Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/357d4f31-e6b5-401f-a02a-513afb43e813.roa
File:                     357d4f31-e6b5-401f-a02a-513afb43e813.roa (raw, json)
Hash identifier:          ZGdViXZVA31Z6vMk/Ukdvh68NwNTMHLHmfqR3Nd5NXA=
Subject key identifier:   0D:73:BE:CD:4F:41:2B:C9:B6:4D:CD:BE:C2:ED:6C:AA:84:D8:9A:EE
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       025A1C244EDC835AB5D74B958962A8CA64136855
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/357d4f31-e6b5-401f-a02a-513afb43e813.roa
Signing time:             Sat 13 Jul 2024 00:00:00 +0000
ROA not before:           Sat 13 Jul 2024 00:00:00 +0000
ROA not after:            Sat 17 Aug 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5a:1c:24:4e:dc:83:5a:b5:d7:4b:95:89:62:a8:ca:64:13:68:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 13 00:00:00 2024 GMT
            Not After : Aug 17 23:59:59 2024 GMT
        Subject: serialNumber=da71d7723042295acd7a9c47fba7c0578943acc14a358e98de90694da6145e00, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:22:3e:ce:fe:9e:71:f0:83:59:b8:37:5c:f0:
                    4b:2d:3e:3f:a8:95:3a:78:92:80:d6:00:36:25:a6:
                    e8:44:e9:ce:ed:a9:d6:74:81:01:3e:da:b6:3f:7d:
                    f3:1a:c4:4c:89:f8:6d:4a:77:15:ea:b5:9c:69:ec:
                    c5:ca:6e:b6:6b:a2:48:ad:34:d7:6f:55:26:3a:ae:
                    21:ec:9a:24:df:59:ab:c2:f4:9d:24:3b:d8:af:ce:
                    1f:7a:12:ac:0f:b5:65:2d:9e:e6:6e:eb:0d:72:c0:
                    93:32:89:38:6e:86:fa:9a:74:75:f5:85:f0:54:06:
                    d5:a1:0b:82:5f:86:3f:73:ef:25:8c:0c:b5:aa:ee:
                    ea:25:a6:8a:66:65:e7:76:d9:9f:93:0f:b3:28:f3:
                    e6:d8:6d:9f:37:1b:69:51:69:f3:37:0f:18:b6:40:
                    87:af:80:d5:b5:e4:66:3e:92:07:98:55:d5:8d:41:
                    10:a2:c5:32:7e:39:30:b5:e3:23:88:71:c9:a7:ba:
                    e3:98:fe:cd:1e:9f:76:98:3b:ba:aa:94:ac:5a:0e:
                    d4:18:91:78:bc:0d:e5:b6:6b:eb:c2:9f:d6:1f:0e:
                    8d:61:98:74:6d:8a:95:87:bb:36:9b:80:40:1e:4b:
                    b2:28:bc:a9:3b:4f:ce:45:b0:e5:c6:9a:b2:a2:10:
                    c4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:73:BE:CD:4F:41:2B:C9:B6:4D:CD:BE:C2:ED:6C:AA:84:D8:9A:EE
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/357d4f31-e6b5-401f-a02a-513afb43e813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:9a:1e:cb:40:af:0c:b3:1a:09:24:40:ff:39:34:58:3c:e7:
         1f:f6:2f:db:0e:c8:cc:de:b8:a6:2e:d9:dc:0e:6b:cb:8f:fe:
         a9:92:d5:6a:21:18:c7:82:53:b0:c5:27:c5:c3:8f:ab:58:13:
         bb:00:6a:e6:70:5b:d2:c6:eb:ec:fc:b7:85:3a:e3:47:32:4e:
         fa:b9:01:80:04:31:7a:12:4f:ea:14:02:ff:d0:20:8b:65:80:
         0c:47:64:21:87:44:21:83:f9:79:aa:f5:5c:81:6c:a2:2a:09:
         81:1c:99:30:14:55:d8:a5:48:90:12:47:d4:15:93:7a:58:5e:
         76:9f:7e:f8:2f:6b:08:d5:47:04:2d:cd:28:71:d5:a7:75:8c:
         cc:3b:5d:5e:ea:22:ab:4a:5e:68:f9:d3:53:6a:6a:c3:01:41:
         ec:8e:fd:9b:8f:da:ef:25:49:bc:f2:b8:1b:d4:b2:67:da:f0:
         35:45:2c:58:ff:51:d2:e7:06:10:fb:f9:9d:85:c4:b3:1c:e8:
         a9:d5:90:0a:cd:01:8d:7e:a9:1e:27:c8:2e:f2:8f:0a:7a:3d:
         1d:ed:59:c1:9e:ab:40:85:9c:2a:dc:a6:0f:92:fd:16:8c:eb:
         b3:fc:68:63:2d:5f:32:8d:72:4c:8d:8a:f9:a6:fa:87:69:4a:
         05:12:a2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----