Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/570d0243-4f0c-40b8-ab2a-a6b4448a5408.roa
File:                     570d0243-4f0c-40b8-ab2a-a6b4448a5408.roa (raw, json)
Hash identifier:          CbxGorj9VIJp96HALER5IQ5VSZjWgvxV+Qxd98nqLuY=
Subject key identifier:   51:4F:1E:1A:24:CB:C5:AD:FC:E6:D2:B8:A4:98:A6:95:20:95:82:9D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       070EFD5EB74966A51E7E22663B077F71CBA693DC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/570d0243-4f0c-40b8-ab2a-a6b4448a5408.roa
Signing time:             Thu 21 Sep 2023 00:00:00 +0000
ROA not before:           Thu 21 Sep 2023 00:00:00 +0000
ROA not after:            Thu 26 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0e:fd:5e:b7:49:66:a5:1e:7e:22:66:3b:07:7f:71:cb:a6:93:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 21 00:00:00 2023 GMT
            Not After : Oct 26 23:59:59 2023 GMT
        Subject: serialNumber=3a866e9b84ad81a8236239c178c9fa65a15c0c15b5dc1c6c41adc2318bb5da5c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:88:fa:83:96:79:89:57:70:67:a6:63:a2:b0:
                    6e:aa:80:b5:b4:60:25:7b:f8:aa:59:e0:1a:3d:50:
                    1f:d8:68:9f:1b:66:0c:f7:dd:9f:68:bc:92:44:ea:
                    8e:d0:a2:5d:84:d2:3a:d8:fa:ea:d3:ce:bb:ec:31:
                    5c:35:ae:17:92:9b:b1:b8:a7:25:63:61:46:15:77:
                    a6:ca:0c:a9:bd:74:98:39:8e:41:f5:42:d5:6c:13:
                    ac:72:b6:68:a1:69:40:dd:77:f2:8c:41:e9:3f:64:
                    c1:4e:e1:38:ae:1f:85:f8:7c:da:a8:6e:47:3d:1f:
                    7a:87:75:06:2e:ea:11:dc:d3:d0:9c:cd:aa:fc:a1:
                    3e:35:0f:bf:9c:d7:b3:f4:21:78:42:89:4e:65:0f:
                    2c:ea:df:b9:c4:5e:12:ab:8a:ec:fc:bf:83:d7:51:
                    9d:f8:24:4a:c6:17:b7:3e:52:c3:ef:3a:62:1f:87:
                    66:6b:9e:49:08:25:ac:52:7e:e8:2a:8c:ef:06:29:
                    49:77:5c:f7:57:e8:f1:34:1d:db:d7:f5:2c:d7:68:
                    1f:71:1d:47:a0:df:fd:f7:7d:98:02:eb:3c:ce:a8:
                    60:8e:5b:4a:f2:e6:ce:b8:4d:ec:5c:28:ed:07:a7:
                    af:36:75:bc:23:a1:61:46:de:e0:37:55:63:4c:37:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4F:1E:1A:24:CB:C5:AD:FC:E6:D2:B8:A4:98:A6:95:20:95:82:9D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/570d0243-4f0c-40b8-ab2a-a6b4448a5408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:25:50:f6:75:00:97:82:b3:2e:4a:04:0c:f2:18:28:fe:83:
         02:e3:dc:fc:ce:5c:6d:7c:5b:a2:1a:7e:58:1a:3e:67:32:04:
         6c:7a:cf:f0:fc:61:dc:da:2a:0c:ba:14:96:ee:75:1a:58:27:
         a2:c9:18:01:42:85:64:da:11:87:6b:2f:49:64:a8:48:e6:98:
         c0:fb:c6:10:85:f8:56:4a:65:65:76:39:d1:e0:9e:18:c5:c3:
         9d:db:18:23:bc:16:0d:51:f5:96:8f:46:86:35:55:b6:d9:e6:
         24:6a:35:38:19:8c:dc:e6:19:db:5e:b3:b5:e4:56:dc:05:22:
         71:a9:fe:12:57:74:76:b8:7f:5a:1c:82:44:05:e4:c5:71:08:
         74:43:89:f0:75:fc:c2:5e:ec:cb:3d:3a:94:34:b6:93:a9:1b:
         8c:08:e9:3e:23:6a:73:6e:c3:b5:f9:bb:3f:a6:bf:bf:f4:c6:
         28:70:75:05:74:c7:60:2a:70:15:5e:73:96:46:17:38:3d:c7:
         e7:e0:a0:38:c3:40:a7:0e:38:9a:3f:09:96:f4:71:65:73:2b:
         1c:bc:23:1d:df:9f:09:15:69:0e:cb:30:99:1d:f3:28:06:4c:
         e6:13:e5:ee:16:78:c0:90:fe:92:fe:75:78:6a:b2:c8:b3:ec:
         f2:c9:15:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----