Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e3dec44e-7808-4c7b-9622-a22f1859f009.roa
File:                     e3dec44e-7808-4c7b-9622-a22f1859f009.roa (raw, json)
Hash identifier:          59Jph0v02H//FnFN4h8x2bzZF5xjgM/qgIOE56OY51A=
Subject key identifier:   CD:5A:75:B3:0D:49:6E:EC:EC:9A:DF:81:50:B8:7A:24:7D:F2:11:E6
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       590734E241C54AF51C6F9584F012D2623254C4BF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e3dec44e-7808-4c7b-9622-a22f1859f009.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:07:34:e2:41:c5:4a:f5:1c:6f:95:84:f0:12:d2:62:32:54:c4:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=66cc60c169ab3f54da025c8b706dd986753d4c040b4c35b3678e01995d9b46c7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:13:b0:f5:2d:0c:21:ff:9f:c2:29:a5:68:
                    0e:f0:9d:6d:56:d9:50:2c:41:44:ab:da:2c:bf:84:
                    a9:95:a9:b6:95:a9:4f:f1:7f:a2:8e:8f:d4:0e:a6:
                    b5:8d:12:78:75:76:b0:7a:2c:08:00:8d:8d:e4:83:
                    6e:46:cd:f3:2f:e8:8e:69:33:3e:83:e7:36:03:ea:
                    b5:79:d0:b0:30:6a:88:46:79:8a:e2:93:51:ad:06:
                    b5:46:68:8c:e2:bf:d2:1b:8e:8c:1a:a5:19:bc:0e:
                    9b:2d:60:df:bf:ee:c5:e7:ca:7d:c7:99:40:8e:f1:
                    ad:28:f8:e2:dc:2c:a9:1e:f8:28:80:8e:ad:57:a3:
                    e2:49:e8:37:e8:6f:82:60:a0:1d:1e:82:e1:dd:e9:
                    e9:b8:b3:4b:7f:e3:84:0c:59:bb:f0:59:41:03:38:
                    fb:e9:83:e6:dd:a5:7a:4c:1f:70:bf:74:f3:8d:c7:
                    07:9b:70:a0:b6:9e:3f:ae:40:8a:01:90:bc:44:aa:
                    16:e9:e7:1e:53:31:28:67:d4:77:73:1a:99:b3:ba:
                    8a:35:9d:ef:f0:5a:0e:6b:ad:ff:af:23:8d:ad:c3:
                    fe:06:76:17:bf:07:99:05:3f:82:18:ab:42:44:5d:
                    e3:dc:05:46:5a:48:15:3e:57:87:30:4b:c1:03:c9:
                    ee:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5A:75:B3:0D:49:6E:EC:EC:9A:DF:81:50:B8:7A:24:7D:F2:11:E6
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e3dec44e-7808-4c7b-9622-a22f1859f009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:9b:69:61:6b:78:12:ac:4b:13:7c:7c:d6:d1:a5:cb:32:b3:
         3d:d4:b6:b7:f7:46:d7:03:75:02:ac:68:89:36:81:14:e2:33:
         5d:2a:13:e1:c8:69:5f:1e:5f:90:3b:7e:69:65:91:af:07:af:
         15:a0:e6:b1:b2:28:3d:14:8b:55:f5:f9:5a:89:3d:e2:ba:f5:
         71:2d:57:28:45:4f:7f:b8:36:21:08:0a:cc:52:a1:19:ad:12:
         28:17:66:01:a9:9a:ac:2e:ed:70:32:a9:89:64:4b:99:93:4a:
         4b:7a:d7:9d:4e:11:5c:c6:9b:e3:f3:f5:24:ec:98:80:13:a9:
         c3:78:4a:7b:f2:90:a5:b6:bb:4b:18:dd:08:5f:6a:5d:cd:ef:
         db:0b:20:31:c8:4e:78:b1:ab:bb:d1:6d:52:00:9f:47:40:01:
         54:f2:3a:8f:29:48:a5:c1:fd:fe:48:93:bc:82:1b:1e:da:c0:
         99:e4:93:99:7f:b4:01:42:b0:5a:af:b2:bd:e2:f4:0d:af:3d:
         4a:b1:91:49:1c:67:2f:92:0a:3c:a4:1a:5c:52:24:e8:c2:a8:
         6f:eb:83:34:93:d0:86:b6:ff:62:7c:4d:99:79:5b:d2:8c:9e:
         d7:06:c8:bd:a2:77:eb:f2:7d:90:bb:09:d8:77:14:49:c5:a6:
         4a:47:f1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----