Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/121eda49-7629-484f-9a56-45e43047cded.roa
File:                     121eda49-7629-484f-9a56-45e43047cded.roa (raw, json)
Hash identifier:          IUECn46nBax9LgqC8eaqe2owtCK85D8EI3af4i2ma40=
Subject key identifier:   96:7B:DD:7D:89:66:BC:52:3D:E0:9A:0F:9E:1C:4B:3B:7F:62:E4:9B
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5575B00862DFF95EC54A3DEF2618B58A998F9457
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/121eda49-7629-484f-9a56-45e43047cded.roa
Signing time:             Fri 23 Jun 2023 00:00:00 +0000
ROA not before:           Fri 23 Jun 2023 00:00:00 +0000
ROA not after:            Fri 28 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:75:b0:08:62:df:f9:5e:c5:4a:3d:ef:26:18:b5:8a:99:8f:94:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 23 00:00:00 2023 GMT
            Not After : Jul 28 23:59:59 2023 GMT
        Subject: serialNumber=bf63618b06ccb3294de851f145ead497a1697f5c729fd87ad10f278cb4cfde2b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:bd:79:51:2b:ee:a3:eb:66:0c:da:a7:34:
                    c5:cd:79:d5:b8:da:bd:bf:ed:3f:9b:93:87:45:40:
                    01:c0:25:ee:88:ae:c1:f4:11:b5:d4:83:74:21:4e:
                    62:e7:fe:c6:8c:ed:34:5d:81:3d:45:ed:91:79:13:
                    9c:d2:2b:1c:49:9b:91:e3:1b:f0:3b:30:03:3d:da:
                    34:bb:5d:c9:74:e6:84:5d:5e:a2:d0:4a:cb:59:41:
                    06:b2:b9:c7:6f:92:65:5f:e3:5a:5c:74:a0:54:4c:
                    2d:fe:59:05:9b:48:c4:51:c1:88:37:db:1c:cc:65:
                    69:a5:50:61:c4:06:93:dc:8f:f4:45:cb:63:36:ea:
                    f1:54:ce:02:74:cd:c0:b9:03:26:f2:8b:4d:29:9b:
                    18:5a:7d:77:62:df:cf:94:61:61:10:bf:b5:ac:ca:
                    df:2c:f3:df:ca:aa:b1:2b:af:aa:fb:ac:39:85:0e:
                    71:5b:b1:d5:a0:0c:46:e2:4b:67:ca:cb:f1:81:5e:
                    b3:a2:c8:8a:5c:e2:c4:e2:78:73:fe:ce:3d:cf:fb:
                    ea:5c:3f:22:ab:00:ee:23:95:a4:cf:f0:9b:e4:cf:
                    21:23:97:52:83:5f:86:75:70:96:53:ca:eb:10:8e:
                    fe:2b:10:aa:99:48:93:0c:b6:70:7c:ba:54:56:c5:
                    a0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7B:DD:7D:89:66:BC:52:3D:E0:9A:0F:9E:1C:4B:3B:7F:62:E4:9B
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/121eda49-7629-484f-9a56-45e43047cded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:b7:72:0f:82:e4:db:96:57:a3:8a:3a:dc:c5:37:59:a0:b5:
         34:c5:5b:e6:39:0a:20:2a:1c:5f:79:68:cd:0b:7d:cd:55:0f:
         1d:62:48:be:05:16:9b:60:56:c8:9c:16:d4:d9:a2:ef:63:63:
         67:2c:ac:f4:83:fc:87:9e:10:2a:8f:f0:3f:f7:c9:25:95:e2:
         5f:82:9e:11:b4:8e:64:ab:04:80:ac:e9:80:1f:fa:94:01:42:
         22:e3:de:85:28:0d:38:81:bf:c9:e6:8d:6a:63:21:ec:2b:74:
         23:06:d5:49:7c:66:05:d0:03:57:fe:29:51:19:48:e8:29:85:
         3d:20:b9:38:17:b4:f9:4d:7f:0b:25:e5:03:af:91:4f:cf:ab:
         ae:f0:d7:5a:7f:52:f5:1f:d1:d3:cc:72:1e:f1:a8:97:46:d0:
         7e:a4:1d:da:c4:a2:1b:25:c6:2e:30:0d:37:3d:09:e8:99:35:
         84:29:76:5a:21:61:21:be:cc:1d:1c:b3:21:62:a8:37:63:df:
         74:53:7b:c3:af:1f:fe:75:fd:01:ac:71:09:f3:f4:7d:36:4e:
         ed:4e:f4:31:96:34:13:e8:d5:bc:e1:44:0b:48:fa:fb:b1:40:
         a7:b0:b7:2e:4c:b4:ba:4d:94:78:89:67:ee:81:bd:0c:38:5e:
         db:65:86:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----