Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0a11326d-c944-4e92-bcb9-57b7baa47801.roa
File:                     0a11326d-c944-4e92-bcb9-57b7baa47801.roa (raw, json)
Hash identifier:          hsbODqVU/rnCw5PMT/B1+5/K/3XnJN3b9C2A3B1EyQQ=
Subject key identifier:   CD:28:3E:BF:2E:BE:49:1F:81:54:2F:98:62:70:A9:14:1A:B6:E9:F9
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1EC32B1E73447D8BE7AAA1F291DA249AFC777DA7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0a11326d-c944-4e92-bcb9-57b7baa47801.roa
Signing time:             Mon 18 Mar 2024 00:00:00 +0000
ROA not before:           Mon 18 Mar 2024 00:00:00 +0000
ROA not after:            Mon 22 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c3:2b:1e:73:44:7d:8b:e7:aa:a1:f2:91:da:24:9a:fc:77:7d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 18 00:00:00 2024 GMT
            Not After : Apr 22 23:59:59 2024 GMT
        Subject: serialNumber=f7a6f556dc773cd1e8a0f2e4fda4fc0bcd339d676e44c56ee0747532c53e4c1d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:ec:11:71:98:17:6d:66:9a:36:ad:c5:19:
                    6b:85:b9:55:9b:56:b4:59:be:15:e6:92:48:b1:6b:
                    29:d2:3f:44:39:04:15:a1:dc:c4:ff:8d:2e:92:db:
                    2a:68:4a:a2:68:6f:5c:39:19:f8:65:28:90:07:a3:
                    60:97:16:53:29:26:69:04:29:c3:8a:0c:a8:41:1b:
                    8a:82:e1:b8:94:42:32:0f:8a:df:9c:8a:d3:ce:82:
                    eb:73:0c:81:5b:d1:d0:9b:85:06:cf:86:eb:21:a4:
                    39:99:95:12:02:11:e2:88:75:94:00:e5:87:34:02:
                    82:73:d8:e4:c4:67:35:0a:9f:f1:36:39:65:10:ea:
                    5b:18:2b:da:4e:ee:df:34:21:fb:f0:4c:53:47:db:
                    9c:ce:6b:b4:e9:ad:6b:82:bc:90:3c:e7:f1:31:bf:
                    54:4c:54:bf:3c:9f:a2:ae:fd:8e:60:e5:d8:99:18:
                    3c:58:ab:75:f8:e1:e7:ee:41:a9:6f:9a:aa:34:bc:
                    09:bd:62:5e:6f:a9:49:6b:10:19:19:60:cf:59:03:
                    b1:19:c8:56:33:99:83:25:88:cd:74:4c:50:b0:d7:
                    ae:d9:41:9e:08:d7:86:0d:a0:dc:c1:a5:43:e2:3d:
                    4a:85:c8:cc:93:30:12:4d:45:7e:30:67:45:0d:22:
                    43:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:28:3E:BF:2E:BE:49:1F:81:54:2F:98:62:70:A9:14:1A:B6:E9:F9
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0a11326d-c944-4e92-bcb9-57b7baa47801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:fb:6e:26:29:e1:c1:26:7c:d2:7a:e4:71:9a:d2:bc:0b:4d:
         37:29:bc:e9:f8:2a:56:8d:36:bd:a6:3d:35:47:ef:9a:73:0b:
         ee:04:0a:ff:a8:6b:26:5e:6f:a4:1e:60:57:8e:b0:89:46:53:
         51:b6:07:c4:fc:ee:03:be:b1:56:12:65:53:59:d4:e9:49:9f:
         79:36:6c:2a:fc:40:61:63:0f:17:87:b6:63:6a:00:e3:a6:12:
         3d:0d:c5:7f:bf:b5:d9:54:e6:74:98:c5:7c:b6:eb:28:49:92:
         44:0e:c4:5c:4c:26:d3:b1:9c:fa:31:b2:38:69:fc:50:97:53:
         5b:bb:45:ba:56:a3:95:65:b0:a9:41:3c:71:68:40:b8:81:48:
         42:25:d0:9e:9a:1b:17:72:71:15:25:a9:5d:80:1b:66:ab:7f:
         79:f8:a6:33:70:f8:5f:54:3d:a7:02:3c:6a:7a:a3:bc:46:56:
         34:9d:42:c4:ec:92:43:e1:5d:a4:67:1c:df:e6:26:59:95:f7:
         d8:78:68:86:39:f4:cd:61:3c:6c:d9:08:a2:22:eb:0b:50:81:
         9b:0c:75:c3:9a:75:40:37:b6:ee:ed:5c:bc:6b:c3:41:2d:29:
         4c:c4:5f:4d:19:ed:d1:e8:50:ff:51:68:e3:b3:13:44:3b:5e:
         b8:9a:dd:73
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHsMrHnNEfYvnqqHykdokmvx3facwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMzE4MDAwMDAwWhcNMjQwNDIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BmN2E2ZjU1NmRjNzczY2QxZThhMGYyZTRmZGE0ZmMwYmNk
MzM5ZDY3NmU0NGM1NmVlMDc0NzUzMmM1M2U0YzFkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCu0uwRcZgXbWaaNq3FGWuFuVWbVrRZvhXmkkixaynSP0Q5
BBWh3MT/jS6S2ypoSqJob1w5GfhlKJAHo2CXFlMpJmkEKcOKDKhBG4qC4biUQjIP
it+citPOgutzDIFb0dCbhQbPhushpDmZlRICEeKIdZQA5Yc0AoJz2OTEZzUKn/E2
OWUQ6lsYK9pO7t80IfvwTFNH25zOa7TprWuCvJA85/Exv1RMVL88n6Ku/Y5g5diZ
GDxYq3X44efuQalvmqo0vAm9Yl5vqUlrEBkZYM9ZA7EZyFYzmYMliM10TFCw167Z
QZ4I14YNoNzBpUPiPUqFyMyTMBJNRX4wZ0UNIkN/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzSg+vy6+SR+BVC+YYnCpFBq26fkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzBhMTEzMjZkLWM5NDQtNGU5Mi1iY2I5LTU3YjdiYWE0NzgwMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACf7biYp4cEmfNJ65HGa0rwLTTcp
vOn4KlaNNr2mPTVH75pzC+4ECv+oayZeb6QeYFeOsIlGU1G2B8T87gO+sVYSZVNZ
1OlJn3k2bCr8QGFjDxeHtmNqAOOmEj0NxX+/tdlU5nSYxXy26yhJkkQOxFxMJtOx
nPoxsjhp/FCXU1u7RbpWo5VlsKlBPHFoQLiBSEIl0J6aGxdycRUlqV2AG2arf3n4
pjNw+F9UPacCPGp6o7xGVjSdQsTskkPhXaRnHN/mJlmV99h4aIY59M1hPGzZCKIi
6wtQgZsMdcOadUA3tu7tXLxrw0EtKUzEX00Z7dHoUP9RaOOzE0Q7Xria3XM=
-----END CERTIFICATE-----