Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/086790f3-b53b-44ea-baff-10bb55b9ac1a.roa
File:                     086790f3-b53b-44ea-baff-10bb55b9ac1a.roa (raw, json)
Hash identifier:          XYD1MSTUxnBl3KnLqaNB57XDr6Zzce7cOMWg036xtls=
Subject key identifier:   E5:61:8E:AF:31:0D:31:E1:B1:34:35:40:05:00:F4:82:D9:FC:B1:22
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       03201B49F99C78866878FC7F48FF1F654DB9CC63
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/086790f3-b53b-44ea-baff-10bb55b9ac1a.roa
Signing time:             Sat 30 Nov 2024 00:00:00 +0000
ROA not before:           Sat 30 Nov 2024 00:00:00 +0000
ROA not after:            Sat 04 Jan 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:20:1b:49:f9:9c:78:86:68:78:fc:7f:48:ff:1f:65:4d:b9:cc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 30 00:00:00 2024 GMT
            Not After : Jan  4 23:59:59 2025 GMT
        Subject: serialNumber=14d5db4beefe22ab2f0f204fe4aa6ffe1c173c4b74530521cab7362c7f5a95a3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2b:b2:f2:fc:64:f4:b5:6a:9a:c6:eb:a7:1b:
                    66:77:be:98:6c:56:74:e0:7a:98:b2:26:eb:4a:f6:
                    d3:e2:13:ae:17:0f:43:23:14:da:bf:ea:f9:db:f3:
                    d6:61:f1:01:cf:b8:a9:7f:4e:cf:61:cc:6d:4c:1b:
                    7c:c3:e3:6d:dd:4d:87:d2:fb:1d:0a:20:11:a6:d5:
                    57:a0:62:79:2e:b1:9b:7b:9e:12:92:e2:1c:cc:99:
                    be:57:5b:25:0a:37:b7:bb:6c:63:bf:81:78:63:65:
                    b8:e2:0c:77:0d:97:1d:07:0b:e7:b5:97:d9:4a:18:
                    8f:b6:b0:c6:9c:95:81:21:2a:13:5b:48:be:b5:cc:
                    7a:4d:de:e6:79:5b:e6:c7:eb:d1:28:5c:ef:d4:59:
                    52:b7:53:bc:ea:45:5b:62:68:b5:68:d9:06:bf:8a:
                    b3:0c:4c:67:7d:04:a3:18:29:ec:49:78:5d:f8:f9:
                    bd:97:af:bf:91:e2:f0:ea:32:6a:1b:a7:7d:6c:4c:
                    5d:d3:e8:39:d7:a2:d4:e5:3f:0f:63:4c:f3:1b:e1:
                    1e:bd:dd:4c:c0:c6:c5:41:4b:2e:06:00:99:9c:8b:
                    57:36:86:a0:fa:87:1e:2e:21:2b:30:46:a1:99:1a:
                    1c:87:b4:e3:9d:3f:16:3a:f8:17:42:8a:dd:fd:4a:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:61:8E:AF:31:0D:31:E1:B1:34:35:40:05:00:F4:82:D9:FC:B1:22
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/086790f3-b53b-44ea-baff-10bb55b9ac1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:be:22:7c:d0:d1:f8:d9:42:63:42:5d:f6:56:6e:8c:a7:e5:
         27:1c:e5:39:a9:0f:03:fd:a5:89:c2:0b:71:3c:f9:ca:f5:f1:
         8b:1b:84:00:dd:40:b4:41:0e:57:b9:50:ad:da:15:8a:f9:d6:
         0c:79:92:42:4c:b9:4a:dd:a9:ba:90:11:24:ef:25:95:c3:3e:
         ef:78:59:b0:19:29:62:10:97:91:04:c6:34:b6:14:23:da:e1:
         c4:aa:f7:e3:8d:18:eb:7a:26:65:21:3d:e7:d1:f8:92:a7:03:
         12:30:52:ea:b6:ad:a3:d0:9e:1a:06:2d:9c:69:c7:d8:4d:c3:
         38:0d:fd:7c:cb:b3:b3:42:5a:fd:7d:46:88:2d:9f:9c:4f:e3:
         b2:5a:dc:71:1f:76:dc:a4:19:f7:56:6a:85:ed:2a:9e:17:aa:
         d0:a9:ee:5e:62:f1:05:e8:bd:b7:64:f4:e5:f5:da:68:17:58:
         99:ac:da:2f:08:e0:fc:79:35:81:26:5d:a5:d1:c5:e3:34:f1:
         1d:c8:96:55:03:02:ab:3b:08:a6:6b:01:72:9e:c5:cd:ee:54:
         47:60:61:4b:78:78:aa:f1:ba:bf:8b:a0:c3:ab:de:46:5c:4b:
         96:a1:d0:05:e0:41:94:27:18:78:e1:0e:88:0b:6e:76:68:ad:
         76:7b:39:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----