Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dbc350f6-492e-4f76-af3e-959d8204bc84.roa
File:                     dbc350f6-492e-4f76-af3e-959d8204bc84.roa (raw, json)
Hash identifier:          1nXm6yEtPhh8DYuazxKvUeH7WR8FmGooWdSLngUSva8=
Subject key identifier:   2F:19:17:EB:FE:E7:D5:F6:28:DB:4C:CC:37:97:E8:B4:04:19:4C:B8
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       17F97FD39CB47415BF80B33C2DCF9AD641E9D1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dbc350f6-492e-4f76-af3e-959d8204bc84.roa
Signing time:             Tue 18 Jul 2023 00:00:00 +0000
ROA not before:           Tue 18 Jul 2023 00:00:00 +0000
ROA not after:            Tue 22 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f9:7f:d3:9c:b4:74:15:bf:80:b3:3c:2d:cf:9a:d6:41:e9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 18 00:00:00 2023 GMT
            Not After : Aug 22 23:59:59 2023 GMT
        Subject: serialNumber=f852a4f280fa811dbc53ef0798e514f283a90eed0e946e134d12d947e8c8dad8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:78:2f:b4:ee:8b:a2:af:a9:64:63:e4:84:a0:
                    69:ea:50:a4:38:7e:57:27:17:be:0a:9f:89:e2:92:
                    f1:c3:d9:c0:fb:5a:5c:69:04:5f:a3:be:52:d0:45:
                    a4:eb:48:31:b0:d2:0b:e7:39:90:7c:6e:81:08:90:
                    57:a5:68:2a:59:80:93:5d:7b:d2:a0:08:c7:76:33:
                    98:ed:5e:df:32:9a:4e:64:4e:ec:cf:6f:b5:1c:31:
                    3e:c8:ae:62:8f:ca:12:74:b2:c7:8e:87:59:c3:30:
                    97:f3:4f:6f:6f:e4:7a:3f:49:37:09:8c:bf:d7:00:
                    2f:b6:96:96:97:f5:77:a6:26:f7:71:ee:4a:56:ee:
                    af:d8:50:0a:f8:1f:ba:dd:85:07:ff:4f:86:3b:99:
                    34:bd:43:6d:12:d1:a5:c4:ae:11:0a:ca:1b:2b:34:
                    7c:50:29:8b:1b:13:45:2e:ae:4a:71:c4:71:df:1f:
                    6f:e6:2d:70:b0:be:45:a4:69:af:cd:d2:81:80:57:
                    fc:0d:bf:91:e3:da:a5:4d:78:ca:4d:04:55:2e:ae:
                    3f:4a:7a:37:eb:2a:e6:f8:66:78:36:37:2d:fc:37:
                    5a:03:61:7c:29:0c:8b:22:55:5c:cd:94:95:d6:95:
                    72:41:fb:a8:94:85:9b:10:1c:df:3c:ff:d3:6c:2b:
                    8d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:19:17:EB:FE:E7:D5:F6:28:DB:4C:CC:37:97:E8:B4:04:19:4C:B8
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dbc350f6-492e-4f76-af3e-959d8204bc84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:a7:e3:89:e5:88:ff:a0:21:a0:1a:3e:51:69:dc:da:5a:25:
         1f:e8:b8:82:f6:f4:a3:07:42:3f:fb:50:32:86:8c:a4:aa:7f:
         c2:1f:bd:e4:8c:64:14:76:57:6e:77:e1:29:bd:69:e8:3f:84:
         93:8b:50:1e:3b:29:5c:92:e3:69:1d:2c:98:ff:8a:6a:e2:f8:
         17:04:ef:e8:ac:8f:45:85:7d:0e:dd:a9:8d:52:f7:88:4c:34:
         b1:bd:4b:8c:91:84:03:91:86:4f:cb:6f:85:78:2c:09:f4:17:
         2a:70:d6:37:e0:40:d3:bb:83:db:0e:6a:bb:5a:4a:9b:aa:30:
         ae:ff:5a:82:74:3f:34:76:14:62:f1:b9:c4:1d:b2:85:18:ce:
         9d:ec:69:91:b8:17:0b:e2:07:5f:48:62:b9:1a:73:38:56:24:
         f3:52:66:d6:b7:c5:02:bb:b4:0c:0d:65:e3:27:9e:f2:75:26:
         18:82:af:e2:2c:75:cc:0d:94:1f:b2:f4:0f:a9:9d:d1:06:7b:
         20:2f:b5:a8:d7:78:73:7a:0f:7f:ad:0b:d7:63:35:12:a3:f7:
         c3:df:c7:9b:8c:46:13:4f:16:fb:dc:e2:c0:50:a7:6b:7b:03:
         7c:5a:94:df:0e:55:fa:e2:47:0f:87:c8:99:c0:0a:06:3c:a2:
         07:07:c8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----