Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3cb1018e-3fae-4b06-bc4a-5e75254bed7f.roa
File:                     3cb1018e-3fae-4b06-bc4a-5e75254bed7f.roa (raw, json)
Hash identifier:          /+RRC9GsVsyCMJcQw1BXCUxd/26TlpOK4Z+ndNWIm3k=
Subject key identifier:   8C:03:31:F4:8C:C4:3E:22:BB:34:14:1A:EC:ED:31:EE:16:B8:BC:BA
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0D184A4297A973DE2E093F9C9DCB75D113779197
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3cb1018e-3fae-4b06-bc4a-5e75254bed7f.roa
Signing time:             Sat 15 Jul 2023 00:00:00 +0000
ROA not before:           Sat 15 Jul 2023 00:00:00 +0000
ROA not after:            Sat 19 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:18:4a:42:97:a9:73:de:2e:09:3f:9c:9d:cb:75:d1:13:77:91:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 15 00:00:00 2023 GMT
            Not After : Aug 19 23:59:59 2023 GMT
        Subject: serialNumber=f1700d819525ab7670914427d9e103df1634cb5609f764d8c37650fee23301a1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:28:8e:38:3f:17:23:31:25:b0:10:36:d2:c3:
                    72:18:57:48:1c:36:45:4c:c6:0f:ae:70:6b:43:9b:
                    b3:93:ce:06:af:a2:7d:a3:e9:19:20:78:a0:28:a9:
                    18:2d:c5:74:d3:5f:e3:18:11:5d:ee:0d:d2:c7:64:
                    85:d4:48:2f:93:9b:e6:54:f3:a5:47:e8:23:2c:c6:
                    8c:80:54:5f:5f:de:1f:0d:8c:6b:61:d0:a5:37:98:
                    6d:8a:e9:e2:a3:be:c5:80:5c:a8:fe:12:3c:ac:ee:
                    60:09:ef:cc:1d:34:97:4e:91:53:31:71:36:c4:69:
                    08:c8:d6:1b:78:04:0c:01:43:bd:7c:69:85:bd:a4:
                    f6:fb:e7:54:41:65:3c:51:ee:6b:c4:77:7b:c7:b8:
                    df:78:3a:f8:1b:d7:d6:b4:d7:e5:ab:df:87:05:49:
                    77:1c:7f:61:de:e0:9f:bb:42:b0:b7:9d:56:69:60:
                    8d:9d:50:f7:3c:8e:53:f2:ce:25:57:58:85:9a:e7:
                    54:86:4c:be:1b:e2:cf:d8:2b:c1:b9:4d:6a:a9:4b:
                    48:2e:63:d0:be:82:a9:37:ac:32:a4:72:e7:54:3f:
                    33:f9:c1:d1:0a:06:84:88:6d:02:17:ae:92:3c:99:
                    6e:c0:7e:31:37:c6:70:8d:a0:e3:24:e9:05:bb:ff:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:03:31:F4:8C:C4:3E:22:BB:34:14:1A:EC:ED:31:EE:16:B8:BC:BA
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3cb1018e-3fae-4b06-bc4a-5e75254bed7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:92:80:26:1d:b3:9a:00:cb:9c:99:84:87:61:19:8c:5d:7c:
         a4:53:d5:08:3a:21:a5:3d:a9:ec:f1:05:31:b2:a0:b2:87:e6:
         4e:83:4e:9f:43:0d:51:12:bc:7e:0a:e0:81:0b:69:d8:e0:a5:
         8f:c1:62:69:65:27:f8:f2:c0:97:75:48:09:8c:fe:b8:0c:81:
         66:2e:21:65:61:8f:2b:1f:8c:46:b9:d1:8e:32:04:12:ef:1d:
         5b:4b:89:4c:b0:98:bf:ab:1b:48:3b:0f:57:c8:fb:74:ab:71:
         89:c7:8f:b2:43:8e:e3:81:56:a1:8a:46:ff:26:e2:79:63:7d:
         03:21:55:bb:75:ed:25:1d:8a:b8:eb:d1:4e:db:73:5f:56:9e:
         cd:13:51:7a:29:e1:36:08:c3:15:14:8f:42:b1:70:de:7b:a3:
         b2:b0:63:77:ff:58:bc:a2:e6:40:0e:7e:0e:0a:c9:09:72:07:
         3d:f6:a3:8c:17:41:74:e7:15:76:d7:65:76:15:36:1a:bd:9e:
         4a:ad:0d:f6:7e:d7:bd:d7:2b:b8:52:20:18:b0:5d:30:44:22:
         4b:82:73:71:13:3a:16:5a:78:d2:38:5f:ae:66:1e:48:c9:23:
         60:c4:9f:ee:56:8a:2f:a4:86:6a:76:a6:65:ad:dd:09:2f:27:
         0b:ba:bd:5b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDRhKQpepc94uCT+cnct10RN3kZcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzE1MDAwMDAwWhcNMjMwODE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMTcwMGQ4MTk1MjVhYjc2NzA5MTQ0MjdkOWUxMDNkZjE2
MzRjYjU2MDlmNzY0ZDhjMzc2NTBmZWUyMzMwMWExMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCRKI44PxcjMSWwEDbSw3IYV0gcNkVMxg+ucGtDm7OTzgav
on2j6RkgeKAoqRgtxXTTX+MYEV3uDdLHZIXUSC+Tm+ZU86VH6CMsxoyAVF9f3h8N
jGth0KU3mG2K6eKjvsWAXKj+Ejys7mAJ78wdNJdOkVMxcTbEaQjI1ht4BAwBQ718
aYW9pPb751RBZTxR7mvEd3vHuN94Ovgb19a01+Wr34cFSXccf2He4J+7QrC3nVZp
YI2dUPc8jlPyziVXWIWa51SGTL4b4s/YK8G5TWqpS0guY9C+gqk3rDKkcudUPzP5
wdEKBoSIbQIXrpI8mW7AfjE3xnCNoOMk6QW7/5J1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjAMx9IzEPiK7NBQa7O0x7ha4vLowHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzNjYjEwMThlLTNmYWUtNGIwNi1iYzRhLTVlNzUyNTRiZWQ3Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABySgCYds5oAy5yZhIdhGYxdfKRT
1Qg6IaU9qezxBTGyoLKH5k6DTp9DDVESvH4K4IELadjgpY/BYmllJ/jywJd1SAmM
/rgMgWYuIWVhjysfjEa50Y4yBBLvHVtLiUywmL+rG0g7D1fI+3SrcYnHj7JDjuOB
VqGKRv8m4nljfQMhVbt17SUdirjr0U7bc19Wns0TUXop4TYIwxUUj0KxcN57o7Kw
Y3f/WLyi5kAOfg4KyQlyBz32o4wXQXTnFXbXZXYVNhq9nkqtDfZ+173XK7hSIBiw
XTBEIkuCc3ETOhZaeNI4X65mHkjJI2DEn+5Wii+khmp2pmWt3QkvJwu6vVs=
-----END CERTIFICATE-----