Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab71a88e-b4a5-4132-b228-2b27e4825445.roa
File:                     ab71a88e-b4a5-4132-b228-2b27e4825445.roa (raw, json)
Hash identifier:          LBC+MeQICv8BTdfapqrlBkYOj6qxbJLduS0ZV2rhR0k=
Subject key identifier:   B5:B1:FF:F3:D0:6B:0B:FD:9D:86:DE:26:FD:7F:F3:32:B2:68:EC:72
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6A054CFFFFCFDF62AAEE3A392DAC35F66B0EB422
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab71a88e-b4a5-4132-b228-2b27e4825445.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:05:4c:ff:ff:cf:df:62:aa:ee:3a:39:2d:ac:35:f6:6b:0e:b4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=64092d5a45dd0a1a1448d6a965e10deb0ba53db0f23f60e4bfabc8027ee74a72, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:12:b1:47:18:6a:1c:9a:02:64:cd:73:ac:ad:
                    83:cd:ea:a2:2b:53:93:2c:e4:70:6f:07:cd:83:a7:
                    c9:4b:74:f9:72:41:11:63:61:07:0d:a6:21:d9:26:
                    c6:ba:55:d1:9c:86:19:db:53:6e:96:de:c8:7b:0e:
                    55:9c:81:47:2a:e0:98:8b:36:9a:96:83:1e:69:55:
                    b6:b6:b2:b3:d9:36:34:8a:b4:fd:3f:05:c4:3a:ae:
                    27:30:09:db:bb:98:71:0f:19:98:d5:17:d6:7c:7e:
                    ed:91:93:70:28:0b:32:b6:c0:e0:24:2e:68:21:a1:
                    9a:15:75:16:62:c6:6f:51:e8:10:ea:fc:7e:dd:b4:
                    ed:a2:31:d8:45:ee:15:9d:6e:f3:6b:dd:84:7a:24:
                    59:db:f1:40:97:71:1c:ed:0e:a3:67:5c:e5:4f:0d:
                    39:73:6d:3e:d5:f8:c9:e7:6d:85:7e:37:1d:6b:d2:
                    3e:a1:83:87:92:79:66:c2:5b:6a:4e:c7:2e:6f:e9:
                    84:1c:b0:1e:b3:21:bf:2a:f4:61:ca:da:e5:45:2b:
                    41:06:0c:63:e7:1f:59:ff:5a:24:c0:b2:77:a7:66:
                    2b:6c:a1:20:73:81:b5:f2:25:3a:5f:f9:7a:cc:91:
                    1e:4e:fe:ae:10:00:2c:9f:92:51:c9:0c:27:c1:89:
                    9a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B1:FF:F3:D0:6B:0B:FD:9D:86:DE:26:FD:7F:F3:32:B2:68:EC:72
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab71a88e-b4a5-4132-b228-2b27e4825445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:7b:29:ad:23:0f:aa:79:ed:b9:93:07:7e:82:62:01:10:f5:
         12:c8:09:ef:2f:da:06:6b:81:7a:66:2c:6c:bd:02:0b:31:01:
         14:19:d9:60:a7:89:4b:fd:4b:bb:3f:59:4a:a2:e6:47:63:f3:
         64:20:b8:af:cd:f6:31:a9:4b:fb:3b:a7:eb:f2:d4:94:a8:93:
         da:e8:dc:1c:6f:ce:ff:ea:78:76:03:35:9b:4b:30:9d:11:0b:
         d6:df:52:00:6d:88:92:a2:62:75:30:57:8d:cf:85:84:b9:46:
         96:3b:8d:14:8f:15:1f:36:d5:06:b3:8c:1a:dc:6a:fe:dc:04:
         2d:6e:3a:a5:a3:ab:35:f5:5a:89:26:f8:b3:4f:e3:87:01:1f:
         58:f7:c4:7a:10:da:89:40:0b:71:7f:cf:50:15:56:7a:60:44:
         28:87:d6:ae:94:38:65:6d:d0:b2:0d:8f:eb:b3:9c:21:80:8f:
         a6:36:54:e2:14:e6:3b:5f:a9:25:3e:d7:84:5a:1a:66:b2:37:
         29:c5:a8:24:74:d6:f4:a1:b8:e7:b1:80:bb:62:d1:7b:5d:13:
         81:87:12:c1:b6:a6:d8:5d:5b:60:85:eb:7f:bb:0c:27:ec:a8:
         08:19:6c:c9:c5:18:fc:9d:a2:1a:24:6d:da:ac:e0:fc:b8:a5:
         70:1a:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----