Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5cc465e1-3aae-4525-8829-007c04ac0f93.roa
File:                     5cc465e1-3aae-4525-8829-007c04ac0f93.roa (raw, json)
Hash identifier:          SZLlzDX1MXa/TRkB9ED6h1tDUEVboFt76hhek57zJyw=
Subject key identifier:   D1:5B:D8:31:A3:F3:7A:96:66:D3:A4:39:4C:63:66:83:2B:FB:BD:99
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       457A23FBDD999B16FA66AE10F7EA324619B1A900
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5cc465e1-3aae-4525-8829-007c04ac0f93.roa
Signing time:             Thu 22 Jun 2023 00:00:00 +0000
ROA not before:           Thu 22 Jun 2023 00:00:00 +0000
ROA not after:            Thu 27 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7a:23:fb:dd:99:9b:16:fa:66:ae:10:f7:ea:32:46:19:b1:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 22 00:00:00 2023 GMT
            Not After : Jul 27 23:59:59 2023 GMT
        Subject: serialNumber=dd04a8b97f32618dd88a444b4080b01082bc7247a89559d4c9777586353bb793, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:59:4c:ed:8f:32:fb:1d:32:fa:7e:11:d0:7f:
                    56:6c:a4:4a:32:c8:c6:68:14:c8:5d:29:0a:4a:20:
                    f5:64:0b:1b:a2:41:37:49:23:0f:c8:41:72:0c:c3:
                    bd:4b:9f:10:e9:2b:80:62:a2:f5:1c:15:4c:b0:fe:
                    e9:c0:09:f9:b3:17:38:fc:98:a9:34:6e:1b:e5:8d:
                    a0:66:4e:33:04:4c:f4:ea:1b:24:59:52:42:7e:a1:
                    c8:de:61:9d:4d:d0:c3:ff:da:1c:5c:3e:e1:db:76:
                    fe:d7:cd:98:15:fa:98:6a:47:e6:17:8e:f5:4f:08:
                    49:b1:69:df:e0:84:ed:c4:4d:32:3c:c0:da:5a:0e:
                    99:a6:bc:39:b9:a9:c3:55:6a:42:0f:77:43:a9:50:
                    40:5b:c9:48:16:99:8b:c5:74:9a:2b:3f:00:cf:64:
                    2e:59:b7:0c:36:5b:a0:af:b1:0f:ac:50:a9:03:58:
                    9d:ff:db:db:b0:15:8d:f4:32:4e:0d:13:f0:18:8e:
                    7d:e6:52:9d:53:0e:9e:69:45:82:d6:01:02:50:91:
                    fb:96:23:57:2a:f3:b2:2b:47:cb:9f:e0:85:b8:b8:
                    80:87:f1:33:29:8e:fd:8d:a4:18:24:02:e9:9a:41:
                    c6:36:2f:24:d8:09:24:e8:09:9f:dd:59:70:12:ba:
                    c5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5B:D8:31:A3:F3:7A:96:66:D3:A4:39:4C:63:66:83:2B:FB:BD:99
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5cc465e1-3aae-4525-8829-007c04ac0f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:e6:49:68:07:db:f6:a4:53:67:c2:d5:ef:da:89:f7:ec:ab:
         bb:75:6d:80:9c:6d:49:8e:d3:97:bf:1b:ce:48:a2:f9:26:51:
         a8:68:6f:4a:65:92:21:c8:12:b2:5d:de:f0:ac:49:b1:60:9f:
         eb:23:7a:ed:8d:1c:c2:48:89:1a:41:52:9e:f3:c4:cd:e3:f7:
         31:30:0e:64:8b:ef:be:43:07:37:9a:69:18:0c:d2:bb:0f:ff:
         79:1d:a5:2d:8b:33:eb:21:7e:30:a5:8e:1b:55:96:aa:49:b9:
         9c:24:e1:dd:88:e7:73:c0:b9:49:bf:86:a8:40:f2:80:f0:b5:
         04:72:2e:4c:75:b5:67:77:4d:be:90:69:5f:39:5d:77:5d:12:
         4c:85:70:e0:4d:39:df:1d:69:8c:18:85:eb:19:59:f2:27:41:
         fb:9e:4c:80:13:0e:e7:bb:f6:19:83:6b:cd:3e:04:a6:a6:6d:
         d1:04:d7:8f:f9:3a:e3:08:7b:f7:d1:b9:51:97:9c:60:bd:e5:
         c8:89:b3:84:a4:e2:2c:75:7e:97:18:9a:59:96:64:20:77:ea:
         23:b3:ba:c3:65:26:7b:e4:6d:8b:35:c4:68:08:7b:57:0b:bb:
         1e:c6:69:b2:cc:23:5a:35:76:8b:7f:37:48:07:36:ec:6a:df:
         ff:dd:70:7f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURXoj+92Zmxb6Zq4Q9+oyRhmxqQAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjIyMDAwMDAwWhcNMjMwNzI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkZDA0YThiOTdmMzI2MThkZDg4YTQ0NGI0MDgwYjAxMDgy
YmM3MjQ3YTg5NTU5ZDRjOTc3NzU4NjM1M2JiNzkzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCZWUztjzL7HTL6fhHQf1ZspEoyyMZoFMhdKQpKIPVkCxui
QTdJIw/IQXIMw71LnxDpK4BiovUcFUyw/unACfmzFzj8mKk0bhvljaBmTjMETPTq
GyRZUkJ+ocjeYZ1N0MP/2hxcPuHbdv7XzZgV+phqR+YXjvVPCEmxad/ghO3ETTI8
wNpaDpmmvDm5qcNVakIPd0OpUEBbyUgWmYvFdJorPwDPZC5Ztww2W6CvsQ+sUKkD
WJ3/29uwFY30Mk4NE/AYjn3mUp1TDp5pRYLWAQJQkfuWI1cq87IrR8uf4IW4uICH
8TMpjv2NpBgkAumaQcY2LyTYCSToCZ/dWXASusV1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0VvYMaPzepZm06Q5TGNmgyv7vZkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzVjYzQ2NWUxLTNhYWUtNDUyNS04ODI5LTAwN2MwNGFjMGY5My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABzmSWgH2/akU2fC1e/aiffsq7t1
bYCcbUmO05e/G85IovkmUahob0plkiHIErJd3vCsSbFgn+sjeu2NHMJIiRpBUp7z
xM3j9zEwDmSL775DBzeaaRgM0rsP/3kdpS2LM+shfjCljhtVlqpJuZwk4d2I53PA
uUm/hqhA8oDwtQRyLkx1tWd3Tb6QaV85XXddEkyFcOBNOd8daYwYhesZWfInQfue
TIATDue79hmDa80+BKambdEE14/5OuMIe/fRuVGXnGC95ciJs4Sk4ix1fpcYmlmW
ZCB36iOzusNlJnvkbYs1xGgIe1cLux7GabLMI1o1dot/N0gHNuxq3//dcH8=
-----END CERTIFICATE-----