Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b7e39dca-c33f-4fe6-80bb-01add91f3ff5.roa
File:                     b7e39dca-c33f-4fe6-80bb-01add91f3ff5.roa (raw, json)
Hash identifier:          /oenogwYwFp9keOHIZR6Mn1pCnN1aiY9qPrPOrdhcp8=
Subject key identifier:   22:D5:30:46:3E:37:A8:1C:D9:1B:28:44:35:0C:04:CE:CB:56:86:88
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       328913C90B7931A51389DECD6C38B82086C3938C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b7e39dca-c33f-4fe6-80bb-01add91f3ff5.roa
Signing time:             Tue 30 Jul 2024 00:00:00 +0000
ROA not before:           Tue 30 Jul 2024 00:00:00 +0000
ROA not after:            Tue 03 Sep 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:89:13:c9:0b:79:31:a5:13:89:de:cd:6c:38:b8:20:86:c3:93:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 30 00:00:00 2024 GMT
            Not After : Sep  3 23:59:59 2024 GMT
        Subject: serialNumber=79989ca0939a5e0da6b980460e4177e687d05a209b07d989956903e1667b36cd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:20:e8:97:2f:2b:32:83:0d:b9:8c:33:bc:
                    14:16:b6:d5:96:97:0f:c5:25:2a:1b:c6:69:78:e1:
                    b8:ad:19:0c:50:1e:1a:c7:69:87:2c:52:87:63:8d:
                    83:09:9d:35:ad:13:d1:02:04:36:f7:d0:2b:fa:ac:
                    03:f5:8e:44:eb:01:1d:18:1e:e3:20:b6:3e:ea:be:
                    be:92:9e:08:48:e4:b2:a0:02:ce:fc:c7:41:c1:cf:
                    34:81:9b:9f:c4:09:f4:0b:3c:b0:b6:52:06:74:e4:
                    2d:a6:d5:e4:09:6a:01:04:9f:1b:49:f5:f3:0a:bb:
                    18:19:42:2f:b8:b5:8b:f0:ff:c1:8c:9a:d9:28:87:
                    92:ec:b2:58:ef:d2:e8:80:2a:9d:07:0f:17:9f:d5:
                    f8:12:35:d9:4f:24:5f:fc:d9:89:02:ca:73:45:67:
                    73:8e:95:3f:3d:a6:c3:f7:7e:58:14:5d:48:b8:84:
                    db:85:74:a0:22:90:90:57:11:c7:a7:6f:12:27:1e:
                    3b:79:fc:0c:2f:e5:16:fb:fc:50:55:62:f5:96:61:
                    ef:95:ce:89:91:a4:23:bb:c3:ea:cb:01:70:cb:a4:
                    95:44:62:4e:7d:6d:0a:48:2b:51:c1:92:1b:ee:96:
                    f4:e9:e7:3a:26:aa:44:b1:a4:83:45:2c:8d:6c:03:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D5:30:46:3E:37:A8:1C:D9:1B:28:44:35:0C:04:CE:CB:56:86:88
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b7e39dca-c33f-4fe6-80bb-01add91f3ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:74:e3:4e:8b:95:71:f7:81:ca:83:e2:c0:ef:0f:83:13:86:
         4c:bb:2e:b1:ba:33:f0:52:6b:4e:52:c5:19:92:7c:af:fa:1c:
         92:43:74:e8:62:01:bd:c9:aa:72:e6:cf:dc:0b:49:b7:d6:6c:
         c7:89:46:06:2a:3e:40:14:09:ff:6c:b7:c1:ae:9b:f1:60:9e:
         ef:c4:72:9f:ea:b3:20:a2:f3:c6:22:9d:fb:b4:28:86:c3:6b:
         38:52:ee:75:83:b9:d8:63:9a:26:70:8a:dc:c7:58:ae:81:dc:
         84:6f:d3:09:ba:15:16:9d:69:68:f3:59:b1:09:f2:ef:75:14:
         12:08:9c:0f:b0:54:94:bc:df:3b:21:c8:01:de:ed:2a:d3:82:
         2c:ee:e8:ac:29:f6:2f:64:74:f8:b5:d6:d3:23:c7:6e:96:b5:
         77:ca:c5:c0:ce:06:a4:c8:38:b9:16:ac:88:a2:f7:fc:ea:ca:
         c0:8a:e8:bd:91:0e:4c:ee:c6:3e:2b:33:86:cf:86:ee:31:77:
         74:dc:1a:7d:2d:af:60:b7:0b:e6:31:28:ba:42:4d:60:bb:db:
         e4:11:45:65:46:5d:fc:41:82:e5:a1:4c:b1:db:02:1c:90:f0:
         d1:c9:3f:5b:58:e2:5a:5f:77:b5:82:b8:12:ce:d9:42:70:a1:
         a6:fd:58:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----