Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/474c8548-2e6c-43f7-b840-57714dc980f2.roa
File:                     474c8548-2e6c-43f7-b840-57714dc980f2.roa (raw, json)
Hash identifier:          7PaYPLrgRW3a8TOQHluOotEOmC+2OpOIeGPCVWXei94=
Subject key identifier:   E2:5F:EC:06:9E:F4:0E:A1:07:D4:DA:FD:85:3C:A1:13:51:01:12:77
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1D809413E20B18546AF295D9C1E2B94149718255
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/474c8548-2e6c-43f7-b840-57714dc980f2.roa
Signing time:             Thu 18 Jul 2024 00:00:00 +0000
ROA not before:           Thu 18 Jul 2024 00:00:00 +0000
ROA not after:            Thu 22 Aug 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:80:94:13:e2:0b:18:54:6a:f2:95:d9:c1:e2:b9:41:49:71:82:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 18 00:00:00 2024 GMT
            Not After : Aug 22 23:59:59 2024 GMT
        Subject: serialNumber=65146efc78b7d10c7fb7af068545054dab35cb0e9fadf1413bf5d536caa65d42, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:83:ad:a8:9d:d7:e7:f0:82:0d:bd:27:89:
                    17:ae:9e:35:e8:64:90:a9:c1:ac:b6:7d:ea:27:49:
                    8b:21:4e:83:97:be:6f:e1:41:b5:aa:b2:8c:aa:63:
                    89:2b:fe:40:9e:79:05:31:a3:21:fd:b1:e8:5b:b8:
                    ec:b0:58:04:ea:13:ce:bc:11:d8:cd:d7:19:4f:09:
                    76:aa:8b:23:9a:84:8c:5b:e5:c0:90:bb:bd:75:2c:
                    6f:83:d8:b0:8a:56:b8:33:b9:04:d4:d3:53:aa:65:
                    fd:c7:c8:f3:6b:c8:17:a0:1a:90:40:c8:bf:e0:3a:
                    ed:59:98:73:ba:a1:4a:cd:75:e3:b2:ce:d5:73:97:
                    16:26:3d:04:52:a1:46:43:2d:b7:5f:bd:0b:e4:ac:
                    93:9d:cf:23:f6:ee:50:89:3a:dc:a6:a4:36:d9:a5:
                    29:d1:5e:eb:2a:0f:16:fd:f7:ee:10:ae:35:f6:5a:
                    bd:2f:2c:25:e0:c4:f0:f7:f7:55:fc:15:34:6c:dd:
                    52:04:7a:86:51:33:c0:52:2f:89:a6:2a:16:da:b7:
                    38:6a:3e:ed:60:61:f9:07:dc:d9:41:86:10:62:44:
                    8e:45:6b:ea:4b:96:56:34:30:4e:9c:2a:0b:6c:b6:
                    0d:f7:7f:a5:e5:e1:3e:5d:4a:29:13:03:66:24:82:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5F:EC:06:9E:F4:0E:A1:07:D4:DA:FD:85:3C:A1:13:51:01:12:77
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/474c8548-2e6c-43f7-b840-57714dc980f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:b2:b1:1d:4e:f8:11:01:77:10:9c:20:9e:21:5f:22:84:ff:
         b0:08:cd:ed:7a:a4:65:8c:c2:d4:a4:ee:4a:24:09:d3:f7:03:
         eb:64:a5:69:a2:83:d2:d8:4f:f9:81:5c:73:8e:56:e8:e0:b4:
         93:5a:84:2a:13:1b:4c:ab:9e:bd:4c:d6:37:ef:4d:dc:d7:81:
         b0:c4:70:08:8d:6f:83:8c:9c:fc:e3:a8:99:b3:bb:85:ce:15:
         2e:cc:82:d2:85:15:38:f9:fc:de:12:5d:b8:4a:bb:b1:72:7a:
         e9:39:88:44:64:04:3e:f7:3a:15:d6:70:69:4e:ac:a0:ed:bc:
         d1:63:6c:3a:89:da:d2:1d:b5:86:e6:10:81:72:17:93:21:a6:
         f3:a3:48:d7:9d:23:9c:9e:59:ba:6f:f0:eb:a2:a1:2b:4d:26:
         ca:01:6d:97:35:1c:8b:f3:bd:66:ac:67:8e:69:c0:57:e9:4a:
         c9:0a:38:5b:3a:4d:49:43:5d:ce:77:84:e0:6a:58:22:22:d0:
         02:d8:ec:10:67:3b:9e:84:66:c6:7d:7b:d1:5f:1f:b1:a4:21:
         ef:19:d1:fd:32:44:cf:13:22:ac:2b:24:b4:51:8a:37:7a:64:
         77:9a:f2:81:1e:16:74:76:3c:67:7b:e5:27:1e:8c:e6:b6:74:
         5d:61:6c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----