Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/660f9c19-55e7-4ac8-8cd8-be9946975daf.roa
File:                     660f9c19-55e7-4ac8-8cd8-be9946975daf.roa (raw, json)
Hash identifier:          6ntvHWFwcdsqeKLS5HMxmlgsf/QD7qZfsSf9CG7fSks=
Subject key identifier:   84:AB:7E:22:28:86:44:5C:38:43:7B:F6:05:D3:BC:5E:F6:2C:8B:BF
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0C7058896B34858EB48B43312A95E9CCA23F1F9B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/660f9c19-55e7-4ac8-8cd8-be9946975daf.roa
Signing time:             Sat 13 Apr 2024 00:00:00 +0000
ROA not before:           Sat 13 Apr 2024 00:00:00 +0000
ROA not after:            Sat 18 May 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:70:58:89:6b:34:85:8e:b4:8b:43:31:2a:95:e9:cc:a2:3f:1f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr 13 00:00:00 2024 GMT
            Not After : May 18 23:59:59 2024 GMT
        Subject: serialNumber=4e187025dd9f662ff3a1710ed03d028064f7225a2f6f1c6f76ea566b43f39497, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:eb:10:d7:09:a5:de:7a:8e:62:50:be:7f:9b:
                    49:59:f5:c5:26:e0:a9:27:8b:50:64:13:a2:e3:86:
                    32:6f:d5:c4:30:ed:0e:18:e7:87:17:09:f4:58:09:
                    e3:8e:cb:b7:b1:cb:79:8f:b8:72:fa:0f:04:42:08:
                    4d:db:51:aa:1c:4f:25:53:2c:c0:5b:c2:e8:20:c4:
                    91:4e:3f:7c:9b:ea:e2:57:e6:db:df:5f:4b:b6:b9:
                    8b:08:c6:8b:20:9e:00:ce:aa:5f:d9:9c:09:c4:b0:
                    fc:fe:78:ea:5a:99:2f:c2:a0:7a:38:a2:82:91:9e:
                    6a:0d:8e:ea:fa:31:42:5b:c8:0d:fa:81:1f:8b:5a:
                    ab:14:c0:90:12:b1:c2:1d:76:cd:d6:d0:1c:44:8f:
                    e6:80:9b:78:93:ba:35:33:7c:7d:19:4b:9e:20:ab:
                    da:83:28:fb:fd:02:84:d6:e6:68:f7:83:87:f8:e6:
                    4d:db:1f:e8:95:26:ea:0c:f1:62:a8:ae:ba:41:73:
                    c0:66:a1:b6:40:ab:d9:5f:66:57:a8:3d:7e:3a:1a:
                    84:45:2e:6b:e2:0d:10:e3:6f:f9:ed:18:92:db:2a:
                    c5:fd:61:fe:7c:3b:a8:f0:94:8c:72:7e:a5:02:6b:
                    e4:31:a4:3e:b8:46:67:44:ca:f0:ff:4c:c0:7f:4b:
                    34:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AB:7E:22:28:86:44:5C:38:43:7B:F6:05:D3:BC:5E:F6:2C:8B:BF
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/660f9c19-55e7-4ac8-8cd8-be9946975daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:2b:2e:e8:22:98:62:1b:18:91:2c:ac:07:0a:52:24:27:ff:
         3a:50:11:fb:34:2f:d0:e5:88:44:61:eb:51:44:a4:98:1f:b5:
         fd:3b:7b:d5:b2:b9:e3:3e:9a:21:58:1b:47:e0:d6:9a:80:51:
         f5:ef:19:e4:d0:ec:25:c5:2f:74:1d:6e:3e:41:5a:94:d8:d3:
         de:03:24:d4:e7:72:2c:fd:da:c7:17:f8:3a:99:9e:1e:84:6b:
         50:0f:81:51:92:f4:d7:b2:13:07:34:68:52:0d:d6:c0:19:81:
         9f:52:54:73:3f:2a:45:e8:0a:f3:9a:57:7d:13:b5:a6:94:5b:
         61:c4:54:af:1f:d5:4c:cf:97:18:bb:ed:d5:16:6a:4e:3c:82:
         4b:ba:f5:e1:6c:26:e3:b9:f4:f2:0a:c1:df:3b:3d:6b:98:07:
         94:e7:40:68:8e:13:a3:6c:39:08:2d:b4:5f:36:e3:66:e9:7c:
         0e:98:98:62:96:8d:c5:a1:a8:bd:57:84:83:6e:f8:8b:b9:04:
         1d:37:ed:ac:82:7d:6c:25:91:ea:73:e7:a2:df:69:6b:54:aa:
         43:77:c9:fc:2a:5f:e9:d8:89:d7:18:57:36:2d:55:f9:e9:a7:
         7f:cd:e7:fd:30:53:6c:7b:84:d1:c2:b1:3e:57:52:1d:7b:25:
         13:7a:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----