:c6:fb:
                    d5:d1:f3:84:b3:92:4e:b3:6c:8c:70:f7:82:51:6d:
                    d7:e4:d3:1d:34:bc:32:c2:64:66:5e:77:48:05:6c:
                    d3:47:48:c5:04:aa:fa:cf:ba:b4:62:3a:9a:04:ee:
                    49:05:29:52:2f:1a:09:05:2a:ce:19:57:f0:28:59:
                    51:24:bb:45:ed:19:13:ca:5d:49:b4:22:39:13:74:
                    44:7c:05:bb:ac:d7:97:69:dc:95:df:c3:4a:56:47:
                    47:92:00:3f:bd:e7:97:cf:8e:3a:1a:72:c8:d4:e4:
                    25:35:de:fc:a9:53:78:55:69:42:5e:01:cc:24:ed:
                    f0:a4:7c:fc:96:ca:37:ed:d2:e8:87:e5:94:86:b4:
                    07:df:db:7c:7a:23:6e:a2:60:16:54:65:60:50:b7:
                    5c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:33:98:C7:16:AD:A4:55:07:8A:CF:D4:2D:C3:D5:76:76:8C:3E:33
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/203b312e-d1a9-4f20-82c6-47bd2a1abd03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:9a:a1:02:05:4e:6d:96:47:cd:fe:0f:b2:63:fe:d0:ff:c6:
         f5:dc:87:35:03:63:94:32:6c:fe:16:0b:c9:aa:89:db:7c:3c:
         60:41:e4:40:29:41:7b:d7:f8:27:de:ba:41:93:12:ba:5f:67:
         89:1a:cc:f9:52:b7:dd:26:88:37:ab:44:7b:5b:61:6e:3a:91:
         05:b5:5b:29:bb:bf:4f:75:e7:6d:0f:cb:1b:ef:55:da:6e:a8:
         71:18:9f:ab:35:8b:4c:a7:1d:04:4e:28:eb:1d:4e:c5:76:02:
         a5:01:26:36:a7:33:ff:39:a6:8f:fe:d4:bc:95:4f:6b:84:b0:
         ab:38:c2:25:fb:bf:7b:45:c3:1d:b7:15:5c:da:12:4e:1e:bd:
         c7:2b:8c:e4:25:bd:ad:65:ff:4d:5a:b1:b3:03:94:c0:dc:cc:
         d6:e7:9a:6f:e7:fd:1a:ed:23:fa:5d:a6:25:6f:aa:29:f7:95:
         04:1c:14:44:4c:c9:54:8f:ed:25:e4:99:11:6a:66:8e:ac:9d:
         1d:c6:52:d1:33:d3:a2:01:bc:3d:07:8b:26:70:1c:fb:4c:9c:
         45:32:a8:bd:aa:3d:5e:94:d5:7b:10:ed:6e:73:94:2a:e4:41:
         fc:e4:01:ff:eb:9d:7a:f7:2b:27:0c:70:06:90:73:0d:8f:55:
         9e:b2:02:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:11 2023 by rpki-client on console.sobornost.net