Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d2f809ce-2f9f-4c0b-8fa3-a4789a64322e.roa
File:                     d2f809ce-2f9f-4c0b-8fa3-a4789a64322e.roa (raw, json)
Hash identifier:          fWN076KnAP/3yaVP3psB4uI4onaECLvpIqxT/OR/m04=
Subject key identifier:   00:A9:85:50:15:EA:28:86:3E:13:4C:F1:35:6A:81:3A:E5:81:23:65
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       15F155FEBD0AF44E6DD8DAA3CAEB89B6F0639AB3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d2f809ce-2f9f-4c0b-8fa3-a4789a64322e.roa
Signing time:             Thu 12 Dec 2024 00:00:00 +0000
ROA not before:           Thu 12 Dec 2024 00:00:00 +0000
ROA not after:            Thu 16 Jan 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f1:55:fe:bd:0a:f4:4e:6d:d8:da:a3:ca:eb:89:b6:f0:63:9a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 12 00:00:00 2024 GMT
            Not After : Jan 16 23:59:59 2025 GMT
        Subject: serialNumber=35505a7db7236aa185dc1accdd800f1900f0eb2853693dc90bde9e582d8db2ca, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:93:b6:92:3b:e1:9a:0b:73:a1:2b:a2:c6:b0:
                    1b:3e:74:99:1c:b8:21:ff:6e:eb:69:63:7c:df:fa:
                    18:c7:03:be:8e:45:45:3c:28:1c:bb:ad:2c:63:28:
                    9d:08:fb:59:27:8a:fa:b5:f3:07:37:d0:94:91:2d:
                    59:25:86:77:76:63:06:81:63:d1:e4:da:bb:2b:bd:
                    de:27:89:db:53:c3:1a:b6:4a:99:17:03:7d:01:c1:
                    d1:ff:46:aa:97:24:18:29:96:20:98:96:1d:8a:90:
                    dd:3c:b2:2e:d9:58:50:c7:27:30:5d:cd:8d:ba:33:
                    dd:5c:17:50:77:ef:44:e2:cf:46:b0:1a:ea:7c:d1:
                    8b:d9:bf:e5:09:ed:90:5a:0d:0c:d7:28:3d:a4:60:
                    9d:21:f0:6c:84:e0:29:32:93:77:e3:08:d0:42:fe:
                    1c:ec:9d:5c:2b:a7:9a:da:80:56:49:57:52:f1:53:
                    ba:aa:ee:4d:ee:cc:c6:5f:78:1d:eb:79:9f:47:6c:
                    12:a8:0e:51:cf:91:57:2d:c1:32:cb:3e:bb:3f:e2:
                    89:2b:e9:d7:62:17:69:a6:5b:e1:f5:05:b3:d0:e9:
                    30:76:5d:8b:12:8e:03:23:13:e2:f4:de:f7:25:cf:
                    9b:51:ef:0c:a0:0a:67:89:a3:97:30:f7:0f:81:c0:
                    e9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A9:85:50:15:EA:28:86:3E:13:4C:F1:35:6A:81:3A:E5:81:23:65
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d2f809ce-2f9f-4c0b-8fa3-a4789a64322e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:2a:c6:7d:44:09:d7:32:3c:ef:47:97:af:00:37:f2:41:90:
         68:9b:85:63:7d:d5:6a:3d:e6:71:98:fa:a4:ef:e3:aa:91:da:
         de:3f:b3:65:84:c6:43:fa:0c:6a:0f:ac:b7:f3:2a:a2:cc:a9:
         75:a8:b1:dc:1f:7f:ef:0c:6a:b4:62:b9:75:46:ec:63:23:31:
         31:33:d8:46:17:5a:08:f4:cf:e4:04:83:d3:0c:fa:d9:4a:2c:
         c9:3f:bb:9c:04:3f:6d:20:c4:4f:85:2f:11:31:46:20:2d:10:
         ee:05:3e:65:6a:06:bc:f3:fe:05:75:a3:67:71:f3:d3:d6:a5:
         8f:ec:86:6b:4a:50:af:9e:df:02:34:0a:2b:c8:28:60:65:fe:
         46:bb:19:e4:9e:53:b1:06:24:c8:e7:60:eb:c9:ce:58:e0:c9:
         2a:9b:50:4a:3b:30:ea:d1:bb:1e:15:dc:c3:6d:49:59:1a:8d:
         15:2a:a6:70:3b:dc:90:5a:e1:7a:d2:53:d4:cd:84:e7:b4:ab:
         8c:7a:05:31:ea:9b:f2:62:9c:16:50:54:90:de:85:8c:e5:30:
         80:76:dd:4e:e1:11:b2:07:6d:f9:6a:ab:71:1a:e7:c0:d4:55:
         ca:17:53:99:cd:43:25:45:d4:f3:83:c9:f1:52:b9:e9:3f:1c:
         e7:88:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----