Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0b2bee1c-a0b5-408e-a8a4-52ddcb8e9c65.roa
File:                     0b2bee1c-a0b5-408e-a8a4-52ddcb8e9c65.roa (raw, json)
Hash identifier:          GduN1R0pnNVmOnenbJjzCo3ek2IdG+qjPfjVAtIYYc0=
Subject key identifier:   B4:6F:F6:86:07:50:8F:9E:86:35:72:94:67:CB:37:C1:8B:EF:FE:DB
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5F7A9FBACE1E15F7F2D636B9714F8DB9BE42FFC2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0b2bee1c-a0b5-408e-a8a4-52ddcb8e9c65.roa
Signing time:             Thu 23 Nov 2023 00:00:00 +0000
ROA not before:           Thu 23 Nov 2023 00:00:00 +0000
ROA not after:            Thu 28 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7a:9f:ba:ce:1e:15:f7:f2:d6:36:b9:71:4f:8d:b9:be:42:ff:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 23 00:00:00 2023 GMT
            Not After : Dec 28 23:59:59 2023 GMT
        Subject: serialNumber=c7efdf78cbd95504d3f8280d15507719c902590011d1bdc57ecbc3f54583592b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f0:d5:b5:cf:cf:d1:07:db:4e:16:bd:86:72:
                    d0:3b:53:40:d0:31:c7:e4:fa:42:ee:6b:34:80:89:
                    e6:d6:f2:a0:7b:dd:89:8e:fc:d6:3c:f2:28:ae:e5:
                    93:11:a8:4b:f0:d5:05:16:eb:82:b8:55:8d:98:e8:
                    1f:02:2b:87:d6:e5:2f:26:51:2b:83:19:ee:7d:38:
                    79:90:28:aa:b3:ef:d3:63:c7:b4:7c:56:10:97:8d:
                    52:aa:73:8e:bf:97:96:55:5e:a4:50:64:59:15:9a:
                    09:07:5e:52:a6:2e:8a:ee:35:3b:6d:48:20:f8:4e:
                    29:c8:39:9a:9e:37:47:e3:9a:52:a1:67:31:7d:78:
                    b0:91:43:87:ac:05:6c:68:86:d2:30:6b:e7:b8:ed:
                    e5:fa:3b:bd:25:64:10:8b:9b:78:62:7c:24:f4:74:
                    f7:c0:9a:88:ed:d5:90:46:3c:60:53:41:65:f0:0e:
                    46:9b:d9:fd:da:8e:5b:d6:d1:8e:43:06:8f:f1:f8:
                    3d:6a:a4:6f:5f:3e:e8:7d:9f:0c:0f:2a:b8:26:32:
                    e2:93:9f:1f:bf:26:64:d5:e4:fd:98:7a:d0:96:84:
                    0f:b0:69:aa:ce:38:b7:3f:14:9d:18:54:32:ad:1a:
                    ac:97:ef:75:e2:55:ed:ca:69:55:99:38:34:5c:ca:
                    a7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6F:F6:86:07:50:8F:9E:86:35:72:94:67:CB:37:C1:8B:EF:FE:DB
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0b2bee1c-a0b5-408e-a8a4-52ddcb8e9c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:83:f0:2b:93:d8:4a:39:aa:af:b1:ce:e0:a2:76:81:db:4f:
         13:34:9f:65:35:2c:5b:fa:41:34:48:b2:62:c8:c1:c0:31:f4:
         cb:33:25:f0:c0:21:ac:0a:e6:06:d8:48:8e:20:1e:fa:8e:1a:
         34:79:99:db:6b:66:55:de:73:8c:1f:31:a0:6b:2f:d8:7b:f3:
         9c:26:45:6b:6f:e2:c4:04:e4:5d:7c:ef:ce:7e:33:21:ee:55:
         df:1f:8b:59:ad:fb:84:0a:1c:6e:5f:9e:5c:05:34:3a:d3:2b:
         4a:dc:1d:7b:d4:c3:a3:70:e2:a4:d1:2f:4e:c3:85:70:36:1f:
         bb:ef:78:f6:93:39:93:70:8c:11:8e:cc:5d:46:80:0c:a9:3a:
         b2:1f:5a:94:2e:ea:2e:52:94:8d:e3:4e:31:71:3d:d9:22:e2:
         aa:ee:1d:dc:fb:34:5b:98:bf:56:5f:13:49:6e:4a:77:0a:18:
         a5:58:40:00:7a:e5:00:e2:18:f4:6a:64:33:fc:dd:de:60:1e:
         51:b0:12:70:e8:e5:c9:72:fb:2c:1a:76:bd:20:f1:bd:6d:ef:
         1d:42:33:61:27:88:4e:45:bf:c2:35:13:71:9f:fa:44:2b:50:
         75:f6:b1:25:c4:81:22:43:d1:13:df:ea:3d:aa:a9:6f:77:50:
         c7:cb:28:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----