Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/32d95f57-8243-47fd-9bff-e1f71bfee42e.roa
File:                     32d95f57-8243-47fd-9bff-e1f71bfee42e.roa (raw, json)
Hash identifier:          71QV3hDjnV8ExHG/EflZUwXbJk76c+HEySFem7V9hKI=
Subject key identifier:   47:25:60:E6:AF:F5:BF:68:35:A5:80:B3:26:69:0E:29:F5:7D:4C:85
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7AF3AA78A421095A5930CAEC7716CDF0B147AE20
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/32d95f57-8243-47fd-9bff-e1f71bfee42e.roa
Signing time:             Tue 13 Aug 2024 00:00:00 +0000
ROA not before:           Tue 13 Aug 2024 00:00:00 +0000
ROA not after:            Tue 17 Sep 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f3:aa:78:a4:21:09:5a:59:30:ca:ec:77:16:cd:f0:b1:47:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 13 00:00:00 2024 GMT
            Not After : Sep 17 23:59:59 2024 GMT
        Subject: serialNumber=281c903833f4c097e90fed6c4c22626554691f3da40d2238aeeac8efbbbff0b7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ce:e6:ef:52:4f:80:95:0d:1f:25:59:fa:12:
                    e0:58:a5:a9:f9:a4:41:27:ce:f0:28:a3:aa:83:18:
                    59:39:e6:4c:f2:ff:e5:fa:b7:c1:84:1e:b8:e8:d7:
                    e6:1e:d5:56:d8:5f:ea:ac:3c:1e:f3:1a:79:37:ac:
                    f0:04:3f:9e:47:d4:ff:90:dd:50:3e:42:dd:3c:dc:
                    a8:a5:e0:b7:4a:68:72:80:d6:e4:6c:46:92:b4:5a:
                    76:38:1d:45:27:74:36:2d:53:34:5c:e7:25:58:ea:
                    23:b8:27:3a:01:a5:f2:1e:02:6a:be:ee:13:50:94:
                    25:3e:0f:4d:0a:93:2a:14:c1:fc:6d:3b:99:5d:c5:
                    65:84:ee:10:cd:0a:27:b7:5d:9b:1b:4b:70:3e:1e:
                    8d:2d:14:49:45:97:48:93:e9:07:70:5e:c8:53:9d:
                    ce:ee:cc:47:e0:29:d9:7b:81:f4:db:a7:f2:bc:77:
                    df:68:23:6c:33:5b:b1:91:31:ac:7b:8d:7d:1f:7e:
                    85:da:db:e3:de:ce:23:ef:c1:dd:84:2d:b6:a7:5a:
                    a2:e0:9d:10:94:fa:0a:3a:8b:ab:cd:37:1c:66:4c:
                    44:9e:92:c8:07:da:1e:61:88:ec:a8:0d:be:e2:86:
                    a9:c9:9e:39:c7:14:90:0a:86:96:d1:74:69:c2:83:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:25:60:E6:AF:F5:BF:68:35:A5:80:B3:26:69:0E:29:F5:7D:4C:85
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/32d95f57-8243-47fd-9bff-e1f71bfee42e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:5f:93:63:c9:25:4a:df:29:c4:19:2a:a6:b9:28:0c:0d:85:
         49:82:e8:b6:2d:80:54:c8:8b:b7:2f:04:79:09:bb:ec:6c:0b:
         26:dd:53:5e:90:17:a3:63:c2:02:db:5b:29:0b:b4:68:92:90:
         88:b4:f3:cb:67:d1:0e:17:db:36:7c:73:81:fa:b2:18:8a:1a:
         bf:c6:25:47:59:a7:01:af:a1:41:f3:e9:0b:70:52:a5:08:16:
         77:60:18:97:78:6b:ab:df:2e:7f:45:2d:de:04:b7:1d:38:8f:
         3b:02:d8:c4:fc:d9:8b:1b:08:d0:5a:e9:7b:ca:57:a8:9e:33:
         74:bb:fb:9c:0b:9a:34:d2:eb:3d:11:3f:3f:a9:d3:18:74:66:
         b0:93:79:1d:cb:da:5c:82:6b:cd:eb:91:5f:00:04:a0:d0:30:
         06:bf:2f:8c:6b:27:d8:71:11:1c:07:b6:9a:cf:33:bc:d6:58:
         90:ec:b1:da:95:28:0c:5c:47:6f:56:70:72:34:6b:ec:ff:51:
         ec:49:68:ba:87:b2:b2:d5:7e:43:37:13:5d:03:97:26:0a:08:
         5d:af:87:67:ed:4b:77:8d:d6:99:d0:ea:f9:14:e8:4e:3c:aa:
         24:ec:04:00:c0:42:e6:3a:e8:37:28:d3:64:58:4e:e4:c6:c3:
         08:b1:7c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----