Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/010e0b3b-5b0b-4675-970a-edff835ab887.roa
File:                     010e0b3b-5b0b-4675-970a-edff835ab887.roa (raw, json)
Hash identifier:          N+dBJTQcD93+4jcVeW7ZAijzqV2U6xtCMxF2xyyT8+U=
Subject key identifier:   AB:D2:E8:0B:27:2A:C8:8D:2E:37:99:7E:D9:FE:AE:A4:10:31:A0:A0
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5DEB4F387EC8A8C5D4EE8F52A3AD2AAFA3F1305A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/010e0b3b-5b0b-4675-970a-edff835ab887.roa
Signing time:             Sat 18 Nov 2023 00:00:00 +0000
ROA not before:           Sat 18 Nov 2023 00:00:00 +0000
ROA not after:            Sat 23 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:eb:4f:38:7e:c8:a8:c5:d4:ee:8f:52:a3:ad:2a:af:a3:f1:30:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 18 00:00:00 2023 GMT
            Not After : Dec 23 23:59:59 2023 GMT
        Subject: serialNumber=e0a173cc03a2fdb948692edc4d39b52a2dff35b10155ee5fc9cc58a82c76441a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:76:7f:de:b6:77:da:d8:33:fb:25:36:16:a5:
                    28:25:af:ad:9e:a6:91:5e:06:f9:ee:45:88:34:eb:
                    1a:e0:43:3d:46:48:c4:63:4c:65:ef:37:c1:81:4e:
                    49:df:8e:bf:96:96:71:62:d2:3d:1e:96:d2:0e:ea:
                    6c:cf:b4:60:64:9f:46:ef:1b:ad:6c:21:ac:fc:2d:
                    2d:01:27:b7:d9:c3:82:75:99:59:48:ec:4d:de:d8:
                    88:62:52:aa:9a:49:15:99:ee:b5:6f:a5:46:f5:ee:
                    55:2b:13:cf:9a:73:6f:cd:1d:64:b5:e5:32:ec:1e:
                    88:95:cd:00:a7:c2:ab:b6:c9:ce:f0:40:24:f3:a5:
                    46:f8:88:81:d9:1d:93:75:30:ee:ab:25:23:c5:c7:
                    c5:44:d7:02:ef:e9:3d:4d:f1:dc:d4:63:cd:ff:47:
                    b8:ce:0d:c6:91:f0:26:54:0b:28:bb:f1:dd:6e:99:
                    3d:fd:6b:1d:bb:1e:21:79:18:3a:d0:e6:16:d1:86:
                    ed:45:3f:f6:67:b1:f5:03:fe:7a:d8:af:f6:91:64:
                    a0:97:68:61:67:da:16:72:2e:77:cc:41:78:01:a8:
                    81:9e:79:0d:e1:ac:c2:12:62:d8:c8:66:af:60:8f:
                    88:af:6f:3d:90:b6:79:73:94:06:50:ec:fe:34:06:
                    f9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D2:E8:0B:27:2A:C8:8D:2E:37:99:7E:D9:FE:AE:A4:10:31:A0:A0
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/010e0b3b-5b0b-4675-970a-edff835ab887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:de:8a:67:db:65:5c:ea:da:f7:03:2f:c6:9c:d5:84:11:76:
         1b:0e:ed:11:c9:3f:c4:5b:be:88:30:d1:89:72:75:37:f6:57:
         27:be:01:ab:61:1d:62:b3:4b:43:d8:26:d9:48:aa:2b:36:60:
         68:01:5e:c8:f8:7b:37:c0:eb:ab:d5:ec:00:5d:a5:07:3e:4b:
         ac:a4:b8:65:a7:7b:c2:c6:5a:b9:4d:27:39:ef:f4:b9:42:83:
         ca:27:df:2c:90:4b:d3:6c:7d:80:03:0f:d5:0b:f1:a3:f3:cb:
         7a:70:88:75:4b:a3:fb:90:d8:20:1a:44:af:75:57:0c:47:ea:
         f4:27:15:49:f9:fa:35:cb:40:96:7f:1d:c5:c9:23:e0:b8:4d:
         23:bd:d1:39:90:e8:25:a0:3e:0d:ee:11:a7:1e:9a:3b:0e:3e:
         30:18:1c:98:e8:0c:dd:32:a8:80:71:91:b7:d6:6c:ef:dd:de:
         ba:3d:41:b4:5a:32:74:bd:f9:df:3e:57:26:a5:f6:ca:90:e3:
         dc:88:32:ce:fe:f9:33:39:84:b0:60:5e:f1:cc:8a:2a:70:2c:
         c4:27:90:72:e0:26:92:2a:0f:e1:23:da:fd:ea:b0:ab:b6:f5:
         9b:88:45:42:e7:17:bc:5e:e1:b3:3b:e7:cf:00:c2:b1:0f:4c:
         fb:34:87:a5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXetPOH7IqMXU7o9So60qr6PxMFowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTE4MDAwMDAwWhcNMjMxMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMGExNzNjYzAzYTJmZGI5NDg2OTJlZGM0ZDM5YjUyYTJk
ZmYzNWIxMDE1NWVlNWZjOWNjNThhODJjNzY0NDFhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZdn/etnfa2DP7JTYWpSglr62eppFeBvnuRYg06xrgQz1G
SMRjTGXvN8GBTknfjr+WlnFi0j0eltIO6mzPtGBkn0bvG61sIaz8LS0BJ7fZw4J1
mVlI7E3e2IhiUqqaSRWZ7rVvpUb17lUrE8+ac2/NHWS15TLsHoiVzQCnwqu2yc7w
QCTzpUb4iIHZHZN1MO6rJSPFx8VE1wLv6T1N8dzUY83/R7jODcaR8CZUCyi78d1u
mT39ax27HiF5GDrQ5hbRhu1FP/ZnsfUD/nrYr/aRZKCXaGFn2hZyLnfMQXgBqIGe
eQ3hrMISYtjIZq9gj4ivbz2QtnlzlAZQ7P40BvljAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUq9LoCycqyI0uN5l+2f6upBAxoKAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzAxMGUwYjNiLTViMGItNDY3NS05NzBhLWVkZmY4MzVhYjg4Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAC7eimfbZVzq2vcDL8ac1YQRdhsO
7RHJP8Rbvogw0YlydTf2Vye+AathHWKzS0PYJtlIqis2YGgBXsj4ezfA66vV7ABd
pQc+S6ykuGWne8LGWrlNJznv9LlCg8on3yyQS9NsfYADD9UL8aPzy3pwiHVLo/uQ
2CAaRK91VwxH6vQnFUn5+jXLQJZ/HcXJI+C4TSO90TmQ6CWgPg3uEacemjsOPjAY
HJjoDN0yqIBxkbfWbO/d3ro9QbRaMnS9+d8+Vyal9sqQ49yIMs7++TM5hLBgXvHM
iipwLMQnkHLgJpIqD+Ej2v3qsKu29ZuIRULnF7xe4bM7588AwrEPTPs0h6U=
-----END CERTIFICATE-----