Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f5ed542a-1a1e-43c4-85df-c088ba8e73c6.roa
File:                     f5ed542a-1a1e-43c4-85df-c088ba8e73c6.roa (raw, json)
Hash identifier:          xI41YxXuKqvV6VlqRw4BDfxggKRxG/Ro4w7ps19ndSw=
Subject key identifier:   33:1E:D1:ED:7A:D9:98:7F:24:39:24:FB:6F:B5:8A:B8:D1:CA:7D:28
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7A8B0713C7834057B10B40535B709F37A64029EE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f5ed542a-1a1e-43c4-85df-c088ba8e73c6.roa
Signing time:             Wed 19 Mar 2025 15:48:18 +0000
ROA not before:           Wed 19 Mar 2025 15:48:18 +0000
ROA not after:            Wed 23 Apr 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8b:07:13:c7:83:40:57:b1:0b:40:53:5b:70:9f:37:a6:40:29:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 19 15:48:18 2025 GMT
            Not After : Apr 23 23:59:59 2025 GMT
        Subject: serialNumber=e39100b7e4b0257c193a5da65ff174cf1c4a40491d422e35a8341401cb4752ef, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0f:41:e6:eb:12:23:43:81:7f:59:77:ed:fd:
                    b7:83:92:95:fa:c2:39:33:2e:e8:a1:f4:b3:19:3e:
                    10:90:7d:42:0b:3a:a2:ad:62:84:dd:5f:06:36:c7:
                    0a:a9:4f:22:ed:f0:1d:c6:7e:f6:4e:0a:0b:ff:24:
                    25:fb:82:55:5c:0b:3f:49:e6:98:9d:74:05:bb:8f:
                    5f:1b:24:b9:a6:91:9c:b5:80:17:a2:8b:34:0c:0c:
                    09:02:46:7d:70:13:75:ec:5a:eb:35:57:42:ce:e4:
                    81:87:14:a2:98:af:c3:5b:9d:64:3f:41:27:f7:c2:
                    6c:d1:aa:7c:7d:36:16:80:d4:e3:46:5b:a6:66:cf:
                    fa:74:dc:24:97:d6:56:02:51:a5:f5:e0:0c:f5:57:
                    41:a0:d0:c0:86:58:84:28:08:aa:f3:86:46:91:d6:
                    49:c0:16:5e:89:4d:ea:40:68:c7:94:1f:cd:25:7d:
                    5b:dd:8e:12:6d:4e:97:95:1d:32:bc:c5:99:66:2a:
                    a1:fb:cb:39:08:8f:c9:b8:6e:5b:f0:7d:7a:97:3f:
                    39:2f:29:32:32:01:6a:d1:e9:8d:f1:55:43:af:b4:
                    d1:e7:e1:d5:33:fe:9d:d7:67:5e:4c:26:87:4e:5b:
                    aa:02:f7:b2:4b:ce:8d:3c:ca:56:f0:fe:0d:2b:00:
                    bf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1E:D1:ED:7A:D9:98:7F:24:39:24:FB:6F:B5:8A:B8:D1:CA:7D:28
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f5ed542a-1a1e-43c4-85df-c088ba8e73c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:f8:e7:8f:25:f1:5d:03:b1:76:3f:98:0d:49:ce:b8:59:db:
         63:bc:f8:56:4b:71:37:49:59:96:dd:70:90:fb:b8:3c:26:e9:
         18:2b:c3:97:cb:a6:a0:8b:80:93:4b:3c:6e:12:28:3e:29:ff:
         e6:07:90:a0:03:02:be:82:bd:76:98:f0:12:dd:b5:04:9a:10:
         f9:d1:9f:c6:68:60:4b:db:71:3c:ae:31:4f:1e:d7:9d:5e:fe:
         af:d4:c7:79:85:42:5a:51:51:76:81:e7:95:cb:37:00:2c:33:
         62:52:65:aa:26:6c:41:2b:e8:93:38:90:38:ba:2d:b3:c1:a3:
         9f:23:37:f4:b4:c4:ba:07:4c:d1:40:61:a2:62:b5:d7:62:af:
         75:ce:5f:ff:64:90:97:d8:15:5b:2c:42:26:ba:1f:60:4d:4c:
         aa:ab:4d:81:d7:50:63:31:c7:01:cf:74:25:8f:da:81:da:f7:
         5f:b1:fb:39:cf:69:5f:f5:0f:49:52:a3:a2:4f:42:0a:77:af:
         bd:6f:97:bc:62:8d:7f:9a:cd:b0:1c:a0:f3:87:b7:e2:d3:ce:
         8c:d1:5d:66:b9:7c:ff:96:80:7c:53:79:6d:de:f7:5e:81:d4:
         4b:37:a5:43:50:fa:1d:0d:4c:1f:27:1d:d9:5a:f5:2d:ca:f9:
         5b:98:04:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----