Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/35ccaeb6-05ce-4642-ab0c-2889c491b334.roa
File:                     35ccaeb6-05ce-4642-ab0c-2889c491b334.roa (raw, json)
Hash identifier:          P5Kx767EMcFXdNIUpDnKJ60cZoZNH4KiV8OHdOLj3Wg=
Subject key identifier:   DB:1E:5E:A4:88:C0:15:52:84:BD:CB:07:0F:F2:42:40:C9:DD:DB:09
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       549514A88CFEED5057943DDCD408392B89762148
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/35ccaeb6-05ce-4642-ab0c-2889c491b334.roa
Signing time:             Sun 18 Jun 2023 00:00:00 +0000
ROA not before:           Sun 18 Jun 2023 00:00:00 +0000
ROA not after:            Sun 23 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:95:14:a8:8c:fe:ed:50:57:94:3d:dc:d4:08:39:2b:89:76:21:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 18 00:00:00 2023 GMT
            Not After : Jul 23 23:59:59 2023 GMT
        Subject: serialNumber=c5a94d8d98076db1ac2b400e127bd9be95feafe756909d3d601f1375545f00f7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:9f:3e:66:16:9e:9e:8a:96:2c:03:6d:b4:
                    d9:1b:e3:24:a7:4e:2a:43:9e:ae:53:07:de:3b:ce:
                    b7:02:1a:e7:ef:ca:c6:12:22:38:0f:a2:be:fa:70:
                    27:d8:10:fb:00:f5:09:b3:ac:db:27:71:13:2d:f0:
                    01:33:ff:e2:65:95:ec:80:40:b2:96:22:4c:e2:53:
                    77:c2:fd:4b:65:48:97:d0:ba:0e:96:5d:11:91:f8:
                    8c:65:ae:80:13:3d:e4:5c:1f:8e:ef:6b:7c:ea:39:
                    eb:7f:09:9f:12:4f:a8:b9:23:4d:a2:3b:ad:74:44:
                    c5:bd:98:a0:e3:e9:1f:d6:c0:6f:77:30:00:63:20:
                    70:2c:68:2a:d1:74:69:63:75:21:ea:54:d0:d7:3d:
                    0a:f9:82:bd:8d:e1:c6:97:ae:08:98:26:46:b0:75:
                    66:6a:8c:26:f1:01:30:b9:f3:2a:f0:40:53:be:d8:
                    d2:e0:da:be:aa:10:1f:f5:4c:e7:d3:9d:50:6f:0f:
                    94:16:fb:ff:18:cd:37:d1:6b:fb:98:94:ae:bc:70:
                    c2:b4:53:62:89:a0:1b:f8:58:e0:dd:6d:32:0f:3d:
                    1b:fd:68:bf:0e:6d:43:4b:ed:6c:a8:cb:aa:9b:f0:
                    e8:3c:9f:cf:14:5a:7e:f2:ad:70:b5:21:4c:5c:32:
                    b6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1E:5E:A4:88:C0:15:52:84:BD:CB:07:0F:F2:42:40:C9:DD:DB:09
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/35ccaeb6-05ce-4642-ab0c-2889c491b334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:60:d3:12:3b:e8:b2:1b:9b:0d:4f:b1:1e:00:4d:9f:59:83:
         9e:e5:46:b3:6c:90:9a:d1:b6:64:72:8e:df:2c:2c:ac:03:de:
         5c:c5:08:38:1f:60:04:04:4d:3b:6b:0a:d6:46:bd:99:cb:3f:
         99:cc:3b:10:57:6a:43:1d:81:8e:69:1d:7a:fe:26:c1:b8:c0:
         bc:6d:92:cf:7e:84:c8:cd:d1:52:a3:be:9a:45:ee:90:85:20:
         11:13:20:5a:fe:e1:c3:95:08:98:e5:de:6b:cd:02:25:7a:22:
         a6:ac:a3:99:f0:bc:b8:95:ac:33:79:2f:c7:6e:46:f3:e5:33:
         0f:bc:b0:ad:66:86:78:77:3b:ba:10:24:cb:68:fc:a6:06:36:
         d5:b2:58:5f:88:5d:f2:4e:97:73:05:9a:a9:90:8d:f5:5f:c1:
         38:f6:28:1a:19:3b:47:5f:0a:92:8e:44:ef:c9:4d:68:4f:4a:
         7c:e5:42:31:ad:10:7a:02:7a:f4:a3:d2:4d:4c:9a:09:3c:cd:
         27:88:01:97:38:03:85:6c:6f:de:fc:10:02:ad:e1:29:4f:a6:
         3f:dd:a9:a1:84:44:23:2f:91:32:87:93:28:fb:73:33:36:d5:
         ba:30:77:62:ad:58:f3:55:a1:47:98:02:67:30:52:e0:17:4f:
         c9:d2:b4:09
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVJUUqIz+7VBXlD3c1Ag5K4l2IUgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjE4MDAwMDAwWhcNMjMwNzIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNWE5NGQ4ZDk4MDc2ZGIxYWMyYjQwMGUxMjdiZDliZTk1
ZmVhZmU3NTY5MDlkM2Q2MDFmMTM3NTU0NWYwMGY3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCykZ8+ZhaenoqWLANttNkb4ySnTipDnq5TB947zrcCGufv
ysYSIjgPor76cCfYEPsA9QmzrNsncRMt8AEz/+JlleyAQLKWIkziU3fC/UtlSJfQ
ug6WXRGR+IxlroATPeRcH47va3zqOet/CZ8ST6i5I02iO610RMW9mKDj6R/WwG93
MABjIHAsaCrRdGljdSHqVNDXPQr5gr2N4caXrgiYJkawdWZqjCbxATC58yrwQFO+
2NLg2r6qEB/1TOfTnVBvD5QW+/8YzTfRa/uYlK68cMK0U2KJoBv4WODdbTIPPRv9
aL8ObUNL7Wyoy6qb8Og8n88UWn7yrXC1IUxcMrZjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2x5epIjAFVKEvcsHD/JCQMnd2wkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzM1Y2NhZWI2LTA1Y2UtNDY0Mi1hYjBjLTI4ODljNDkxYjMzNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIRg0xI76LIbmw1PsR4ATZ9Zg57l
RrNskJrRtmRyjt8sLKwD3lzFCDgfYAQETTtrCtZGvZnLP5nMOxBXakMdgY5pHXr+
JsG4wLxtks9+hMjN0VKjvppF7pCFIBETIFr+4cOVCJjl3mvNAiV6Iqaso5nwvLiV
rDN5L8duRvPlMw+8sK1mhnh3O7oQJMto/KYGNtWyWF+IXfJOl3MFmqmQjfVfwTj2
KBoZO0dfCpKORO/JTWhPSnzlQjGtEHoCevSj0k1Mmgk8zSeIAZc4A4Vsb978EAKt
4SlPpj/dqaGERCMvkTKHkyj7czM21bowd2KtWPNVoUeYAmcwUuAXT8nStAk=
-----END CERTIFICATE-----