Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/09b84d96-1e91-464f-90fb-2cf6f8a1d6c0.roa
File:                     09b84d96-1e91-464f-90fb-2cf6f8a1d6c0.roa (raw, json)
Hash identifier:          gCNM0B6/Cgo9NkhrxTFkcSC+GDmWIYEb81WSwqNaBG8=
Subject key identifier:   BE:31:08:83:5F:F4:F9:14:BB:01:8D:D6:45:81:BC:A4:EC:54:47:7A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5D746C8978DD1285363547A5A6321DE0DEB9362E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/09b84d96-1e91-464f-90fb-2cf6f8a1d6c0.roa
Signing time:             Thu 05 Oct 2023 00:00:00 +0000
ROA not before:           Thu 05 Oct 2023 00:00:00 +0000
ROA not after:            Thu 09 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:74:6c:89:78:dd:12:85:36:35:47:a5:a6:32:1d:e0:de:b9:36:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct  5 00:00:00 2023 GMT
            Not After : Nov  9 23:59:59 2023 GMT
        Subject: serialNumber=63ab0ac44cb92a6889b725398d7fdc3f2f323490bb4b6431621ab673a29749d3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:6e:f6:32:22:9d:98:95:43:d8:58:20:fb:
                    1a:d1:f6:1e:cf:7b:25:b2:20:ca:25:00:eb:2e:22:
                    29:3c:bf:62:a5:34:56:b4:f2:fa:4a:84:0b:fd:bc:
                    e9:2e:04:cd:fc:07:fc:32:53:ea:ac:32:d2:89:8b:
                    17:ab:df:0d:30:80:c2:a7:62:80:2a:57:dc:aa:cd:
                    cf:90:f0:77:55:bd:7b:47:f7:53:2d:3c:6b:65:bc:
                    ae:be:58:f0:9a:70:5c:41:b6:d4:3e:a3:67:c6:e8:
                    ae:d9:36:d9:e4:f1:f4:cd:a2:05:a4:6a:5c:18:e8:
                    39:51:66:ca:5d:66:46:eb:ed:0e:56:67:24:6b:3f:
                    2f:f9:7d:50:76:a0:86:24:63:56:c5:fe:08:06:cc:
                    e2:1a:9d:f7:ff:11:a5:39:9b:21:ce:cc:4d:cb:7f:
                    cd:72:3e:62:53:81:60:54:c2:4d:f4:9b:42:58:3f:
                    bc:6d:aa:4d:4b:72:23:7d:9a:e6:ca:4e:15:61:34:
                    13:aa:db:ab:43:84:3e:c7:cd:04:db:80:cb:6c:05:
                    0f:fc:91:d7:2c:55:30:e2:f9:76:ab:99:36:54:f0:
                    76:ff:c9:0d:25:ff:f7:ad:53:23:22:71:eb:fd:f3:
                    ee:9f:12:4b:52:b9:81:41:de:37:f5:77:40:45:1d:
                    35:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:31:08:83:5F:F4:F9:14:BB:01:8D:D6:45:81:BC:A4:EC:54:47:7A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/09b84d96-1e91-464f-90fb-2cf6f8a1d6c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:b7:16:43:73:fc:e5:c9:b6:77:a9:91:36:0a:1e:2b:e4:af:
         22:3a:35:02:93:f4:b2:cd:27:71:7b:13:7b:0c:4f:19:19:b5:
         1b:10:e1:62:c4:3c:e2:88:f0:51:1b:d2:87:af:cc:0d:3b:fc:
         89:56:a3:7a:60:55:85:9c:0c:c3:5f:28:5c:24:8e:82:e2:ab:
         ce:13:59:13:a6:7a:39:c7:45:dd:e2:8e:24:79:f6:0a:f1:8b:
         18:36:44:66:a6:07:ed:88:64:66:df:0a:0a:67:04:f7:22:30:
         5f:43:92:de:18:8c:2e:0a:1d:66:46:a5:8a:d9:e4:36:db:58:
         88:04:50:5c:3d:bc:97:06:43:37:e9:56:09:55:34:f5:91:e6:
         14:4b:54:ca:a0:8a:21:96:ac:e0:8d:cd:6e:57:4f:50:4d:a5:
         fa:fc:7a:a7:3e:16:15:4f:a8:50:1b:29:cc:87:05:34:89:0f:
         bd:2a:a5:1f:2d:77:57:cf:42:8a:7f:71:fc:a0:26:d9:75:05:
         ad:cf:dc:63:fe:c4:c7:a3:b0:4a:5c:a7:c2:a2:70:c3:7d:8e:
         a6:3a:38:e0:4c:0a:20:2b:df:83:5d:3f:94:a8:98:92:e5:fb:
         c4:1f:7a:4a:73:dc:09:ec:a2:16:b3:14:6e:73:a9:92:ab:fa:
         6a:b0:5f:ed
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXXRsiXjdEoU2NUelpjId4N65Ni4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDA1MDAwMDAwWhcNMjMxMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A2M2FiMGFjNDRjYjkyYTY4ODliNzI1Mzk4ZDdmZGMzZjJm
MzIzNDkwYmI0YjY0MzE2MjFhYjY3M2EyOTc0OWQzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4WW72MiKdmJVD2Fgg+xrR9h7PeyWyIMolAOsuIik8v2Kl
NFa08vpKhAv9vOkuBM38B/wyU+qsMtKJixer3w0wgMKnYoAqV9yqzc+Q8HdVvXtH
91MtPGtlvK6+WPCacFxBttQ+o2fG6K7ZNtnk8fTNogWkalwY6DlRZspdZkbr7Q5W
ZyRrPy/5fVB2oIYkY1bF/ggGzOIanff/EaU5myHOzE3Lf81yPmJTgWBUwk30m0JY
P7xtqk1LciN9mubKThVhNBOq26tDhD7HzQTbgMtsBQ/8kdcsVTDi+XarmTZU8Hb/
yQ0l//etUyMicev98+6fEktSuYFB3jf1d0BFHTWpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUvjEIg1/0+RS7AY3WRYG8pOxUR3owHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzA5Yjg0ZDk2LTFlOTEtNDY0Zi05MGZiLTJjZjZmOGExZDZjMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAm3FkNz/OXJtnepkTYKHivkryI6
NQKT9LLNJ3F7E3sMTxkZtRsQ4WLEPOKI8FEb0oevzA07/IlWo3pgVYWcDMNfKFwk
joLiq84TWROmejnHRd3ijiR59grxixg2RGamB+2IZGbfCgpnBPciMF9Dkt4YjC4K
HWZGpYrZ5DbbWIgEUFw9vJcGQzfpVglVNPWR5hRLVMqgiiGWrOCNzW5XT1BNpfr8
eqc+FhVPqFAbKcyHBTSJD70qpR8td1fPQop/cfygJtl1Ba3P3GP+xMejsEpcp8Ki
cMN9jqY6OOBMCiAr34NdP5SomJLl+8Qfekpz3AnsohazFG5zqZKr+mqwX+0=
-----END CERTIFICATE-----