Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/061d6010-4e04-49e5-9da6-8ba61661b532.roa
File:                     061d6010-4e04-49e5-9da6-8ba61661b532.roa (raw, json)
Hash identifier:          AfksH0X8gERyOw1zpgM0m/Ew8HTRK+VSYo9zn9Lzl+I=
Subject key identifier:   1C:96:3A:6C:13:28:01:9D:78:C3:2C:39:D5:09:A3:7A:AE:B6:6F:D7
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       10E562031C1EA228B11A94456992C6FB986F81BE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/061d6010-4e04-49e5-9da6-8ba61661b532.roa
Signing time:             Mon 14 Aug 2023 00:00:00 +0000
ROA not before:           Mon 14 Aug 2023 00:00:00 +0000
ROA not after:            Mon 18 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e5:62:03:1c:1e:a2:28:b1:1a:94:45:69:92:c6:fb:98:6f:81:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 14 00:00:00 2023 GMT
            Not After : Sep 18 23:59:59 2023 GMT
        Subject: serialNumber=db2f5f252af98adaa8f73a6c4ec1302721c4b17b5e05a60396da07feb4471f17, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:c3:cd:4e:26:19:80:5d:bb:4c:b5:16:f1:
                    b9:96:6a:e4:a4:d4:10:a7:85:b9:88:38:02:08:07:
                    65:c8:60:33:5e:4e:36:d7:6f:04:1c:eb:9c:5f:f8:
                    47:f0:33:d6:1b:07:f6:a3:8e:10:79:7b:23:48:5a:
                    38:21:1d:60:c5:d5:69:de:70:76:26:6c:87:6d:ca:
                    cd:4a:46:5a:60:fe:d7:dd:6a:37:77:07:68:40:47:
                    eb:5d:25:39:b8:5f:ea:1e:54:7f:3c:cd:f5:d2:9b:
                    96:aa:49:6c:f8:f3:9f:80:3b:2f:60:60:03:b1:ac:
                    fb:3f:46:37:5c:7c:41:78:6b:3c:b8:02:a4:b3:66:
                    40:ec:3a:1d:9e:a8:2c:dc:6e:69:f4:a8:af:cb:99:
                    84:cd:09:d7:82:8f:4f:f0:e4:3b:fe:55:e1:af:eb:
                    8e:e1:61:17:1f:f6:db:59:cb:f5:61:ee:28:bf:c7:
                    82:3e:b2:56:c3:32:4b:00:37:35:53:02:e4:00:04:
                    69:2b:0c:34:ba:15:06:87:b3:91:91:75:6f:8c:e8:
                    d2:0b:69:01:c9:e7:34:ce:2d:71:d8:b9:df:1f:d1:
                    62:a0:d6:7a:82:7a:b9:b9:84:30:51:b4:19:51:e1:
                    4f:b0:0f:5f:b5:ab:b8:cf:89:4d:9a:15:ff:52:73:
                    2b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:96:3A:6C:13:28:01:9D:78:C3:2C:39:D5:09:A3:7A:AE:B6:6F:D7
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/061d6010-4e04-49e5-9da6-8ba61661b532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:5e:df:4b:4d:c4:41:f4:90:76:8f:b4:ba:89:4e:62:ec:9b:
         fa:f3:5b:75:db:46:10:32:8c:5c:8f:b1:f3:a6:0d:4a:dc:2e:
         53:75:74:75:ba:67:86:9d:c6:14:c7:c6:5b:2d:3c:49:89:e9:
         50:7f:bb:69:70:90:dd:af:fc:38:9f:90:68:a8:8b:dc:54:06:
         4f:18:5a:fb:68:e1:59:bb:7d:3b:f8:b7:a1:48:ff:ed:f6:f8:
         2d:d7:67:a7:e6:4d:74:cd:be:d8:f8:1d:49:d3:0b:f4:f6:9b:
         86:3a:70:3d:ec:9d:5c:15:c1:82:6d:79:65:e6:b9:66:d3:f3:
         b3:5c:c1:3e:82:67:2a:e5:98:e4:9c:36:4b:ff:c4:18:97:ef:
         af:17:74:a2:47:4e:b5:10:a3:86:75:95:63:11:6f:38:79:8a:
         16:91:14:ca:10:85:9b:07:f9:85:7d:e6:12:d9:fd:75:cd:c4:
         94:fd:b9:39:7c:f5:89:04:06:38:75:fc:2c:00:8c:f4:1a:b7:
         f7:0f:2d:9b:33:fb:6e:56:62:1f:6d:3c:ff:01:70:78:35:16:
         f5:6e:19:23:ec:d9:1d:e7:c0:7b:95:f7:d1:f5:6a:6b:30:e1:
         b0:24:c0:c3:ba:49:c0:b7:bb:b1:44:7c:c1:2f:56:6c:9d:bc:
         69:8f:ec:ec
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEOViAxweoiixGpRFaZLG+5hvgb4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODE0MDAwMDAwWhcNMjMwOTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYjJmNWYyNTJhZjk4YWRhYThmNzNhNmM0ZWMxMzAyNzIx
YzRiMTdiNWUwNWE2MDM5NmRhMDdmZWI0NDcxZjE3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3AsPNTiYZgF27TLUW8bmWauSk1BCnhbmIOAIIB2XIYDNe
TjbXbwQc65xf+EfwM9YbB/ajjhB5eyNIWjghHWDF1WnecHYmbIdtys1KRlpg/tfd
ajd3B2hAR+tdJTm4X+oeVH88zfXSm5aqSWz485+AOy9gYAOxrPs/RjdcfEF4azy4
AqSzZkDsOh2eqCzcbmn0qK/LmYTNCdeCj0/w5Dv+VeGv647hYRcf9ttZy/Vh7ii/
x4I+slbDMksANzVTAuQABGkrDDS6FQaHs5GRdW+M6NILaQHJ5zTOLXHYud8f0WKg
1nqCerm5hDBRtBlR4U+wD1+1q7jPiU2aFf9ScyujAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHJY6bBMoAZ14wyw51Qmjeq62b9cwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzA2MWQ2MDEwLTRlMDQtNDllNS05ZGE2LThiYTYxNjYxYjUzMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAhe30tNxEH0kHaPtLqJTmLsm/rz
W3XbRhAyjFyPsfOmDUrcLlN1dHW6Z4adxhTHxlstPEmJ6VB/u2lwkN2v/DifkGio
i9xUBk8YWvto4Vm7fTv4t6FI/+32+C3XZ6fmTXTNvtj4HUnTC/T2m4Y6cD3snVwV
wYJteWXmuWbT87NcwT6CZyrlmOScNkv/xBiX768XdKJHTrUQo4Z1lWMRbzh5ihaR
FMoQhZsH+YV95hLZ/XXNxJT9uTl89YkEBjh1/CwAjPQat/cPLZsz+25WYh9tPP8B
cHg1FvVuGSPs2R3nwHuV99H1amsw4bAkwMO6ScC3u7FEfMEvVmydvGmP7Ow=
-----END CERTIFICATE-----