Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/67ac8ea2-9a74-42e2-b492-c17081d39be1.roa
File:                     67ac8ea2-9a74-42e2-b492-c17081d39be1.roa (raw, json)
Hash identifier:          v3cHhyjIZ17YdHdD08294CdrAPst2qjSYMmbXTDUBd8=
Subject key identifier:   76:91:69:E4:B0:53:CD:2B:47:5D:5B:BE:76:3B:1F:8B:89:14:4B:FD
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       47BBDEB024B861CDE406636E330D4566EC0B0B16
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/67ac8ea2-9a74-42e2-b492-c17081d39be1.roa
Signing time:             Sat 16 Dec 2023 00:00:00 +0000
ROA not before:           Sat 16 Dec 2023 00:00:00 +0000
ROA not after:            Sat 20 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bb:de:b0:24:b8:61:cd:e4:06:63:6e:33:0d:45:66:ec:0b:0b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 16 00:00:00 2023 GMT
            Not After : Jan 20 23:59:59 2024 GMT
        Subject: serialNumber=e50a2fe94d3c99834c833fb0324b4f8e3901ef24316393ac6d78eab3df30b7fc, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:25:0a:ad:cd:4d:e8:50:c8:e7:76:06:cf:53:
                    26:d9:41:3e:3a:d4:60:87:f0:a7:97:a8:86:47:2d:
                    16:52:02:7e:3c:37:41:df:bd:a3:54:f5:db:15:c6:
                    d0:f3:3d:ad:e4:29:e9:d5:b7:a4:66:63:92:09:cf:
                    f7:97:65:14:fe:a9:47:ec:d4:b9:b3:14:49:1b:67:
                    fe:72:2d:99:ba:f6:66:7a:42:87:0d:2d:fd:0d:0c:
                    73:be:40:b6:2e:34:4b:de:bf:65:7f:de:19:e4:a0:
                    7a:02:ce:78:7f:bd:44:3b:01:79:6b:33:00:e8:e8:
                    dc:12:25:88:c3:d5:6d:d1:57:6b:fa:83:50:a4:5d:
                    95:7c:b4:08:f1:f2:fa:04:c3:bd:57:78:ad:70:e2:
                    a7:e7:f6:66:f5:4f:0c:07:d3:ef:eb:b3:a4:93:4e:
                    62:0a:a0:40:a5:9f:2e:dc:29:a0:be:76:24:7f:9a:
                    3d:ef:07:c0:df:a0:0e:33:a4:92:a8:e3:31:06:57:
                    55:33:62:f3:93:f6:b9:e6:ec:da:6a:0c:ab:b3:ad:
                    02:0d:29:04:ae:8a:ec:ce:50:6b:c8:2e:2a:81:8b:
                    89:5c:8a:91:e7:cf:fc:86:ba:80:1e:10:ac:cf:a0:
                    21:81:d2:49:0d:5d:e2:db:7d:de:27:f0:aa:fd:4a:
                    23:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:91:69:E4:B0:53:CD:2B:47:5D:5B:BE:76:3B:1F:8B:89:14:4B:FD
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/67ac8ea2-9a74-42e2-b492-c17081d39be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:69:1b:29:bf:58:7d:68:0c:4f:87:0b:e4:94:03:b3:e4:6b:
         00:e4:c3:f9:38:07:8b:53:a2:db:f1:38:78:e4:6e:8e:5e:a5:
         ba:eb:72:8c:3d:c2:47:46:e1:89:d3:6e:a7:c4:9c:e3:85:64:
         46:2b:42:81:23:47:bf:8e:69:99:cb:46:96:2d:3b:0d:9b:83:
         69:35:25:cf:7d:9e:c0:f2:09:97:39:4e:51:fa:40:ab:b9:35:
         d4:72:91:6a:56:4e:43:d2:7f:e0:0e:bf:70:b8:d9:7b:75:4e:
         07:d2:d9:3d:20:ce:bf:c5:16:9c:d6:22:2c:4c:36:95:ab:9c:
         a3:70:79:b1:bf:8c:64:f1:a1:e0:7f:23:2d:40:ab:51:0a:d2:
         dc:77:8c:fb:51:85:21:4a:ef:16:78:ff:dc:69:d2:6c:f1:b6:
         4f:b2:21:e3:bf:61:4e:08:96:26:ad:d2:27:5a:e0:9a:9b:27:
         c0:1a:23:f4:8c:cd:cc:93:28:bb:7a:ce:7a:67:0a:4e:a6:d9:
         96:91:ff:6c:b3:18:26:4b:85:42:5b:3d:bc:57:b4:24:06:7f:
         53:3c:46:4b:3e:48:04:cc:52:bb:9a:d6:6d:49:8b:7f:a5:60:
         07:72:a2:a8:97:8a:2e:6a:ca:58:1c:80:0d:87:47:3d:aa:2b:
         75:ec:fc:93
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUR7vesCS4Yc3kBmNuMw1FZuwLCxYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjE2MDAwMDAwWhcNMjQwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNTBhMmZlOTRkM2M5OTgzNGM4MzNmYjAzMjRiNGY4ZTM5
MDFlZjI0MzE2MzkzYWM2ZDc4ZWFiM2RmMzBiN2ZjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUJQqtzU3oUMjndgbPUybZQT461GCH8KeXqIZHLRZSAn48
N0HfvaNU9dsVxtDzPa3kKenVt6RmY5IJz/eXZRT+qUfs1LmzFEkbZ/5yLZm69mZ6
QocNLf0NDHO+QLYuNEvev2V/3hnkoHoCznh/vUQ7AXlrMwDo6NwSJYjD1W3RV2v6
g1CkXZV8tAjx8voEw71XeK1w4qfn9mb1TwwH0+/rs6STTmIKoEClny7cKaC+diR/
mj3vB8DfoA4zpJKo4zEGV1UzYvOT9rnm7NpqDKuzrQINKQSuiuzOUGvILiqBi4lc
ipHnz/yGuoAeEKzPoCGB0kkNXeLbfd4n8Kr9SiP7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdpFp5LBTzStHXVu+djsfi4kUS/0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzY3YWM4ZWEyLTlhNzQtNDJlMi1iNDkyLWMxNzA4MWQzOWJlMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHRpGym/WH1oDE+HC+SUA7PkawDk
w/k4B4tTotvxOHjkbo5epbrrcow9wkdG4YnTbqfEnOOFZEYrQoEjR7+OaZnLRpYt
Ow2bg2k1Jc99nsDyCZc5TlH6QKu5NdRykWpWTkPSf+AOv3C42Xt1TgfS2T0gzr/F
FpzWIixMNpWrnKNwebG/jGTxoeB/Iy1Aq1EK0tx3jPtRhSFK7xZ4/9xp0mzxtk+y
IeO/YU4Iliat0ida4JqbJ8AaI/SMzcyTKLt6znpnCk6m2ZaR/2yzGCZLhUJbPbxX
tCQGf1M8Rks+SATMUrua1m1Ji3+lYAdyoqiXii5qylgcgA2HRz2qK3Xs/JM=
-----END CERTIFICATE-----