Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c1d22cb7-bb2a-4374-bb9e-6318abf26388.roa
File:                     c1d22cb7-bb2a-4374-bb9e-6318abf26388.roa (raw, json)
Hash identifier:          YgSWgyeeOLrbWm0a2Id5qZdQFQ5V11EymwNrA400uyE=
Subject key identifier:   62:E0:E2:3F:CD:98:67:CD:D7:77:B9:E5:BC:BA:2D:75:63:71:AC:E7
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0F351B16647BD5A176BB3B3EF6B28E3E49301119
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c1d22cb7-bb2a-4374-bb9e-6318abf26388.roa
Signing time:             Mon 03 Feb 2025 00:00:00 +0000
ROA not before:           Mon 03 Feb 2025 00:00:00 +0000
ROA not after:            Mon 10 Mar 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:35:1b:16:64:7b:d5:a1:76:bb:3b:3e:f6:b2:8e:3e:49:30:11:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb  3 00:00:00 2025 GMT
            Not After : Mar 10 23:59:59 2025 GMT
        Subject: serialNumber=6746d368dec77514ce1f8305505f6b329091767988e5818793cfccbaff690f35, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:c9:34:90:c7:21:98:67:69:dd:31:f0:63:
                    2c:7a:46:08:aa:77:fd:d5:5f:60:d9:d0:b5:d2:1c:
                    58:e3:e9:36:eb:42:72:f7:ac:da:71:d6:af:fa:dc:
                    6f:62:56:5c:74:99:5e:42:8e:0a:98:40:ea:f2:86:
                    f4:fe:40:8b:ca:29:18:f9:bf:65:16:87:59:32:0c:
                    30:7d:70:26:b7:c9:06:71:83:09:1f:c1:28:00:58:
                    70:09:f2:d7:63:e4:d1:36:d7:2c:9b:e1:b8:c8:94:
                    19:5b:f7:f3:5e:b0:f4:04:2d:4a:bd:a1:b9:1c:46:
                    f9:9d:6d:9e:39:22:26:03:6c:2c:f0:12:e9:99:f3:
                    9b:2b:7a:fe:b5:1f:a8:cb:8f:d9:d3:1e:8f:43:80:
                    9e:b3:13:30:6b:ee:fd:bb:3d:72:a7:2b:fd:c8:05:
                    d3:db:a2:3f:a3:33:eb:5d:79:69:1c:c1:dd:9e:22:
                    cf:4b:6e:27:e4:dd:63:8f:96:27:26:3e:ac:3a:c9:
                    83:d7:87:f1:bb:26:d0:fa:3e:1f:0b:c7:1f:21:07:
                    12:cd:d7:58:64:17:fe:14:63:3d:2c:eb:43:64:a3:
                    2e:36:d3:6e:53:5c:f0:05:8a:67:48:42:b3:c4:c8:
                    68:ef:b8:ac:55:ce:ff:13:8f:a5:36:50:f7:02:42:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E0:E2:3F:CD:98:67:CD:D7:77:B9:E5:BC:BA:2D:75:63:71:AC:E7
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c1d22cb7-bb2a-4374-bb9e-6318abf26388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:78:3a:1e:e3:3f:b5:a8:9a:62:13:77:c5:09:48:e6:da:1e:
         65:0a:ea:5e:b4:db:4e:32:a0:e7:61:fd:41:ad:0d:02:d3:b6:
         0d:01:9a:19:34:31:d1:25:f1:b8:ac:ba:1a:bd:44:2d:42:bb:
         ed:a4:83:80:64:29:a6:2c:44:6b:7c:8f:2b:73:38:95:11:40:
         60:e6:0d:e4:d3:41:ff:2d:d2:97:c8:20:69:0e:10:37:03:c0:
         ed:40:8a:66:67:71:da:3a:f8:46:48:9f:d0:76:54:8d:76:2a:
         cd:cd:a4:b7:0f:3f:b4:fe:59:78:36:f7:0a:24:fb:94:af:67:
         58:9f:89:4e:dc:40:65:3c:78:1c:ed:d1:d0:13:56:3c:77:bf:
         f9:f8:3d:3f:15:7d:5d:e6:5b:2a:02:16:0a:a5:fa:91:01:c4:
         4a:87:12:c3:f4:75:0c:0a:49:5a:62:ee:6c:5d:32:be:e5:c2:
         60:36:c7:9e:22:6e:ad:1f:9d:89:15:bb:af:8a:63:6b:16:f3:
         38:74:e2:0f:3c:81:71:a8:8b:6f:f9:2f:f7:5b:8a:1f:43:77:
         02:56:cd:f9:58:a3:ad:d7:82:80:aa:ec:b4:f1:56:61:c8:69:
         07:41:ae:f0:11:41:79:b0:de:36:76:9f:61:6f:7f:30:a2:bf:
         4c:3c:9c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----