Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef7a929e-0be5-40ca-8e5e-2bd71c92a023.roa
File:                     ef7a929e-0be5-40ca-8e5e-2bd71c92a023.roa (raw, json)
Hash identifier:          Tz2R8zt4/V7fSqtybIDLEb7u1Zg0TBuy1IC+dGgf7kg=
Subject key identifier:   E8:27:D6:18:AA:2F:0E:C0:BC:8C:E6:13:98:A3:7C:C8:FD:0F:96:78
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       73AA809ABC47F691D3F1FD3B4CD2EB834DB9771B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef7a929e-0be5-40ca-8e5e-2bd71c92a023.roa
Signing time:             Wed 15 May 2024 00:00:00 +0000
ROA not before:           Wed 15 May 2024 00:00:00 +0000
ROA not after:            Wed 19 Jun 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:aa:80:9a:bc:47:f6:91:d3:f1:fd:3b:4c:d2:eb:83:4d:b9:77:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May 15 00:00:00 2024 GMT
            Not After : Jun 19 23:59:59 2024 GMT
        Subject: serialNumber=f695231918ce7ceafde9541cad42e6158ac82aa54df0d0f7f6817b3e0c854cf2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b2:2b:00:ee:cf:7b:12:98:7b:63:d0:ce:36:
                    38:0e:02:19:7b:be:24:cf:66:ed:ff:2b:78:aa:c7:
                    8f:18:90:6a:ac:89:c4:0d:92:15:32:06:12:9c:c9:
                    8d:90:ee:20:17:82:c3:b9:e0:95:29:57:4c:b6:a8:
                    e7:51:7e:48:7a:69:2d:9f:72:24:13:38:58:60:1c:
                    76:f2:3e:ec:13:46:2b:93:aa:e0:cb:b5:da:5d:61:
                    2b:d7:0e:01:40:b7:f9:e6:d5:50:d9:79:1b:b1:96:
                    70:f6:3d:5b:c3:01:5f:0b:61:f4:c4:80:4e:9b:63:
                    a2:68:66:c1:92:e8:43:38:b2:e2:ca:2c:ee:40:c7:
                    27:e9:fc:47:b5:ed:e3:a1:22:d3:b8:c6:36:60:00:
                    b7:5d:34:4a:16:a7:20:3f:82:9f:d1:cd:a1:51:56:
                    be:71:c6:98:5f:ef:e0:b0:47:b7:59:9b:6d:6e:26:
                    50:db:e7:6c:19:df:78:c4:59:dc:21:fb:cc:55:0e:
                    03:6c:e7:23:cf:f8:2c:26:ad:a9:9c:fa:fd:d3:53:
                    eb:61:75:b2:ef:0f:4e:54:20:7b:37:d6:5d:3f:4b:
                    a0:28:db:be:84:85:5c:67:93:b8:4d:2f:f9:63:72:
                    9e:26:26:cb:a3:57:51:56:e8:62:64:b6:97:8d:9c:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:27:D6:18:AA:2F:0E:C0:BC:8C:E6:13:98:A3:7C:C8:FD:0F:96:78
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef7a929e-0be5-40ca-8e5e-2bd71c92a023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:04:89:c0:0c:5e:84:92:33:a9:25:96:45:67:aa:36:de:27:
         7c:b7:1d:6c:eb:e3:32:68:6e:a3:7d:9c:ca:dd:d6:a7:74:9e:
         91:2f:a9:aa:b2:e7:d3:16:5d:8d:09:2d:a7:17:0f:e4:b0:97:
         ab:09:4a:94:11:14:0b:be:1c:27:57:29:29:2b:59:a9:21:69:
         2e:f4:82:1f:d8:34:9d:a0:78:2d:16:40:a3:61:e1:54:c5:b1:
         93:da:c3:8b:e6:ec:fd:43:f5:84:15:c8:5e:1c:fd:09:73:84:
         da:e3:a7:70:b3:dd:30:19:a3:c7:a3:ac:39:b4:fa:bd:c5:04:
         b6:16:11:82:8a:bd:5a:e6:34:2d:f9:84:60:75:47:6a:9b:9c:
         c9:4a:62:b0:34:ed:3d:9b:f1:39:27:18:e6:16:52:7d:45:6d:
         99:dc:83:1c:0d:52:53:b4:b4:16:b1:29:e1:a4:09:f8:86:23:
         f9:fa:51:20:77:41:c7:0b:a3:10:da:fc:05:0e:62:cc:c4:03:
         cd:c2:6b:93:03:a4:be:e2:1a:6a:ed:29:fa:26:a0:77:0e:e7:
         c5:e4:0c:29:ac:9f:3f:6c:99:2d:75:c1:47:ab:4d:c4:36:46:
         cd:62:1d:ba:96:53:ed:36:99:2d:12:ea:89:b3:2d:9e:b0:db:
         ca:12:68:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----