Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4dce175f-ab63-4237-9567-dab04b4c8f2c.roa
File:                     4dce175f-ab63-4237-9567-dab04b4c8f2c.roa (raw, json)
Hash identifier:          JVxhEFWPBpChTGPC9pvos9KsUFm8FRWxFTBm8PI/DGs=
Subject key identifier:   8A:6A:B4:C7:90:1E:05:19:14:9B:F7:EE:89:36:12:48:B9:B7:81:29
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3BE080E380382CC2403A08547B688137D448019C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4dce175f-ab63-4237-9567-dab04b4c8f2c.roa
Signing time:             Thu 22 Jun 2023 00:00:00 +0000
ROA not before:           Thu 22 Jun 2023 00:00:00 +0000
ROA not after:            Thu 27 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e0:80:e3:80:38:2c:c2:40:3a:08:54:7b:68:81:37:d4:48:01:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 22 00:00:00 2023 GMT
            Not After : Jul 27 23:59:59 2023 GMT
        Subject: serialNumber=10b3e96d175b15450f4160f34bfc54428f08790ce9c0c51db298dd63226dfc33, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:52:92:da:d5:20:c4:55:c1:37:73:02:3b:10:
                    49:3c:96:b3:49:c7:68:13:9b:60:d2:34:57:b2:31:
                    15:0e:30:48:f4:3e:66:ba:55:4a:0f:f9:ff:30:27:
                    c1:f1:32:af:8c:5c:4e:37:f1:7f:ef:4d:a8:f4:de:
                    c7:13:ed:00:c9:ee:c3:d1:f2:d8:69:74:7c:0f:cd:
                    e2:32:00:63:4c:38:ec:91:5a:0b:bb:2f:35:c9:bf:
                    c4:52:ce:b0:51:3b:f1:b3:f3:06:d3:ce:45:e8:25:
                    96:11:33:cf:2d:f5:8b:fa:a7:22:d1:35:79:aa:ed:
                    38:77:74:e3:c8:f3:c3:bc:f6:ce:84:a6:91:c6:42:
                    c6:bd:c6:d5:6d:46:93:68:d1:d6:17:0a:56:71:03:
                    35:d6:81:9f:da:ff:2a:49:90:44:99:c6:94:7d:48:
                    b6:92:03:35:12:02:35:bb:a7:d8:15:35:05:ad:68:
                    5b:bc:48:c6:a2:d6:7d:70:e2:f8:89:9f:7f:73:08:
                    15:92:b5:a4:ce:d8:66:40:c3:84:7a:5c:67:86:d8:
                    fa:c6:b2:0e:c0:d8:7d:58:ab:90:4f:c8:be:d4:1a:
                    c1:5c:fa:b1:c6:34:4c:48:b2:d0:5f:71:2c:4f:6f:
                    fc:85:f8:5d:dc:31:45:d6:59:91:8d:e4:23:85:69:
                    c8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6A:B4:C7:90:1E:05:19:14:9B:F7:EE:89:36:12:48:B9:B7:81:29
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4dce175f-ab63-4237-9567-dab04b4c8f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:2f:b6:b6:c0:7f:ac:b4:c7:db:99:93:9f:23:46:7e:c8:14:
         2e:9c:36:d4:3a:89:36:bf:83:9d:3b:fc:2c:6c:27:88:82:69:
         f2:3c:a6:57:64:37:71:db:8c:fe:0f:0a:57:7c:3b:c5:25:0c:
         0b:b9:8b:7f:71:15:bf:d9:b9:f2:23:c0:6b:ab:5e:e9:40:78:
         36:c7:c4:33:4e:66:f7:2a:68:80:e3:cd:e7:4b:b1:e4:33:1b:
         61:28:db:51:81:f1:71:70:75:0e:35:67:51:34:02:80:6b:a7:
         de:18:81:a7:2f:7d:72:b9:de:2f:e5:e7:be:cc:f8:7b:70:ac:
         fa:01:b9:5e:04:ac:87:d2:59:57:4e:7e:2f:ef:ef:26:0b:54:
         4d:2e:9f:a6:85:1f:8e:51:35:52:4c:85:d0:13:05:3f:df:34:
         74:05:7c:51:8c:fc:52:e2:a4:60:ba:cc:aa:01:c8:c7:6a:98:
         0b:8e:b1:ae:5b:5d:1e:9c:ed:80:26:4b:32:9a:48:4a:ed:81:
         a8:19:40:9d:55:23:56:88:73:13:3e:ff:65:6e:ce:bc:38:3c:
         98:27:2a:47:80:17:ea:80:65:55:98:92:c8:e3:d8:8b:9f:1a:
         0a:48:68:2a:ee:ef:c9:fd:b8:c9:8f:a3:6d:dc:0f:a9:df:eb:
         5e:6e:29:2b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUO+CA44A4LMJAOghUe2iBN9RIAZwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjIyMDAwMDAwWhcNMjMwNzI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AxMGIzZTk2ZDE3NWIxNTQ1MGY0MTYwZjM0YmZjNTQ0Mjhm
MDg3OTBjZTljMGM1MWRiMjk4ZGQ2MzIyNmRmYzMzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPUpLa1SDEVcE3cwI7EEk8lrNJx2gTm2DSNFeyMRUOMEj0
Pma6VUoP+f8wJ8HxMq+MXE438X/vTaj03scT7QDJ7sPR8thpdHwPzeIyAGNMOOyR
Wgu7LzXJv8RSzrBRO/Gz8wbTzkXoJZYRM88t9Yv6pyLRNXmq7Th3dOPI88O89s6E
ppHGQsa9xtVtRpNo0dYXClZxAzXWgZ/a/ypJkESZxpR9SLaSAzUSAjW7p9gVNQWt
aFu8SMai1n1w4viJn39zCBWStaTO2GZAw4R6XGeG2PrGsg7A2H1Yq5BPyL7UGsFc
+rHGNExIstBfcSxPb/yF+F3cMUXWWZGN5COFacj3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUimq0x5AeBRkUm/fuiTYSSLm3gSkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzRkY2UxNzVmLWFiNjMtNDIzNy05NTY3LWRhYjA0YjRjOGYyYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKsvtrbAf6y0x9uZk58jRn7IFC6c
NtQ6iTa/g507/CxsJ4iCafI8pldkN3HbjP4PCld8O8UlDAu5i39xFb/ZufIjwGur
XulAeDbHxDNOZvcqaIDjzedLseQzG2Eo21GB8XFwdQ41Z1E0AoBrp94YgacvfXK5
3i/l577M+HtwrPoBuV4ErIfSWVdOfi/v7yYLVE0un6aFH45RNVJMhdATBT/fNHQF
fFGM/FLipGC6zKoByMdqmAuOsa5bXR6c7YAmSzKaSErtgagZQJ1VI1aIcxM+/2Vu
zrw4PJgnKkeAF+qAZVWYksjj2IufGgpIaCru78n9uMmPo23cD6nf615uKSs=
-----END CERTIFICATE-----