Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/615f7bbd-5d62-4071-9d22-9121f0a18682.roa
File:                     615f7bbd-5d62-4071-9d22-9121f0a18682.roa (raw, json)
Hash identifier:          BbNJdlDKhoTfZFe6RtbmPRKd6W3XMXqpOxiD9MJ/ax8=
Subject key identifier:   0B:1D:FB:30:1F:E0:24:CC:9F:6F:46:3E:6F:88:81:77:6C:72:80:4B
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       78EC35E37A96992796D86BA08585FC0B8A42CF6B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/615f7bbd-5d62-4071-9d22-9121f0a18682.roa
Signing time:             Tue 21 Nov 2023 00:00:00 +0000
ROA not before:           Tue 21 Nov 2023 00:00:00 +0000
ROA not after:            Tue 26 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ec:35:e3:7a:96:99:27:96:d8:6b:a0:85:85:fc:0b:8a:42:cf:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 21 00:00:00 2023 GMT
            Not After : Dec 26 23:59:59 2023 GMT
        Subject: serialNumber=329bbead9553ae180c4276626bb4409686f98ba75c6cbeb7159f233e54fc4576, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:2b:ac:ce:ad:d3:5a:d5:f7:e3:d7:f0:a5:
                    63:72:15:d4:16:da:cc:70:e7:aa:7d:91:55:7e:44:
                    32:35:96:7e:e9:7c:32:db:46:8b:02:04:c2:cd:23:
                    6b:62:72:51:3e:29:a9:e3:1f:28:c9:43:5b:21:ac:
                    e9:02:62:d4:91:ad:dd:2a:84:14:73:2b:62:4b:6b:
                    d7:72:80:8d:8f:44:64:4a:ec:e0:bb:1f:30:23:78:
                    13:95:03:e2:47:ce:de:cc:fe:df:dc:29:02:56:52:
                    1c:be:3e:b1:f6:55:fc:3f:15:55:95:4f:c3:40:23:
                    ff:13:77:5f:ee:aa:a2:b8:a2:d7:49:20:c6:f8:e1:
                    1b:30:1b:c7:aa:7f:7f:c1:30:b2:e7:76:79:6c:ab:
                    bd:a8:88:dd:10:66:3a:f0:66:2a:97:9a:52:7b:06:
                    fb:1e:88:63:11:a7:b7:6a:d2:e6:a5:7f:1d:08:01:
                    41:c0:b4:52:50:c2:39:f5:f2:6b:0e:09:a5:fe:ba:
                    2e:0d:aa:18:20:c2:70:29:99:93:85:93:c0:4d:e2:
                    9b:01:a6:7d:28:69:ff:12:9e:da:02:d2:3f:46:60:
                    e1:31:6a:a7:78:6c:b1:40:c1:8d:46:a5:c5:ef:42:
                    c5:7c:32:ba:73:54:28:3f:e7:fa:55:ce:fa:c3:92:
                    ab:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1D:FB:30:1F:E0:24:CC:9F:6F:46:3E:6F:88:81:77:6C:72:80:4B
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/615f7bbd-5d62-4071-9d22-9121f0a18682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:08:61:35:4b:75:d4:32:76:9f:ff:a0:2b:76:67:05:a6:02:
         14:b8:5a:14:6e:fa:98:0e:98:f1:bc:e9:f1:2c:7d:cf:1a:62:
         1d:a2:e1:94:c7:99:d6:4c:f3:c2:37:b5:c6:17:15:02:ef:86:
         68:d1:74:ee:45:45:43:ae:97:20:ad:9c:33:16:71:98:ff:02:
         37:07:6a:6e:1a:d6:47:c6:1b:de:ca:26:b8:86:ee:9a:a6:f4:
         ed:27:58:f0:6e:0e:89:f8:c0:c4:7d:65:77:b9:66:f5:e6:f9:
         19:19:09:c1:ce:1d:7a:66:04:9e:c5:75:19:1c:a5:2a:79:b3:
         b9:3a:bb:d6:13:f2:24:63:3b:9f:1e:5e:9f:e8:83:d7:d7:6c:
         76:50:0b:85:3f:8c:88:e0:72:d7:20:21:64:ca:cc:72:54:8a:
         3f:83:22:df:08:cc:14:20:c4:18:10:5a:80:de:8c:cc:a8:96:
         8c:26:39:15:e0:fc:00:35:5d:de:2a:71:34:3b:bd:19:8f:fd:
         f3:90:78:89:d3:7a:0b:4e:37:f0:f6:aa:e6:ad:f5:9d:7c:4f:
         8c:55:04:3e:27:fe:16:04:45:67:a8:fb:19:c7:ce:31:ec:70:
         de:6b:a4:57:4b:3d:8d:a6:46:fe:61:01:c9:48:6f:d7:d8:78:
         5b:ea:59:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----