Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5b7b6760-65b3-43b6-84b4-312ed74dc356.roa
File:                     5b7b6760-65b3-43b6-84b4-312ed74dc356.roa (raw, json)
Hash identifier:          VMKy84LIbL7TaM19wpjhg6YGCWOAMF/IOk0FHJso55o=
Subject key identifier:   B2:A2:EC:33:1D:15:4B:76:CE:BC:CE:B2:54:E3:FC:35:65:E8:7C:88
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       172BA8D67D4E6152AE5F67EABED3C9B91384FF11
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5b7b6760-65b3-43b6-84b4-312ed74dc356.roa
Signing time:             Sat 09 Sep 2023 00:00:00 +0000
ROA not before:           Sat 09 Sep 2023 00:00:00 +0000
ROA not after:            Sat 14 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2b:a8:d6:7d:4e:61:52:ae:5f:67:ea:be:d3:c9:b9:13:84:ff:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep  9 00:00:00 2023 GMT
            Not After : Oct 14 23:59:59 2023 GMT
        Subject: serialNumber=2c811191b5a675304893e05cb3019fa04e23ace763a81e9501adf3a47983801c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:03:a0:4f:23:45:c8:09:68:07:34:98:b6:c9:
                    d4:16:e1:8f:50:52:1a:49:e6:d2:8e:51:45:84:04:
                    60:64:99:d8:18:62:ab:73:b6:56:54:81:12:61:4e:
                    a1:e2:d3:67:55:c0:93:89:c8:39:af:52:46:d6:23:
                    64:58:bc:6f:9a:a5:65:63:19:68:87:d0:c6:54:de:
                    0c:75:ab:83:96:aa:47:a3:34:4b:10:a8:6a:27:9a:
                    2f:b7:35:c6:3a:22:35:78:ad:df:ac:ee:67:e3:fc:
                    eb:e4:69:93:00:0a:75:66:d4:28:5a:50:65:95:bf:
                    82:df:02:b3:06:36:01:28:71:a4:e0:fc:1c:49:cd:
                    f9:9c:e1:ad:37:f1:42:52:74:01:95:4c:e0:b4:c2:
                    2e:2d:74:cb:65:7a:be:99:b2:9d:96:d8:36:80:96:
                    0a:62:ce:b2:b7:fa:3b:4e:43:da:9e:ba:c7:d5:a2:
                    d5:f9:33:8a:c4:86:34:cb:f6:ce:6f:f3:56:47:bc:
                    ef:55:ff:3f:8d:c6:b0:4d:20:3b:ea:fc:9e:21:e8:
                    e7:1a:0c:55:f7:cf:d1:9b:17:06:e2:15:7b:58:3e:
                    59:42:f0:ab:32:08:27:37:f3:18:e9:a7:cc:24:1f:
                    31:d0:8b:4d:47:90:f9:40:83:dd:de:80:5b:58:6f:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A2:EC:33:1D:15:4B:76:CE:BC:CE:B2:54:E3:FC:35:65:E8:7C:88
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5b7b6760-65b3-43b6-84b4-312ed74dc356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:66:ed:5f:38:0b:3f:35:5a:76:41:9e:65:0d:4c:de:75:76:
         84:a8:aa:86:30:a5:3d:c6:e5:4a:68:c4:9c:97:09:83:54:b8:
         65:96:75:bb:e2:d2:61:a5:67:23:09:3d:5a:89:a9:0d:57:b8:
         38:56:23:cc:c4:79:88:95:84:4c:07:03:8d:90:17:7b:70:9b:
         52:d7:22:90:e4:e9:b8:42:d8:7a:a2:00:a9:25:cf:e5:08:3a:
         a7:91:69:52:d5:48:7f:57:66:4a:bd:ba:bb:bc:d3:e9:2b:61:
         30:04:3d:62:e0:d7:89:ab:a5:b7:04:7e:03:dd:3a:4e:2f:d8:
         d0:83:b3:fe:0d:b3:1f:91:7c:b5:df:33:97:22:fe:1b:d6:e1:
         ad:3e:4e:06:6b:82:a9:df:c7:ad:26:b3:6d:13:38:d9:06:ee:
         bd:1c:98:31:26:49:e4:c1:0a:74:80:55:cc:77:d3:8d:5b:96:
         16:b7:25:5a:31:ea:f8:82:1a:54:58:d2:3a:c3:ea:a8:5a:1f:
         38:67:7c:18:5f:09:03:44:bf:a0:e7:dd:fb:32:e8:3c:4a:dd:
         9a:36:90:f2:df:40:42:5f:39:82:72:8f:e6:aa:a4:ee:50:34:
         df:04:c8:91:23:d6:09:2e:22:50:67:91:df:e1:73:f6:f7:16:
         bc:73:de:2b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFyuo1n1OYVKuX2fqvtPJuROE/xEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTA5MDAwMDAwWhcNMjMxMDE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYzgxMTE5MWI1YTY3NTMwNDg5M2UwNWNiMzAxOWZhMDRl
MjNhY2U3NjNhODFlOTUwMWFkZjNhNDc5ODM4MDFjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDlA6BPI0XICWgHNJi2ydQW4Y9QUhpJ5tKOUUWEBGBkmdgY
YqtztlZUgRJhTqHi02dVwJOJyDmvUkbWI2RYvG+apWVjGWiH0MZU3gx1q4OWqkej
NEsQqGonmi+3NcY6IjV4rd+s7mfj/OvkaZMACnVm1ChaUGWVv4LfArMGNgEocaTg
/BxJzfmc4a038UJSdAGVTOC0wi4tdMtler6Zsp2W2DaAlgpizrK3+jtOQ9qeusfV
otX5M4rEhjTL9s5v81ZHvO9V/z+NxrBNIDvq/J4h6OcaDFX3z9GbFwbiFXtYPllC
8KsyCCc38xjpp8wkHzHQi01HkPlAg93egFtYbwFbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUsqLsMx0VS3bOvM6yVOP8NWXofIgwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzViN2I2NzYwLTY1YjMtNDNiNi04NGI0LTMxMmVkNzRkYzM1Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACZm7V84Cz81WnZBnmUNTN51doSo
qoYwpT3G5UpoxJyXCYNUuGWWdbvi0mGlZyMJPVqJqQ1XuDhWI8zEeYiVhEwHA42Q
F3twm1LXIpDk6bhC2HqiAKklz+UIOqeRaVLVSH9XZkq9uru80+krYTAEPWLg14mr
pbcEfgPdOk4v2NCDs/4Nsx+RfLXfM5ci/hvW4a0+TgZrgqnfx60ms20TONkG7r0c
mDEmSeTBCnSAVcx3041blha3JVox6viCGlRY0jrD6qhaHzhnfBhfCQNEv6Dn3fsy
6DxK3Zo2kPLfQEJfOYJyj+aqpO5QNN8EyJEj1gkuIlBnkd/hc/b3Frxz3is=
-----END CERTIFICATE-----