Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/58655c8e-9950-457e-a561-482ec9050fa5.roa
File:                     58655c8e-9950-457e-a561-482ec9050fa5.roa (raw, json)
Hash identifier:          sg+aBzOEWNMzwLkGhMREeOIRpxkBQkhQZQ3V4T4iMxM=
Subject key identifier:   89:D4:9C:53:3E:66:7C:EB:29:50:E8:B3:E5:A2:83:BF:D9:66:B9:D2
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1EFD11376148D828C4D4B56A4CD006C0865D7028
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/58655c8e-9950-457e-a561-482ec9050fa5.roa
Signing time:             Mon 14 Aug 2023 00:00:00 +0000
ROA not before:           Mon 14 Aug 2023 00:00:00 +0000
ROA not after:            Mon 18 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fd:11:37:61:48:d8:28:c4:d4:b5:6a:4c:d0:06:c0:86:5d:70:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 14 00:00:00 2023 GMT
            Not After : Sep 18 23:59:59 2023 GMT
        Subject: serialNumber=c53af05478d6025e60a3d578bb2ed9205a4977dc3149030ea98e822e15adaf2f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:85:ce:c0:ee:c0:68:ed:55:fc:17:86:d0:
                    f8:65:51:e9:75:a6:07:93:21:b1:a2:02:97:64:6d:
                    64:26:2b:a6:18:37:24:74:7a:94:b6:aa:b0:8e:ba:
                    dc:da:1b:10:df:f8:d1:9c:2d:51:77:70:53:e7:3c:
                    2e:45:50:78:83:96:cd:07:4a:af:c5:f2:0e:0f:27:
                    52:c8:b3:23:15:0a:db:03:a2:cd:b9:50:56:f5:74:
                    c8:a3:96:1f:b6:3c:77:2c:ed:06:52:dc:2b:7c:d1:
                    9a:8f:2a:93:65:21:58:fe:3f:a3:74:36:eb:e1:71:
                    c2:0a:0d:19:20:30:17:92:76:67:84:07:fb:ae:36:
                    37:9a:ec:87:56:19:b7:ec:0f:52:06:c0:6e:22:e5:
                    e0:3b:34:1a:b5:b3:1d:29:43:32:8f:a4:af:95:c9:
                    48:f2:36:c8:e5:54:92:03:cf:26:cc:ae:21:dd:d5:
                    92:64:de:44:28:fa:20:60:5a:1e:ec:d5:8e:71:6c:
                    34:83:89:b0:f3:c9:33:a2:90:a6:29:10:d0:58:73:
                    80:c3:1e:3b:34:02:3d:c2:a6:3c:ee:81:88:88:a2:
                    61:05:01:49:4b:a6:e7:88:7a:57:8b:fc:12:9a:70:
                    23:cb:d2:88:02:49:1a:74:17:02:05:55:22:6b:4d:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D4:9C:53:3E:66:7C:EB:29:50:E8:B3:E5:A2:83:BF:D9:66:B9:D2
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/58655c8e-9950-457e-a561-482ec9050fa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:69:14:b6:8f:ff:06:08:48:e0:94:8c:57:b7:5c:77:39:29:
         c4:85:23:36:3a:94:39:20:60:cb:f3:0e:62:29:a2:23:04:f1:
         8b:3a:0d:20:85:ae:74:0c:ef:b4:6b:93:20:50:71:2a:21:c0:
         7d:c1:28:36:14:3f:12:88:d1:d6:08:87:2b:79:7c:5c:fc:be:
         51:bc:31:3a:d0:5e:c3:d9:04:5b:8b:93:f5:ff:8e:38:e9:5f:
         4f:bc:8c:52:90:64:41:f1:e6:33:64:fd:8a:6f:da:21:a0:bc:
         38:d4:ea:0a:3e:aa:8a:0b:bb:d3:b9:9c:0c:fa:05:9a:41:f9:
         24:9c:59:23:dc:18:b8:79:96:92:cb:25:cc:e1:39:1a:30:5c:
         1a:fb:13:18:03:42:5d:3a:10:3d:9a:ab:08:37:96:4d:e5:f9:
         ef:f2:60:7d:7c:53:20:75:34:18:2e:e4:f5:0b:6d:d6:80:9e:
         64:81:60:22:7e:4a:5c:35:ef:c4:33:9b:d6:2e:5b:36:48:31:
         dd:e7:f3:11:7c:47:b7:43:22:4b:ca:08:2c:4c:96:87:b0:00:
         df:ed:68:3a:b9:5b:ad:e1:c3:26:0a:86:61:2a:36:2f:c0:41:
         03:13:77:72:f6:8b:54:87:db:14:2f:f8:b5:04:54:aa:4c:db:
         a1:bf:5e:90
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHv0RN2FI2CjE1LVqTNAGwIZdcCgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODE0MDAwMDAwWhcNMjMwOTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BjNTNhZjA1NDc4ZDYwMjVlNjBhM2Q1NzhiYjJlZDkyMDVh
NDk3N2RjMzE0OTAzMGVhOThlODIyZTE1YWRhZjJmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQxIXOwO7AaO1V/BeG0PhlUel1pgeTIbGiApdkbWQmK6YY
NyR0epS2qrCOutzaGxDf+NGcLVF3cFPnPC5FUHiDls0HSq/F8g4PJ1LIsyMVCtsD
os25UFb1dMijlh+2PHcs7QZS3Ct80ZqPKpNlIVj+P6N0NuvhccIKDRkgMBeSdmeE
B/uuNjea7IdWGbfsD1IGwG4i5eA7NBq1sx0pQzKPpK+VyUjyNsjlVJIDzybMriHd
1ZJk3kQo+iBgWh7s1Y5xbDSDibDzyTOikKYpENBYc4DDHjs0Aj3CpjzugYiIomEF
AUlLpueIeleL/BKacCPL0ogCSRp0FwIFVSJrTa3vAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUidScUz5mfOspUOiz5aKDv9lmudIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzU4NjU1YzhlLTk5NTAtNDU3ZS1hNTYxLTQ4MmVjOTA1MGZhNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABtpFLaP/wYISOCUjFe3XHc5KcSF
IzY6lDkgYMvzDmIpoiME8Ys6DSCFrnQM77RrkyBQcSohwH3BKDYUPxKI0dYIhyt5
fFz8vlG8MTrQXsPZBFuLk/X/jjjpX0+8jFKQZEHx5jNk/Ypv2iGgvDjU6go+qooL
u9O5nAz6BZpB+SScWSPcGLh5lpLLJczhORowXBr7ExgDQl06ED2aqwg3lk3l+e/y
YH18UyB1NBgu5PULbdaAnmSBYCJ+Slw178Qzm9YuWzZIMd3n8xF8R7dDIkvKCCxM
loewAN/taDq5W63hwyYKhmEqNi/AQQMTd3L2i1SH2xQv+LUEVKpM26G/XpA=
-----END CERTIFICATE-----