Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/60ac855a-5698-40a5-bf78-c59ef90f52ea.roa
File:                     60ac855a-5698-40a5-bf78-c59ef90f52ea.roa (raw, json)
Hash identifier:          iMHYqsklc60l5eSbj4kQ2eQo4NDijep1kgVwseXGPLs=
Subject key identifier:   C3:41:91:BB:E2:D0:73:9B:77:E8:60:2A:8C:AC:2A:44:0A:C9:5B:1A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1BDA2C24D1B41F4FE75159A9624634D507C8E0D6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/60ac855a-5698-40a5-bf78-c59ef90f52ea.roa
Signing time:             Mon 19 Jun 2023 00:00:00 +0000
ROA not before:           Mon 19 Jun 2023 00:00:00 +0000
ROA not after:            Mon 24 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:da:2c:24:d1:b4:1f:4f:e7:51:59:a9:62:46:34:d5:07:c8:e0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 19 00:00:00 2023 GMT
            Not After : Jul 24 23:59:59 2023 GMT
        Subject: serialNumber=365b6a3458b28986445d943fbe4d48f3c073424d0d5d7ea8259a06110856705e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:64:02:08:8f:21:aa:d1:5e:a4:f7:ba:ef:87:
                    19:bb:c6:6b:32:27:c8:f7:f2:56:a5:ac:e5:10:00:
                    9c:f5:59:1f:a0:b7:b8:29:92:68:fd:1a:1b:a2:f1:
                    ea:49:38:2f:59:69:54:06:8e:8b:2f:63:fd:4f:8f:
                    13:9e:01:38:c4:3e:b7:1f:f2:72:f5:85:75:93:97:
                    94:48:44:3e:b8:51:88:30:a7:09:5c:b2:dd:0d:19:
                    15:15:0d:de:d5:ef:b4:03:a1:8c:f3:83:b1:43:ff:
                    27:d1:25:fc:e1:a0:bf:aa:5d:ef:61:92:ff:b7:2a:
                    dc:27:76:95:b8:00:0c:4c:1e:a2:b5:f9:b2:e2:18:
                    ee:a0:e8:97:a6:9e:2c:4a:7e:39:ac:20:40:3e:3e:
                    64:b6:d7:7f:bd:9d:2a:37:f8:0e:ea:a9:91:5f:28:
                    83:cd:5b:a1:3b:aa:61:2a:13:f5:5e:07:ae:29:a5:
                    1d:49:bb:f1:b0:fa:b8:11:a7:6b:b2:01:f1:f1:8a:
                    cf:47:09:b1:0b:6b:02:40:31:30:f1:c6:9f:8c:74:
                    a8:c7:f2:80:9a:9a:ac:66:7c:7a:1b:c0:a9:c8:a5:
                    e7:10:33:68:c0:18:7e:18:3b:de:65:24:eb:5b:28:
                    d1:35:c3:f6:00:73:cf:11:48:c2:e7:91:cb:98:12:
                    a3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:41:91:BB:E2:D0:73:9B:77:E8:60:2A:8C:AC:2A:44:0A:C9:5B:1A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/60ac855a-5698-40a5-bf78-c59ef90f52ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:12:78:09:42:e3:7a:e7:96:4a:d2:95:7b:69:e0:ab:b7:a7:
         83:8e:44:80:ad:a6:88:ae:2c:f1:76:82:4e:5f:b0:93:8c:c9:
         8f:2f:a1:61:1d:b5:c0:ca:66:c0:13:ad:fc:0f:10:e7:d4:56:
         f8:8b:36:54:34:64:10:95:fd:18:47:96:1c:0a:e9:4d:31:06:
         48:5f:d6:d1:8a:e4:2d:ea:f6:ea:ec:d5:f8:d9:f8:65:7b:50:
         e1:9f:d7:13:a5:dc:68:f7:35:3b:0d:d0:af:ff:0b:97:8b:b8:
         66:96:54:a4:1e:b0:90:31:84:3a:e7:2b:fd:ad:58:bb:4b:90:
         7e:60:7d:0b:e2:47:95:54:bf:73:e8:13:00:c7:c0:89:f9:f8:
         aa:4d:c8:03:06:5b:d6:f8:88:05:9d:8a:68:c2:1a:40:53:3e:
         a3:06:64:77:e0:bf:c0:41:4c:97:f5:c5:63:ea:a3:39:c7:01:
         61:58:9b:d3:28:fa:ad:ea:08:4d:23:a8:46:8c:4c:54:ac:ff:
         38:79:6a:5b:c1:14:61:dd:05:83:3f:61:bb:1a:5f:af:7d:9a:
         3a:73:45:c2:ae:5d:9c:72:5c:8e:a9:d2:cf:c0:f6:48:fb:08:
         81:7b:9f:de:96:8a:cd:7a:df:28:cf:2f:7c:13:58:6f:13:f6:
         ec:73:81:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----