Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/91261d1b-3bea-4f36-8d94-e004ccf1278a.roa
File:                     91261d1b-3bea-4f36-8d94-e004ccf1278a.roa (raw, json)
Hash identifier:          rGX92pfZBA0nWqJFYPv/+Eln8nh/QyyYs73r9EA/flk=
Subject key identifier:   D3:3D:9C:4F:F8:F4:81:E4:E5:57:03:12:05:B0:5E:A1:B8:F9:36:CD
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0D2E79B18416349776AC89A59299291DDBE6359E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/91261d1b-3bea-4f36-8d94-e004ccf1278a.roa
Signing time:             Fri 02 Aug 2024 00:00:00 +0000
ROA not before:           Fri 02 Aug 2024 00:00:00 +0000
ROA not after:            Fri 06 Sep 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2e:79:b1:84:16:34:97:76:ac:89:a5:92:99:29:1d:db:e6:35:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug  2 00:00:00 2024 GMT
            Not After : Sep  6 23:59:59 2024 GMT
        Subject: serialNumber=318b9ac77994d761978ec03237e14dc8df23dc71b6400afef37fa59d17006801, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:84:47:ec:44:54:fb:49:2c:39:c9:7a:fe:bb:
                    85:c3:39:1f:4c:84:2b:d6:2c:e5:b1:36:ff:27:f5:
                    fe:b8:55:57:db:a1:fd:fe:aa:38:45:92:cb:29:26:
                    8a:33:61:b2:b9:4b:ae:ff:ee:f5:37:26:a9:f8:4e:
                    00:43:b8:65:19:4d:48:cc:67:22:81:91:78:eb:ae:
                    85:e1:09:e6:01:19:73:70:ec:68:0c:cd:67:80:3c:
                    74:d6:a2:44:02:3a:52:87:ef:43:d6:90:a6:e8:de:
                    d5:4c:62:b2:c2:02:23:3b:1e:1a:d6:67:7c:d0:2b:
                    68:91:5c:b9:e4:a1:34:db:e0:a7:e4:c2:c6:2d:63:
                    f1:df:93:cf:6b:a5:be:9d:a8:0a:15:25:2a:65:f1:
                    2b:0d:98:da:87:d7:aa:fd:93:8e:96:35:c4:4c:d7:
                    fa:20:1d:18:91:5f:3c:25:52:ee:11:87:74:7b:a6:
                    38:55:ef:ad:b5:78:0c:5a:2d:97:fe:df:9e:8b:94:
                    b8:7e:22:3f:44:8c:31:ba:ba:1c:ed:43:12:04:cc:
                    7f:9a:f7:ea:60:04:62:d2:b4:80:de:d1:1c:f6:34:
                    8b:53:5d:d1:58:f6:41:2e:3e:db:93:6b:fc:4d:47:
                    10:d6:2f:f6:6a:88:d3:be:7b:7f:fb:4b:66:70:cb:
                    25:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3D:9C:4F:F8:F4:81:E4:E5:57:03:12:05:B0:5E:A1:B8:F9:36:CD
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/91261d1b-3bea-4f36-8d94-e004ccf1278a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:ae:e6:5b:a4:31:43:76:d4:7e:3e:c3:a1:60:61:e0:9d:08:
         4b:89:88:81:42:c9:cd:1c:9a:cb:f2:bd:bf:00:8a:76:4d:78:
         3e:9d:63:3a:e9:9d:77:22:eb:66:62:c1:43:3a:13:b6:9a:93:
         1c:20:4e:3d:26:81:d9:75:9c:04:43:43:b4:5c:f4:ee:9c:99:
         07:70:f1:c4:03:bc:f4:c7:bc:c4:df:60:81:c4:c8:91:4b:69:
         7d:36:fe:24:8d:c4:8a:17:8a:22:1a:6b:a8:74:1a:3a:e5:87:
         0f:dd:b1:6e:27:09:df:9c:64:a8:44:5d:1d:58:92:b0:d4:06:
         c6:d2:44:99:38:97:d9:87:39:82:08:7e:5e:65:55:d2:0a:49:
         48:69:69:8a:9f:47:72:cb:99:91:6f:7e:d7:64:de:a8:2a:47:
         09:04:2a:dc:18:5d:ad:16:90:fc:bd:ad:29:96:fd:7e:c6:4a:
         f7:47:46:16:23:9e:fd:09:63:ef:72:1e:b4:37:b4:89:77:eb:
         ee:bc:62:8b:2c:48:f6:0b:21:e7:8d:bf:cf:cd:3a:b2:f6:59:
         b0:e3:c2:68:81:f0:45:ab:d7:a8:4e:bc:10:88:35:fa:04:43:
         a7:20:c9:6d:6e:01:cf:70:6f:a8:df:55:83:fa:d9:33:37:5c:
         b8:88:27:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----