Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1f4034dd-b2b5-4f16-ad56-969de4c015dc.roa
File:                     1f4034dd-b2b5-4f16-ad56-969de4c015dc.roa (raw, json)
Hash identifier:          HofyX7c4AiU5/ZM7amG4N/DLH8CiCsJ0IaNNQwg1X+I=
Subject key identifier:   B5:B8:4F:07:4F:08:CD:24:B4:78:46:99:B6:3D:40:CA:96:CB:05:52
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4883C717DEE26CCE99524BE96D9D26598C73FC53
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1f4034dd-b2b5-4f16-ad56-969de4c015dc.roa
Signing time:             Sun 18 Jun 2023 00:00:00 +0000
ROA not before:           Sun 18 Jun 2023 00:00:00 +0000
ROA not after:            Sun 23 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:83:c7:17:de:e2:6c:ce:99:52:4b:e9:6d:9d:26:59:8c:73:fc:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 18 00:00:00 2023 GMT
            Not After : Jul 23 23:59:59 2023 GMT
        Subject: serialNumber=241e5aad4f4b22d2a631a215b3f89b853342bd444900ae31c0f5f78af6ef4709, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:49:12:fa:dd:c8:20:65:fa:28:ac:8b:2b:66:
                    5b:b2:b3:9e:d6:54:0e:22:79:c7:6e:2a:1f:4c:f5:
                    8d:fa:b7:33:45:45:65:37:5a:3d:d3:a2:c6:37:d3:
                    5e:d6:ed:83:8e:8a:1b:f7:85:73:ed:cb:82:51:fd:
                    6b:99:74:be:51:eb:99:de:e4:f3:5d:cc:48:8e:e7:
                    ba:fa:38:dd:83:8c:e3:8d:5c:ad:90:73:d8:ca:72:
                    a4:6b:90:f6:85:b1:7a:20:90:f1:7f:39:22:d8:ca:
                    fd:6d:e3:14:60:4c:2e:c2:0f:1d:ca:45:d0:ad:1a:
                    15:43:ab:1a:f7:dd:ed:65:53:31:0e:99:7c:9a:8d:
                    4f:14:da:14:87:8c:e8:9f:28:29:6f:fb:88:31:aa:
                    41:e3:cd:85:df:6a:93:46:84:ef:92:f6:06:6e:03:
                    eb:66:83:bc:68:72:45:86:9d:cc:8f:0a:e6:1b:c5:
                    0a:8c:ed:8f:6a:5c:6a:e4:f1:47:f1:7f:2f:a0:40:
                    e3:66:be:d9:96:26:f7:98:bc:bf:77:44:02:97:21:
                    22:36:1b:fe:c3:21:ef:e4:8c:ad:85:79:60:52:69:
                    7e:3d:94:42:a7:3e:fd:8c:72:32:6f:e0:e5:23:04:
                    fd:2b:9c:7b:4f:29:0d:b2:45:8b:ab:85:99:14:40:
                    a0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B8:4F:07:4F:08:CD:24:B4:78:46:99:B6:3D:40:CA:96:CB:05:52
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1f4034dd-b2b5-4f16-ad56-969de4c015dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:24:15:63:63:2b:a7:02:d6:e9:af:a1:75:c3:14:ed:cf:bb:
         e4:00:21:4e:64:d7:bf:cc:d3:22:24:b9:fb:02:f4:ad:6b:e3:
         da:bf:d8:03:5c:5a:e5:41:e9:31:64:76:0d:1b:52:b8:c5:48:
         00:cf:59:59:76:a1:71:aa:5c:23:ec:94:07:9f:76:4c:e3:be:
         76:99:ec:ce:8a:e4:6b:17:33:97:3e:db:9e:68:9d:c7:ac:97:
         8b:a9:4c:25:17:bb:36:a8:eb:c7:6b:17:83:33:e3:e7:f9:8e:
         1c:d7:b6:b7:a8:78:2b:ee:7c:86:78:50:ac:71:8d:f1:20:fe:
         87:82:b2:99:90:1a:81:38:3d:7e:c7:14:17:ef:43:1e:d5:7c:
         04:e4:39:d2:d6:50:6c:01:e4:5b:b1:55:f4:e4:eb:7e:c8:78:
         0b:67:b2:69:b0:1e:f7:30:10:0b:98:9c:0f:21:cf:9a:94:e4:
         06:09:fc:b3:1b:a8:49:06:c5:c8:a3:d0:13:3f:09:2b:07:d8:
         49:2a:75:d0:06:c2:c7:37:03:a6:27:d3:11:40:74:0e:b6:0f:
         60:d5:98:88:dd:cf:8b:06:34:93:20:03:69:32:c3:e7:2a:e4:
         30:d2:f8:1a:a0:bc:7d:98:0a:63:90:b7:51:99:20:a4:5f:ef:
         44:f2:d5:1e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSIPHF97ibM6ZUkvpbZ0mWYxz/FMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjE4MDAwMDAwWhcNMjMwNzIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNDFlNWFhZDRmNGIyMmQyYTYzMWEyMTViM2Y4OWI4NTMz
NDJiZDQ0NDkwMGFlMzFjMGY1Zjc4YWY2ZWY0NzA5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNSRL63cggZfoorIsrZluys57WVA4iecduKh9M9Y36tzNF
RWU3Wj3TosY3017W7YOOihv3hXPty4JR/WuZdL5R65ne5PNdzEiO57r6ON2DjOON
XK2Qc9jKcqRrkPaFsXogkPF/OSLYyv1t4xRgTC7CDx3KRdCtGhVDqxr33e1lUzEO
mXyajU8U2hSHjOifKClv+4gxqkHjzYXfapNGhO+S9gZuA+tmg7xockWGncyPCuYb
xQqM7Y9qXGrk8Ufxfy+gQONmvtmWJveYvL93RAKXISI2G/7DIe/kjK2FeWBSaX49
lEKnPv2McjJv4OUjBP0rnHtPKQ2yRYurhZkUQKDrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtbhPB08IzSS0eEaZtj1AypbLBVIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzFmNDAzNGRkLWIyYjUtNGYxNi1hZDU2LTk2OWRlNGMwMTVkYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAC4kFWNjK6cC1umvoXXDFO3Pu+QA
IU5k17/M0yIkufsC9K1r49q/2ANcWuVB6TFkdg0bUrjFSADPWVl2oXGqXCPslAef
dkzjvnaZ7M6K5GsXM5c+255oncesl4upTCUXuzao68drF4Mz4+f5jhzXtreoeCvu
fIZ4UKxxjfEg/oeCspmQGoE4PX7HFBfvQx7VfATkOdLWUGwB5FuxVfTk637IeAtn
smmwHvcwEAuYnA8hz5qU5AYJ/LMbqEkGxcij0BM/CSsH2EkqddAGwsc3A6Yn0xFA
dA62D2DVmIjdz4sGNJMgA2kyw+cq5DDS+BqgvH2YCmOQt1GZIKRf70Ty1R4=
-----END CERTIFICATE-----