Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/73526b83-512b-4832-8918-34d65e77cfe5.roa
File:                     73526b83-512b-4832-8918-34d65e77cfe5.roa (raw, json)
Hash identifier:          7u9qYaOXk7ik/5tZyAp/Jh1OMy+SlafZuW2xTf+hStw=
Subject key identifier:   A5:B2:C3:ED:4F:1C:0A:BF:62:ED:C0:85:07:AC:52:05:C9:A1:52:F4
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4947CE09281F96AA2B45909FC2E44F724CAFF291
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/73526b83-512b-4832-8918-34d65e77cfe5.roa
Signing time:             Wed 18 Oct 2023 00:00:00 +0000
ROA not before:           Wed 18 Oct 2023 00:00:00 +0000
ROA not after:            Wed 22 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:47:ce:09:28:1f:96:aa:2b:45:90:9f:c2:e4:4f:72:4c:af:f2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 18 00:00:00 2023 GMT
            Not After : Nov 22 23:59:59 2023 GMT
        Subject: serialNumber=6b3665b9ad87fb4a3c0373648d0a2198e1eb227550a746ec74e88d3663657d01, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:07:87:a9:ec:ae:07:b5:87:57:ea:94:1a:bd:
                    36:a7:e2:2a:a8:65:cd:37:2a:04:0f:c2:9f:08:05:
                    df:ee:89:ed:c4:88:2c:fe:63:44:8c:ea:a4:2b:34:
                    4d:61:f7:70:4c:e4:89:4c:b9:0c:09:49:e5:86:f2:
                    17:2c:8b:f8:b2:61:ef:fb:f7:7a:25:61:c7:5a:99:
                    3d:27:6a:57:00:3e:6e:38:88:68:0b:2e:91:8c:6b:
                    33:91:51:2d:79:4d:14:5d:71:c5:02:67:b1:03:ed:
                    43:c2:7c:b6:68:28:fe:84:0a:b1:8d:48:9a:88:fa:
                    65:17:ea:67:e4:c3:b7:21:d9:01:44:2a:1e:99:36:
                    b8:39:ce:25:f3:08:7d:07:9a:8b:60:94:48:1e:98:
                    47:d3:07:3f:7a:27:b1:3e:32:52:cd:1a:ac:f0:26:
                    91:db:3c:2a:2c:61:51:1c:a7:93:2a:13:43:d7:a5:
                    f2:31:a2:6e:d3:7a:06:a9:b3:9c:3b:9a:68:46:bd:
                    b9:0f:bf:7c:3f:8d:31:38:10:af:ab:fb:14:f3:5b:
                    46:38:90:31:b5:cb:c6:1f:e1:1f:27:89:f7:f0:bf:
                    e4:81:55:a7:73:69:81:a9:3a:f1:d5:e2:4d:f9:5f:
                    ef:b9:70:af:81:c4:91:10:ce:3b:ae:a5:6d:f3:ac:
                    91:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B2:C3:ED:4F:1C:0A:BF:62:ED:C0:85:07:AC:52:05:C9:A1:52:F4
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/73526b83-512b-4832-8918-34d65e77cfe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:99:a4:2f:7f:dc:d6:55:f3:59:8d:04:07:af:7d:dc:20:5a:
         f1:cf:35:fd:32:7b:7c:42:2a:15:c5:5f:b6:4e:b7:7c:5a:8c:
         31:cd:3a:ad:ba:54:6c:0c:7b:e3:a3:35:03:3e:0c:6c:12:ab:
         cf:25:bf:87:7e:20:88:3a:bd:45:1a:9e:cf:2e:40:f7:ad:eb:
         2f:60:20:fd:54:cf:04:84:e3:e7:48:00:0b:ea:bf:f6:a2:b4:
         33:3a:76:84:25:cf:1f:89:5b:c9:ff:3b:ac:f7:d1:e5:ff:b5:
         f9:c1:a9:ad:9e:58:2f:02:d6:4e:6a:30:e8:11:cf:a0:0c:50:
         10:63:bb:d3:e3:e0:76:c3:dd:c8:9f:26:bb:77:a3:bf:f1:e8:
         99:78:7c:d9:10:36:22:e8:8d:29:01:1a:dd:38:05:53:5e:ac:
         f6:64:21:e2:7f:85:e8:f3:74:ec:cd:41:2b:3d:6e:a3:35:c1:
         79:c8:53:85:51:9a:61:5c:ae:68:60:29:b4:1b:79:b4:81:9d:
         5d:00:d5:a4:06:2b:ce:d6:68:1e:a6:0a:44:ab:4d:0e:6f:77:
         38:8c:b5:14:13:6a:db:ee:40:b6:50:3d:0b:35:8e:3e:f7:55:
         0e:63:d4:cc:fc:28:d2:e0:e3:3f:d3:b5:c2:54:a2:a8:bd:69:
         1a:24:8c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----