Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/24dcf84e-9923-4df8-9fc5-b1ecd6220a47.roa
File:                     24dcf84e-9923-4df8-9fc5-b1ecd6220a47.roa (raw, json)
Hash identifier:          yFAQ7i8MP5j2EvUeyMqvneiIfWAvcl42pcTFAF5pls0=
Subject key identifier:   B3:79:E0:B3:A9:C5:89:9F:8E:C6:0C:AD:83:87:99:43:6B:32:3A:E2
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6465E1592F3F4B47811E1D5D9554851FB763C403
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/24dcf84e-9923-4df8-9fc5-b1ecd6220a47.roa
Signing time:             Sat 22 Jul 2023 00:00:00 +0000
ROA not before:           Sat 22 Jul 2023 00:00:00 +0000
ROA not after:            Sat 26 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:65:e1:59:2f:3f:4b:47:81:1e:1d:5d:95:54:85:1f:b7:63:c4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 22 00:00:00 2023 GMT
            Not After : Aug 26 23:59:59 2023 GMT
        Subject: serialNumber=b0d126e86dca8494c31294ecc7c1442a1499a86ca1222d88a3ae1401976c2a30, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:41:92:5f:7f:c5:7f:68:35:fb:07:d1:9b:6b:
                    fe:37:46:c2:7f:7c:e8:67:a6:ed:99:a3:93:11:d1:
                    67:16:d2:28:42:95:a8:3e:03:a5:29:05:44:6c:aa:
                    c1:61:21:df:ae:76:f5:55:96:c0:4f:b0:1f:2f:7e:
                    55:79:d3:73:03:18:65:93:53:aa:38:b8:3c:b5:3c:
                    e1:7c:34:6d:31:4a:82:c3:b3:d7:23:8f:bf:be:41:
                    bc:77:68:8f:48:3c:6d:4c:0e:e2:5c:06:3b:b3:0d:
                    00:fe:d7:ff:3e:11:ee:d8:c2:fe:a9:25:5d:18:65:
                    6b:8d:35:77:65:aa:8f:76:47:c4:71:6f:37:07:0b:
                    46:40:64:5e:01:00:57:5d:d0:85:3b:e6:03:59:54:
                    e7:ed:93:52:b4:e8:ce:69:37:b5:13:34:62:ac:e1:
                    54:5d:bc:af:de:8c:4c:ee:71:24:8b:1c:ed:35:c6:
                    8d:a8:3a:0b:f7:64:fc:68:70:b8:e2:9d:d4:cd:cd:
                    29:03:9d:2a:de:74:95:4b:58:79:ec:d1:c7:c8:2e:
                    bb:8e:dc:12:56:ea:7e:1b:d8:81:54:38:66:33:82:
                    d3:78:16:7a:3a:44:28:48:54:0a:ed:7c:af:e8:be:
                    45:61:3a:44:26:76:71:0c:a1:7d:8a:f3:44:ab:25:
                    16:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:79:E0:B3:A9:C5:89:9F:8E:C6:0C:AD:83:87:99:43:6B:32:3A:E2
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/24dcf84e-9923-4df8-9fc5-b1ecd6220a47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:22:e1:8e:bd:4b:09:2a:f5:03:6f:4c:45:95:85:23:a0:c9:
         f3:c3:eb:81:c5:01:a6:44:38:27:f5:c5:e4:07:e6:73:1e:d9:
         a2:00:99:cd:cb:7b:1f:a5:ae:00:e7:04:f1:e3:6a:7c:35:78:
         b2:d4:a1:51:98:3a:fd:4f:ec:0a:55:60:57:1c:6b:a2:0a:28:
         49:b8:59:b1:8b:4c:a7:15:f7:d4:41:78:af:61:61:ab:16:b8:
         4c:e3:8e:30:df:bc:64:2e:6e:2d:60:2c:96:35:65:50:7f:77:
         ce:1e:69:1b:51:33:a7:8a:aa:e3:f2:a6:27:1c:05:f2:98:91:
         4a:92:6f:d3:09:a1:41:b9:c7:90:68:a0:f1:8e:14:63:94:6a:
         4b:9e:3d:35:74:00:40:87:e8:40:00:a6:26:40:96:c0:b0:02:
         30:0d:68:85:d1:3f:08:3d:59:66:95:28:75:ea:fc:b9:77:29:
         70:96:19:19:e4:6e:02:29:d7:18:cd:21:fe:6b:8a:3c:58:a4:
         d6:dd:56:3b:a2:4d:d5:20:ac:d7:03:f7:92:1c:3c:56:ce:c6:
         21:dd:22:7a:31:27:d7:1b:12:98:f8:ae:d8:a0:34:26:9d:61:
         14:09:4d:e0:23:f5:25:33:5e:cb:c9:a2:b7:f2:a4:39:e4:c1:
         18:25:bd:56
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZGXhWS8/S0eBHh1dlVSFH7djxAMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzIyMDAwMDAwWhcNMjMwODI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMGQxMjZlODZkY2E4NDk0YzMxMjk0ZWNjN2MxNDQyYTE0
OTlhODZjYTEyMjJkODhhM2FlMTQwMTk3NmMyYTMwMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDiQZJff8V/aDX7B9Gba/43RsJ/fOhnpu2Zo5MR0WcW0ihC
lag+A6UpBURsqsFhId+udvVVlsBPsB8vflV503MDGGWTU6o4uDy1POF8NG0xSoLD
s9cjj7++Qbx3aI9IPG1MDuJcBjuzDQD+1/8+Ee7Ywv6pJV0YZWuNNXdlqo92R8Rx
bzcHC0ZAZF4BAFdd0IU75gNZVOftk1K06M5pN7UTNGKs4VRdvK/ejEzucSSLHO01
xo2oOgv3ZPxocLjindTNzSkDnSredJVLWHns0cfILruO3BJW6n4b2IFUOGYzgtN4
Fno6RChIVArtfK/ovkVhOkQmdnEMoX2K80SrJRaLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUs3ngs6nFiZ+Oxgytg4eZQ2syOuIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzI0ZGNmODRlLTk5MjMtNGRmOC05ZmM1LWIxZWNkNjIyMGE0Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABAi4Y69Swkq9QNvTEWVhSOgyfPD
64HFAaZEOCf1xeQH5nMe2aIAmc3Lex+lrgDnBPHjanw1eLLUoVGYOv1P7ApVYFcc
a6IKKEm4WbGLTKcV99RBeK9hYasWuEzjjjDfvGQubi1gLJY1ZVB/d84eaRtRM6eK
quPypiccBfKYkUqSb9MJoUG5x5BooPGOFGOUakuePTV0AECH6EAApiZAlsCwAjAN
aIXRPwg9WWaVKHXq/Ll3KXCWGRnkbgIp1xjNIf5rijxYpNbdVjuiTdUgrNcD95Ic
PFbOxiHdInoxJ9cbEpj4rtigNCadYRQJTeAj9SUzXsvJorfypDnkwRglvVY=
-----END CERTIFICATE-----