Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5308abe9-3785-4481-8b08-3fe8212ce3b5.roa
File:                     5308abe9-3785-4481-8b08-3fe8212ce3b5.roa (raw, json)
Hash identifier:          t6CGX7hYU5jldRM/BNZnkmRBsyCfWiFAVGbrE/GsiXQ=
Subject key identifier:   C7:36:F9:97:42:7C:1D:58:DD:6F:0D:9F:AD:65:A0:15:1B:64:36:F2
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       01DD0F9CBE869010FBAC0323818FEC46097C248C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5308abe9-3785-4481-8b08-3fe8212ce3b5.roa
Signing time:             Mon 25 Dec 2023 00:00:00 +0000
ROA not before:           Mon 25 Dec 2023 00:00:00 +0000
ROA not after:            Mon 29 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:dd:0f:9c:be:86:90:10:fb:ac:03:23:81:8f:ec:46:09:7c:24:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 25 00:00:00 2023 GMT
            Not After : Jan 29 23:59:59 2024 GMT
        Subject: serialNumber=1d05ac35029a65a9ef8afe4b586c40c65580077a48a909a168d45c5a8f54e304, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:bb:84:04:7a:90:12:ad:29:76:e2:a7:23:
                    d9:14:d7:58:6a:91:dc:4c:1b:1f:01:9c:3a:f2:92:
                    b5:05:70:28:c2:b2:3b:3d:b2:cc:6c:45:7a:34:08:
                    ec:f1:9a:6c:9b:cb:2d:36:68:8b:0d:49:fc:57:98:
                    0c:52:b7:1d:e4:6f:0d:2f:98:db:ed:d1:d3:7f:ea:
                    2c:10:ed:97:05:e3:4c:ac:9d:48:32:60:22:81:bc:
                    5e:ef:5c:0e:1e:85:d5:92:c6:ef:c2:4a:d5:6a:ca:
                    df:09:e8:41:05:a5:88:6f:a6:f1:e8:ea:6f:28:f7:
                    85:73:df:7d:65:a4:2a:a6:ac:aa:7e:e8:1c:5c:da:
                    43:1e:4d:0b:dd:9b:0c:53:e5:c2:46:38:d0:58:3f:
                    02:ef:85:e4:fe:46:7b:31:f7:7a:e4:96:5f:ca:4f:
                    c7:a7:24:61:f3:8c:b9:7a:57:0d:ad:aa:3d:02:2b:
                    e4:be:87:a1:96:07:2e:e4:33:55:aa:b6:11:7b:9b:
                    22:a8:f2:e5:e3:51:a5:5b:d8:16:cc:8c:96:dd:d9:
                    59:a6:4a:1e:14:3e:a7:e2:0f:13:d5:20:dd:ae:86:
                    82:bb:d9:e6:53:3c:15:a8:a7:cb:59:5b:8e:31:c1:
                    9d:a5:82:2e:20:67:7f:08:92:ca:43:4e:9f:6c:ea:
                    fa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:36:F9:97:42:7C:1D:58:DD:6F:0D:9F:AD:65:A0:15:1B:64:36:F2
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5308abe9-3785-4481-8b08-3fe8212ce3b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:70:70:5a:32:a6:e3:76:d4:cd:8b:bf:6a:b3:36:cd:f5:0a:
         98:f9:56:1d:14:71:b6:a0:8b:6c:3c:a2:69:d1:b5:8d:d6:a5:
         6b:6a:03:83:4a:27:3c:27:75:87:ea:aa:28:6d:79:c9:e5:33:
         98:0f:94:10:08:ca:eb:32:56:39:29:e4:19:e3:81:bb:10:67:
         c7:b7:1e:97:4f:44:0d:69:77:24:a5:9e:e9:57:2b:2c:26:ab:
         2e:e1:7f:f3:60:4b:2f:ac:ae:86:fd:b3:01:7b:e4:0c:a4:2f:
         d0:9d:2c:a9:9b:75:d6:96:80:e4:31:ad:5d:1f:97:95:a2:85:
         5f:03:dd:68:4e:8c:64:d2:4a:ed:28:80:4d:79:11:f9:16:8c:
         b7:42:cc:c3:56:d1:1a:ae:80:dc:a9:8b:c8:0c:9d:73:ae:9d:
         5e:d5:16:11:fb:17:43:a6:00:d5:6b:24:15:94:93:f4:89:a7:
         6a:b7:15:70:3e:21:bf:a3:c7:ed:dd:ef:c5:3a:5a:4e:67:cd:
         e4:56:ca:d9:58:33:03:c3:2d:c2:46:db:3a:e7:17:7a:c7:d4:
         0b:cf:bb:b4:d0:b9:66:9c:89:c0:97:7a:fd:2e:e9:45:dc:25:
         ce:35:d9:52:b7:2e:da:21:1f:2e:2b:ad:8f:57:b8:ea:c0:6f:
         11:28:59:47
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAd0PnL6GkBD7rAMjgY/sRgl8JIwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjI1MDAwMDAwWhcNMjQwMTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZDA1YWMzNTAyOWE2NWE5ZWY4YWZlNGI1ODZjNDBjNjU1
ODAwNzdhNDhhOTA5YTE2OGQ0NWM1YThmNTRlMzA0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPvLuEBHqQEq0pduKnI9kU11hqkdxMGx8BnDrykrUFcCjC
sjs9ssxsRXo0COzxmmybyy02aIsNSfxXmAxStx3kbw0vmNvt0dN/6iwQ7ZcF40ys
nUgyYCKBvF7vXA4ehdWSxu/CStVqyt8J6EEFpYhvpvHo6m8o94Vz331lpCqmrKp+
6Bxc2kMeTQvdmwxT5cJGONBYPwLvheT+Rnsx93rkll/KT8enJGHzjLl6Vw2tqj0C
K+S+h6GWBy7kM1WqthF7myKo8uXjUaVb2BbMjJbd2VmmSh4UPqfiDxPVIN2uhoK7
2eZTPBWop8tZW44xwZ2lgi4gZ38IkspDTp9s6vptAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUxzb5l0J8HVjdbw2frWWgFRtkNvIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzUzMDhhYmU5LTM3ODUtNDQ4MS04YjA4LTNmZTgyMTJjZTNiNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIRwcFoypuN21M2Lv2qzNs31Cpj5
Vh0Ucbagi2w8omnRtY3WpWtqA4NKJzwndYfqqihtecnlM5gPlBAIyusyVjkp5Bnj
gbsQZ8e3HpdPRA1pdySlnulXKywmqy7hf/NgSy+srob9swF75AykL9CdLKmbddaW
gOQxrV0fl5WihV8D3WhOjGTSSu0ogE15EfkWjLdCzMNW0RqugNypi8gMnXOunV7V
FhH7F0OmANVrJBWUk/SJp2q3FXA+Ib+jx+3d78U6Wk5nzeRWytlYMwPDLcJG2zrn
F3rH1AvPu7TQuWacicCXev0u6UXcJc412VK3LtohHy4rrY9XuOrAbxEoWUc=
-----END CERTIFICATE-----