Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe645bce-cca5-4613-a1f5-25738cfb159f.roa
File:                     fe645bce-cca5-4613-a1f5-25738cfb159f.roa (raw, json)
Hash identifier:          mizi1Y6kGhdaM3yVcCrZgHBikc1+eu6P52DsRfp6/pI=
Subject key identifier:   F9:88:4F:E2:CC:06:0D:B7:EF:68:59:E9:EC:74:8F:2E:17:84:8C:8D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       666EB0A9F310DA7A10108CEFE1450E046D8CEA27
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe645bce-cca5-4613-a1f5-25738cfb159f.roa
Signing time:             Thu 10 Aug 2023 00:00:00 +0000
ROA not before:           Thu 10 Aug 2023 00:00:00 +0000
ROA not after:            Thu 14 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6e:b0:a9:f3:10:da:7a:10:10:8c:ef:e1:45:0e:04:6d:8c:ea:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 10 00:00:00 2023 GMT
            Not After : Sep 14 23:59:59 2023 GMT
        Subject: serialNumber=95a4131a0c432f848621e3c5a31150c35b7fcb169041bef2189d3e2bab1610ce, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:28:20:71:7f:6d:8f:52:5a:f1:f1:48:dd:
                    13:31:85:5d:ce:07:ba:93:f7:74:9c:5d:8d:82:c9:
                    8c:bb:33:ff:20:f2:55:13:b4:55:4a:f2:fa:e7:e0:
                    2d:f0:52:5a:70:04:eb:d4:bc:51:5f:40:d8:9a:4b:
                    0b:83:30:c4:f9:1f:56:3e:8a:72:64:45:ff:a3:67:
                    00:5e:83:68:56:44:10:ca:86:48:0b:98:98:c5:4d:
                    61:fa:76:f9:96:d1:82:b7:6e:32:94:23:aa:aa:57:
                    93:f1:0b:35:fd:7d:78:fb:ce:55:ec:4e:78:39:96:
                    36:14:98:c7:17:1d:ca:3e:6a:ce:4a:fc:88:e9:8a:
                    6e:2f:24:85:eb:9e:82:5d:12:e5:25:7f:ba:14:13:
                    ea:4a:1b:ad:45:5c:f7:0e:d6:9b:2d:40:b8:8a:e3:
                    b7:6e:4f:b8:4a:b6:78:e9:28:57:ce:38:d2:db:b2:
                    c4:6d:27:c3:f8:aa:df:75:f1:44:4d:06:84:b5:04:
                    d1:3e:5b:84:30:77:fe:6e:04:37:62:8c:63:0c:32:
                    7e:92:0c:d7:2b:aa:17:c2:a0:05:a2:de:af:42:5d:
                    ef:54:f3:69:b4:db:3a:91:ed:02:36:cd:61:c3:e7:
                    a9:e5:59:05:dc:ee:f8:b7:a5:cc:88:fd:a4:cf:a1:
                    c6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:88:4F:E2:CC:06:0D:B7:EF:68:59:E9:EC:74:8F:2E:17:84:8C:8D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe645bce-cca5-4613-a1f5-25738cfb159f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:c4:38:1c:7c:45:6b:2d:e9:92:2d:ed:48:b3:ce:ef:3f:60:
         90:63:bc:81:2c:d3:53:fe:dc:c6:89:b4:3e:09:b9:31:d5:d7:
         85:dd:93:b3:a2:15:ad:dd:9c:6f:0c:71:b8:15:b6:2c:4e:cc:
         23:11:47:21:e5:c2:35:f7:ca:cb:2b:dd:cb:0d:a8:d9:60:97:
         d6:38:6d:6e:6d:20:7b:2e:11:f3:d0:65:f7:6c:66:d4:c0:a7:
         0a:f9:54:8d:0c:d2:5c:15:99:5b:f4:7b:47:d3:cd:d1:bf:3c:
         30:82:18:45:0a:af:4a:af:85:4f:9a:67:96:54:c5:14:81:49:
         af:e3:50:fc:6e:e7:e9:e0:dc:fb:a9:e7:1f:50:44:2b:7c:78:
         f4:bf:21:69:da:69:01:80:c8:32:f9:96:67:d1:35:82:37:61:
         b2:61:e5:be:0b:b7:21:5a:b4:ce:7e:3d:15:8c:7c:ae:09:45:
         42:18:b8:64:99:0a:9b:e5:d9:cd:79:db:b8:58:36:aa:d3:34:
         39:8d:71:9e:41:64:c8:29:bb:cd:c4:21:f2:0b:51:5d:f4:f5:
         97:9e:fe:a2:26:f0:68:3a:bc:3d:79:56:eb:95:06:0a:02:cc:
         69:98:cf:01:c5:93:58:95:55:2d:9c:50:c8:f6:dc:a3:46:78:
         e0:92:5e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----