Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2a4c1c23-2d89-4adc-9ad4-d2b09b3d92b7.roa
File:                     2a4c1c23-2d89-4adc-9ad4-d2b09b3d92b7.roa (raw, json)
Hash identifier:          xqJtgo0fy1Cnck8mo+jKr9d5n3rsscvvDada8BAS3/s=
Subject key identifier:   B2:F9:87:FD:D8:DD:E8:63:B0:AB:63:AA:4A:A6:7F:17:67:2F:76:B7
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3434B0977E48B506E612DAB58F3F5A2874BDE266
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2a4c1c23-2d89-4adc-9ad4-d2b09b3d92b7.roa
Signing time:             Thu 21 Sep 2023 00:00:00 +0000
ROA not before:           Thu 21 Sep 2023 00:00:00 +0000
ROA not after:            Thu 26 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:34:b0:97:7e:48:b5:06:e6:12:da:b5:8f:3f:5a:28:74:bd:e2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 21 00:00:00 2023 GMT
            Not After : Oct 26 23:59:59 2023 GMT
        Subject: serialNumber=5b8fa70a49636a41b78810ffb7798c5d4083790e9c9eb8d6b4027ae045e14c38, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:01:2a:5c:5e:0f:6c:da:1f:dc:ab:f6:c3:
                    b9:01:39:8f:0d:9b:4d:c6:76:03:2d:82:9a:da:b1:
                    7c:81:f9:cd:a9:5c:86:57:89:1c:72:48:06:e1:a5:
                    e4:c7:92:7c:96:d1:85:45:70:df:9b:91:fb:04:08:
                    52:92:0c:9a:8e:51:e1:3d:5e:ad:98:b4:6f:ae:bc:
                    e5:5b:bf:11:55:b2:1b:58:74:15:e0:84:77:02:1f:
                    76:bc:0f:0f:4f:63:c6:e8:35:d4:da:2d:6a:77:0f:
                    d1:8b:c6:97:8d:27:a7:c4:20:0a:11:48:fe:28:07:
                    e6:01:2b:f0:17:80:68:0b:c0:14:5e:3d:88:bf:0d:
                    a2:93:87:3d:50:df:b0:91:c4:7e:04:0e:b0:d7:f4:
                    5b:36:64:5d:05:bb:d9:ec:51:0e:ab:f3:cc:3d:98:
                    6c:c5:9a:ff:be:f2:75:1c:3e:ab:dc:13:a1:3b:d0:
                    1f:c5:56:8e:d3:65:6a:b9:c2:2d:4c:6b:99:06:40:
                    e6:7f:9d:a0:40:eb:9e:01:84:83:c9:c2:85:3f:e7:
                    09:68:57:31:7b:74:30:85:ee:32:7a:67:d9:40:05:
                    87:c4:69:0b:33:bf:54:05:ae:b6:01:70:c7:da:ad:
                    50:f8:69:97:b8:1a:5c:bc:40:a7:46:c5:6c:b1:f7:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F9:87:FD:D8:DD:E8:63:B0:AB:63:AA:4A:A6:7F:17:67:2F:76:B7
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2a4c1c23-2d89-4adc-9ad4-d2b09b3d92b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:82:20:1a:5c:6a:a1:db:19:1a:3d:15:21:ca:48:79:b9:b1:
         78:16:f0:e3:38:5e:d6:93:59:84:bc:25:bd:6b:fd:de:57:a4:
         5f:51:2d:d9:82:b6:1a:0c:64:79:b0:a2:19:b7:ff:b2:47:f2:
         0d:99:5c:c3:f6:99:ce:21:62:2c:0f:ae:c5:65:90:4c:ff:aa:
         df:1e:92:5a:8b:b7:0d:ff:41:93:af:1d:4b:e0:de:f2:25:90:
         98:5b:9b:b5:7d:de:ca:3b:a1:a9:83:0b:ea:2b:e4:44:6e:6c:
         bd:32:37:74:53:7f:63:9d:b7:3b:02:04:a2:29:3f:8e:16:7d:
         84:f0:27:63:9b:88:ef:17:02:f6:d3:2a:97:9f:83:7a:e8:d9:
         78:d5:fe:2c:fe:fb:5b:94:f2:8e:1f:e1:5e:45:a0:95:35:c8:
         d6:d0:a5:99:79:eb:b3:9a:da:f9:49:f8:c5:67:fd:61:b0:b6:
         29:82:e1:c0:39:aa:44:29:12:ba:36:b9:c4:db:8f:44:17:e9:
         68:af:4a:62:a5:fd:c6:8a:5c:4d:10:5f:93:fd:4d:c3:91:40:
         fd:66:1b:7a:6e:6c:d3:a3:81:06:e9:40:fd:f3:e5:37:d6:61:
         d0:a4:d6:4c:26:b9:55:fc:00:89:fb:03:cd:82:84:52:b4:57:
         ad:ea:38:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----