Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5c036084-39b1-4794-ade0-f57156024a09.roa
File:                     5c036084-39b1-4794-ade0-f57156024a09.roa (raw, json)
Hash identifier:          gjA+H2LKC28sz5LyQlNJ/tD3QW46TmmrKXGnnU3Vk4I=
Subject key identifier:   34:45:2B:2D:7A:3A:61:DC:A7:08:DC:30:0B:31:B9:76:8B:A9:3A:04
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       03C278E46CEB7E821AB7ECE83052D295B602A39B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5c036084-39b1-4794-ade0-f57156024a09.roa
Signing time:             Thu 26 Oct 2023 00:00:00 +0000
ROA not before:           Thu 26 Oct 2023 00:00:00 +0000
ROA not after:            Thu 30 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c2:78:e4:6c:eb:7e:82:1a:b7:ec:e8:30:52:d2:95:b6:02:a3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 26 00:00:00 2023 GMT
            Not After : Nov 30 23:59:59 2023 GMT
        Subject: serialNumber=ffc450d29a539c65ef8abee3a1c4f93c3243c719724237997b9af92ed52287dd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c6:47:9a:9f:97:98:2d:d4:91:a6:1c:43:f8:
                    14:27:47:e4:ad:99:1f:0f:dd:8b:ce:d0:1f:70:f2:
                    ee:a5:a8:e6:51:75:40:1c:7a:b2:4c:69:87:e3:03:
                    49:98:36:8f:1b:5d:13:85:54:45:82:e6:d5:67:5d:
                    b8:23:9c:53:37:e3:e5:c4:4a:c7:5d:0c:a1:1c:46:
                    f3:e6:43:0d:a2:e4:7f:df:49:b6:8b:39:7d:6e:5c:
                    48:19:48:7e:17:c9:6e:b0:af:1e:f2:0c:98:b4:d6:
                    35:7d:4e:62:10:a9:87:1e:81:70:1d:55:63:dc:12:
                    85:08:ef:c4:48:af:1a:a1:8c:dc:7f:84:f7:ff:3a:
                    24:35:a1:cb:f4:27:94:ce:13:cc:ea:6a:b3:2d:68:
                    13:5a:e9:f3:cf:c8:6d:a5:4a:74:aa:3a:ae:44:4b:
                    7f:d9:b1:0d:e0:3c:a6:7a:bb:f9:b5:9a:b8:35:b6:
                    0a:a5:33:d9:66:de:69:e7:93:be:23:73:c8:8a:81:
                    b6:b2:c8:0d:df:e5:11:da:0b:8a:79:16:77:47:8e:
                    d3:ce:3f:35:3c:3f:95:8f:76:73:1e:05:e1:09:7f:
                    7a:18:76:41:be:f3:b5:22:54:63:ad:51:bc:b7:76:
                    af:a4:08:62:7c:86:3a:20:b8:1c:4d:24:a0:50:3f:
                    60:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:45:2B:2D:7A:3A:61:DC:A7:08:DC:30:0B:31:B9:76:8B:A9:3A:04
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5c036084-39b1-4794-ade0-f57156024a09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:77:14:1f:33:8b:8c:bf:6c:ed:da:ff:c5:79:ad:fb:c8:7b:
         90:67:7b:17:dc:53:35:28:60:f0:67:77:30:af:67:76:96:f9:
         cb:fc:9b:d5:55:76:54:be:11:5f:b4:2b:43:01:e7:de:52:33:
         79:f2:c2:0a:71:3f:ce:c9:60:d4:cd:3c:12:15:22:3f:54:88:
         d7:a7:89:01:81:90:f5:01:fe:23:e6:ae:3a:39:28:19:a1:72:
         fe:4e:9c:3b:c8:fe:99:15:b8:10:db:06:22:a7:56:8d:86:36:
         d5:56:92:54:42:81:53:a3:3f:46:99:07:06:6d:a4:82:84:44:
         fd:30:9e:fd:ba:42:b7:7d:2e:7e:8e:3a:99:99:4a:52:de:dc:
         82:6c:49:bf:2a:42:d1:d9:04:2c:73:71:55:ce:11:2a:e1:fd:
         7d:94:24:1c:13:30:99:89:56:34:e7:75:d7:6f:55:64:4c:7b:
         3f:8f:d7:14:9f:3f:42:3c:58:42:30:57:8a:7f:98:fd:67:2d:
         44:10:96:e7:b3:c5:09:dc:45:03:3d:a3:2a:28:71:bc:62:a1:
         61:45:4b:02:cf:d4:02:33:df:fe:2a:52:68:ac:48:1f:61:6c:
         8f:62:10:35:19:fa:b4:b2:ce:27:69:43:1f:f8:c6:bf:78:a6:
         51:b5:ac:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----