Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3792574a-d6ed-4939-8400-cd4ae92ff6c5.roa
File:                     3792574a-d6ed-4939-8400-cd4ae92ff6c5.roa (raw, json)
Hash identifier:          gWHa60TU9/JZG82no/LRSz72K2wZNhiERV+UGIrm2fM=
Subject key identifier:   44:89:A6:FA:74:84:93:4D:CE:CB:F6:F8:CE:C8:BE:B1:CC:E7:15:19
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7748CB685D41D2A48DC89F18CB65947D28556B61
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3792574a-d6ed-4939-8400-cd4ae92ff6c5.roa
Signing time:             Fri 13 Oct 2023 00:00:00 +0000
ROA not before:           Fri 13 Oct 2023 00:00:00 +0000
ROA not after:            Fri 17 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:48:cb:68:5d:41:d2:a4:8d:c8:9f:18:cb:65:94:7d:28:55:6b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 13 00:00:00 2023 GMT
            Not After : Nov 17 23:59:59 2023 GMT
        Subject: serialNumber=a48dbd34d7b32173a6d2f7c85a0bfd8e3bd5cb2f059ba82086432a8b4f1108f5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:55:e1:a7:6a:86:e6:d9:61:2a:b1:e3:1b:
                    4f:6a:d7:f7:ac:3d:b5:48:ae:cb:15:53:c0:d2:bb:
                    e1:51:cb:c0:78:69:c4:00:e7:58:1e:b9:54:ed:12:
                    c4:9e:68:db:2a:6d:7d:99:36:d9:7a:44:67:f8:56:
                    e0:0e:93:8d:d3:a2:93:90:4e:0e:e4:3c:d3:f4:7c:
                    98:28:75:c0:f5:9c:5a:e7:ff:a0:3d:2b:4c:d3:d5:
                    76:41:b5:5f:b8:e3:38:de:ab:bf:89:5c:e7:0b:d7:
                    b9:c8:9a:9c:96:de:9f:88:24:29:ad:db:db:37:8e:
                    97:07:0a:68:4c:12:af:dd:fc:0d:70:45:6e:14:10:
                    6e:45:cb:a6:b8:e5:7a:7e:6b:8f:dd:6c:04:4f:37:
                    44:1e:c8:f3:30:17:bc:66:fc:dc:34:13:98:e2:14:
                    fc:5e:08:38:68:60:e1:b1:93:8e:cc:52:2d:ee:94:
                    a3:1b:d3:81:1d:21:34:80:de:9c:13:44:27:ba:07:
                    70:9a:35:29:14:a6:36:08:89:9a:85:78:c0:fa:6c:
                    a7:01:33:fe:11:e4:0f:41:b1:9d:32:01:e0:f7:be:
                    56:79:20:d5:3c:8f:b2:fe:c7:61:f7:ce:ab:5b:fe:
                    75:a3:bb:3d:80:df:fb:5c:f6:99:2e:c4:5d:59:78:
                    69:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:89:A6:FA:74:84:93:4D:CE:CB:F6:F8:CE:C8:BE:B1:CC:E7:15:19
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3792574a-d6ed-4939-8400-cd4ae92ff6c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:c0:4f:3e:0a:9c:1d:1b:21:1d:02:22:10:1c:0f:af:70:ac:
         48:2e:12:8d:62:60:29:80:ba:00:85:86:30:a0:13:63:93:12:
         c8:32:da:8f:02:84:66:9a:99:06:cf:79:b6:a0:4a:98:01:b9:
         3b:a0:f2:47:a6:86:01:39:c7:4e:71:8b:ab:a1:f1:94:dc:3d:
         b7:34:61:bd:22:df:23:35:bf:52:7d:c4:ee:00:87:fb:5a:2f:
         3f:1f:38:2d:fb:0b:47:f1:fb:6f:8e:5f:7a:fb:8e:a2:73:1f:
         b5:fc:fa:da:8d:75:ec:66:81:94:aa:6b:dd:71:c2:b6:0e:24:
         c9:09:85:cf:81:92:aa:c7:cb:3e:4c:78:f9:42:96:77:4b:1e:
         62:e2:e7:dd:1e:cb:21:8c:85:87:dc:9e:fb:55:95:86:fc:49:
         c5:cc:c2:c5:3b:c7:af:6b:84:56:0c:b7:e7:ce:9a:55:cd:0d:
         3c:f3:ce:9f:3b:86:78:66:b5:66:87:1a:b1:cf:5d:18:3a:78:
         f2:5f:0d:9a:b7:a5:7c:15:4c:e7:aa:f7:af:ce:b3:a6:b4:07:
         be:b3:72:55:b2:9c:f8:05:52:d9:36:79:ad:2f:4d:3a:c4:e9:
         e5:8b:58:e3:d8:9a:e1:d5:03:6b:88:60:b7:67:25:f9:4a:c4:
         3c:b3:27:ca
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUd0jLaF1B0qSNyJ8Yy2WUfShVa2EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDEzMDAwMDAwWhcNMjMxMTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNDhkYmQzNGQ3YjMyMTczYTZkMmY3Yzg1YTBiZmQ4ZTNi
ZDVjYjJmMDU5YmE4MjA4NjQzMmE4YjRmMTEwOGY1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDLQVXhp2qG5tlhKrHjG09q1/esPbVIrssVU8DSu+FRy8B4
acQA51geuVTtEsSeaNsqbX2ZNtl6RGf4VuAOk43TopOQTg7kPNP0fJgodcD1nFrn
/6A9K0zT1XZBtV+44zjeq7+JXOcL17nImpyW3p+IJCmt29s3jpcHCmhMEq/d/A1w
RW4UEG5Fy6a45Xp+a4/dbARPN0QeyPMwF7xm/Nw0E5jiFPxeCDhoYOGxk47MUi3u
lKMb04EdITSA3pwTRCe6B3CaNSkUpjYIiZqFeMD6bKcBM/4R5A9BsZ0yAeD3vlZ5
INU8j7L+x2H3zqtb/nWjuz2A3/tc9pkuxF1ZeGkpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURImm+nSEk03Oy/b4zsi+scznFRkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzM3OTI1NzRhLWQ2ZWQtNDkzOS04NDAwLWNkNGFlOTJmZjZjNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAC3ATz4KnB0bIR0CIhAcD69wrEgu
Eo1iYCmAugCFhjCgE2OTEsgy2o8ChGaamQbPebagSpgBuTug8kemhgE5x05xi6uh
8ZTcPbc0Yb0i3yM1v1J9xO4Ah/taLz8fOC37C0fx+2+OX3r7jqJzH7X8+tqNdexm
gZSqa91xwrYOJMkJhc+BkqrHyz5MePlClndLHmLi590eyyGMhYfcnvtVlYb8ScXM
wsU7x69rhFYMt+fOmlXNDTzzzp87hnhmtWaHGrHPXRg6ePJfDZq3pXwVTOeq96/O
s6a0B76zclWynPgFUtk2ea0vTTrE6eWLWOPYmuHVA2uIYLdnJflKxDyzJ8o=
-----END CERTIFICATE-----