Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d236a7f-75e0-4946-99d9-fe124a30d145.roa
File:                     6d236a7f-75e0-4946-99d9-fe124a30d145.roa (raw, json)
Hash identifier:          3RUzTlI/vOzo8VLNrsHQmbDAWUxSc8ZddFBMkvA8vNI=
Subject key identifier:   13:0B:92:55:2C:86:22:2D:59:04:E7:FE:5D:29:24:12:F1:BC:6D:4A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7D02049FE2E71C8F4EE9A44AACDC420893A3D970
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d236a7f-75e0-4946-99d9-fe124a30d145.roa
Signing time:             Tue 17 Sep 2024 00:00:00 +0000
ROA not before:           Tue 17 Sep 2024 00:00:00 +0000
ROA not after:            Tue 22 Oct 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:02:04:9f:e2:e7:1c:8f:4e:e9:a4:4a:ac:dc:42:08:93:a3:d9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 17 00:00:00 2024 GMT
            Not After : Oct 22 23:59:59 2024 GMT
        Subject: serialNumber=ba40b53d60dfef2f9db6a199f66dd7a45f05ad0bec24055da6a999a9b96cacc6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e3:6f:09:40:a3:24:72:d1:fc:be:22:a0:98:
                    37:51:de:3d:3f:e8:69:b1:fc:0d:65:c1:73:8a:07:
                    36:e8:a2:67:52:44:97:a9:6a:2f:54:4e:51:ea:e7:
                    3c:d9:4e:9e:33:a0:d8:50:a9:25:0e:ac:f8:1f:14:
                    32:c1:08:c8:cf:fd:b9:07:4e:ec:00:76:4a:53:11:
                    68:ef:e2:1d:c4:13:80:a2:1b:c0:23:3c:2e:ba:2c:
                    01:f2:96:26:08:d1:32:01:ce:42:0d:23:3d:0d:62:
                    f5:8d:c0:d7:7a:9e:6b:b4:27:8c:04:87:1a:71:79:
                    f7:17:a6:96:e4:ba:e4:77:be:39:6d:78:cc:77:26:
                    5a:5e:f9:a4:79:a5:44:e9:d6:cb:60:2a:10:1c:e5:
                    2e:ee:57:8d:e2:ba:08:df:5e:4e:15:27:2e:67:0d:
                    3c:c9:7e:40:bd:46:c6:ce:1e:7e:7e:3e:a2:0b:be:
                    d8:43:ff:e1:99:c1:e9:6d:1e:9d:4c:8e:b1:43:e5:
                    a5:d6:9c:0d:1f:80:46:e5:e6:83:ae:df:35:81:44:
                    a7:35:d8:b2:a4:71:ea:e5:30:67:09:5f:88:1d:e2:
                    ee:8e:f9:84:ea:ec:ad:3b:99:53:30:c0:60:dd:bb:
                    dd:ae:1f:16:e7:fc:73:56:3b:82:32:69:34:3a:68:
                    48:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0B:92:55:2C:86:22:2D:59:04:E7:FE:5D:29:24:12:F1:BC:6D:4A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d236a7f-75e0-4946-99d9-fe124a30d145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:03:a6:4f:9c:d9:cf:36:16:6e:f1:5b:57:03:cf:70:fc:37:
         65:60:6f:58:30:dd:4a:04:94:98:73:19:99:04:cf:73:74:30:
         de:2a:12:14:87:8a:85:f4:9c:38:0c:e9:5d:02:77:32:f9:6a:
         b1:9f:e9:59:75:db:af:7a:c2:f0:1c:50:10:a1:0e:5e:58:53:
         4a:6b:61:00:4f:61:02:79:97:94:02:ce:18:62:0f:34:21:f8:
         45:be:49:6e:a1:0b:a7:50:28:5d:af:bc:bf:23:23:4a:ce:f7:
         d8:e3:6c:72:7f:7a:de:71:b7:01:92:28:cb:d7:cf:65:2f:95:
         5c:7b:2b:90:b3:5b:b2:db:fe:db:6a:dc:9f:b1:cd:a1:5d:ae:
         8f:f2:5e:75:1a:5c:d6:26:35:47:ca:d8:a1:49:0d:28:f4:9b:
         df:c0:06:99:9c:b4:bf:a9:e3:73:a8:c7:92:5d:45:7a:2f:2d:
         0d:1f:7e:76:6b:b1:3c:59:aa:1e:a9:00:53:c7:d1:ec:d1:4a:
         76:e2:3e:65:a9:83:cf:2f:7a:dc:15:ca:39:d7:f5:ed:a8:76:
         1d:e1:3a:b4:94:a5:84:88:fa:6d:88:1f:ff:8f:4d:21:b6:0d:
         f3:2a:3b:2a:0c:e6:e4:de:69:67:7a:1e:9b:47:07:66:38:95:
         8e:2d:ea:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----