Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4c0babec-c7aa-4810-87ce-26a6f5beb502.roa
File:                     4c0babec-c7aa-4810-87ce-26a6f5beb502.roa (raw, json)
Hash identifier:          01B74CsA4GOGmhrBbhlgOF+hfGA6oMCEjBehIf3LnrM=
Subject key identifier:   E0:EB:F5:F4:8F:30:0F:82:FF:7C:B3:2D:DB:55:B2:72:78:C9:49:D3
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5D1A1184954CA26629167B08982B629D2A49EEDF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4c0babec-c7aa-4810-87ce-26a6f5beb502.roa
Signing time:             Tue 28 Nov 2023 00:00:00 +0000
ROA not before:           Tue 28 Nov 2023 00:00:00 +0000
ROA not after:            Tue 02 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1a:11:84:95:4c:a2:66:29:16:7b:08:98:2b:62:9d:2a:49:ee:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 28 00:00:00 2023 GMT
            Not After : Jan  2 23:59:59 2024 GMT
        Subject: serialNumber=d11cb43944be2f3961b46d63824f728736224780c809ed2dac108cbed5a7251f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:6c:13:1c:67:dc:2a:2d:ba:b4:1b:27:da:
                    ca:34:20:38:4c:15:ff:35:f2:58:84:ce:66:3e:d3:
                    21:ce:1d:b1:d9:3c:76:82:ad:86:02:dc:05:37:f4:
                    8b:68:49:61:b8:a2:16:ab:bf:92:5f:97:4d:ec:ab:
                    98:87:1d:05:6f:4e:59:21:f4:cd:3a:67:9c:c9:4b:
                    41:55:e0:df:9d:3b:93:37:9a:63:a6:ab:93:f2:e7:
                    48:cf:87:30:e4:72:6a:ff:a1:63:a9:72:c1:1b:52:
                    16:62:c2:19:1a:c5:49:1b:d5:6f:78:bc:e3:c8:6c:
                    50:33:d8:aa:c8:8c:48:44:74:88:37:2e:36:4f:98:
                    22:31:d1:b4:1e:bb:5a:97:04:2d:cd:d9:28:24:f2:
                    66:75:9d:2a:27:a2:aa:53:2a:dd:f6:73:bd:f3:b1:
                    0d:d4:81:c2:2b:69:5a:93:96:b0:dc:3f:61:d6:2f:
                    69:1b:a7:cf:9f:b4:34:90:d3:65:41:bb:c0:c0:10:
                    87:05:b9:b7:47:63:0f:d1:68:6f:82:4a:09:dd:0b:
                    7d:ff:2a:32:f5:c8:52:17:be:be:2a:53:b0:b5:09:
                    43:f0:0c:ec:e0:b8:d2:e5:08:c3:a6:45:37:fd:d9:
                    1f:9b:cf:e2:8c:0e:9e:f5:68:16:1a:53:6f:ed:fd:
                    9a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EB:F5:F4:8F:30:0F:82:FF:7C:B3:2D:DB:55:B2:72:78:C9:49:D3
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4c0babec-c7aa-4810-87ce-26a6f5beb502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:5a:91:9d:d6:7e:a8:f4:39:c2:fe:31:7d:d2:0a:14:32:d1:
         bf:3a:e2:11:27:90:ab:9d:08:4a:c3:04:c3:19:30:64:e3:5d:
         93:b6:4e:17:2f:51:70:bb:18:8d:f9:69:db:ae:84:0e:86:c4:
         da:98:ed:51:a4:74:4e:43:89:35:61:d3:57:70:1b:23:37:49:
         cb:af:6f:c7:22:ef:e0:09:64:fe:73:79:11:23:7e:cf:61:e6:
         1f:ff:58:03:f8:f8:67:48:de:af:e4:35:88:1e:b3:85:42:99:
         10:57:39:e8:f2:ff:31:7f:27:d3:a4:cf:51:bd:90:85:69:71:
         63:67:72:50:c3:72:5f:8a:3d:da:22:ad:f3:da:c4:4a:a0:5e:
         d9:63:b1:b5:3e:fc:69:c3:04:eb:74:4f:6d:d1:bd:20:52:22:
         67:4d:42:50:42:2b:16:01:97:ee:78:cb:2e:02:ff:02:05:67:
         12:9a:92:9b:ce:cc:f4:8d:f2:2d:5c:2d:fe:44:ca:34:d7:c8:
         2e:46:33:a1:b2:91:40:f5:a5:eb:fb:24:46:dd:cd:0c:70:b5:
         77:f7:23:29:1a:e7:6e:12:e8:e8:a8:c5:8a:61:37:d5:13:58:
         21:83:a3:25:d3:6b:1f:9b:0c:26:bf:62:27:f6:81:97:ef:07:
         a5:03:53:f0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXRoRhJVMomYpFnsImCtinSpJ7t8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTI4MDAwMDAwWhcNMjQwMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMTFjYjQzOTQ0YmUyZjM5NjFiNDZkNjM4MjRmNzI4NzM2
MjI0NzgwYzgwOWVkMmRhYzEwOGNiZWQ1YTcyNTFmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDI7GwTHGfcKi26tBsn2so0IDhMFf818liEzmY+0yHOHbHZ
PHaCrYYC3AU39ItoSWG4oharv5Jfl03sq5iHHQVvTlkh9M06Z5zJS0FV4N+dO5M3
mmOmq5Py50jPhzDkcmr/oWOpcsEbUhZiwhkaxUkb1W94vOPIbFAz2KrIjEhEdIg3
LjZPmCIx0bQeu1qXBC3N2Sgk8mZ1nSonoqpTKt32c73zsQ3UgcIraVqTlrDcP2HW
L2kbp8+ftDSQ02VBu8DAEIcFubdHYw/RaG+CSgndC33/KjL1yFIXvr4qU7C1CUPw
DOzguNLlCMOmRTf92R+bz+KMDp71aBYaU2/t/ZrFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU4Ov19I8wD4L/fLMt21WycnjJSdMwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzRjMGJhYmVjLWM3YWEtNDgxMC04N2NlLTI2YTZmNWJlYjUwMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABdakZ3Wfqj0OcL+MX3SChQy0b86
4hEnkKudCErDBMMZMGTjXZO2ThcvUXC7GI35aduuhA6GxNqY7VGkdE5DiTVh01dw
GyM3Scuvb8ci7+AJZP5zeREjfs9h5h//WAP4+GdI3q/kNYges4VCmRBXOejy/zF/
J9Okz1G9kIVpcWNnclDDcl+KPdoirfPaxEqgXtljsbU+/GnDBOt0T23RvSBSImdN
QlBCKxYBl+54yy4C/wIFZxKakpvOzPSN8i1cLf5EyjTXyC5GM6GykUD1pev7JEbd
zQxwtXf3Iyka524S6OioxYphN9UTWCGDoyXTax+bDCa/Yif2gZfvB6UDU/A=
-----END CERTIFICATE-----