Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a73fe68-118b-465b-8752-d7afa394076a.roa
File:                     6a73fe68-118b-465b-8752-d7afa394076a.roa (raw, json)
Hash identifier:          eTnVVWhcYKb21dU2UR5hcVkPrPe+rfCXeXqMv7ENPrI=
Subject key identifier:   0A:C1:D6:B4:81:56:D2:E1:84:E3:E2:21:21:67:BC:A1:69:43:50:9D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       555AAE86A93BF3B6CE2867B53B00A5E374443E73
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a73fe68-118b-465b-8752-d7afa394076a.roa
Signing time:             Fri 23 Jun 2023 00:00:00 +0000
ROA not before:           Fri 23 Jun 2023 00:00:00 +0000
ROA not after:            Fri 28 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5a:ae:86:a9:3b:f3:b6:ce:28:67:b5:3b:00:a5:e3:74:44:3e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 23 00:00:00 2023 GMT
            Not After : Jul 28 23:59:59 2023 GMT
        Subject: serialNumber=3a2015713063f5591002d0887419f17642fc663ed08c08bd3a0d90279a4e1a5f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:da:eb:e6:07:9a:24:39:3f:37:9e:1c:53:fd:
                    3a:e8:a9:95:2b:7b:76:b1:b1:3c:c0:15:39:80:6d:
                    1a:16:7c:14:e0:6f:7d:50:9c:74:a9:86:36:80:89:
                    2d:80:e9:f8:8f:11:9d:4b:77:30:e3:41:61:c5:a2:
                    b3:ae:31:0f:88:11:4f:06:aa:9f:ad:a8:65:5e:3f:
                    11:9b:7b:bc:85:21:79:59:3e:90:5d:db:bb:dd:2e:
                    75:03:52:bd:11:7a:86:f2:ac:80:21:5f:68:fa:30:
                    d8:8f:4c:64:0b:00:20:be:f2:d2:95:4a:6f:d4:49:
                    16:b4:51:b5:55:4e:93:c0:d3:3b:d2:1a:8c:d9:f7:
                    47:9d:92:55:40:fe:4d:93:be:4a:74:e1:18:4d:0a:
                    49:ee:43:18:a1:8e:48:4c:93:11:55:7f:1c:68:af:
                    b7:22:ea:29:b5:23:a1:aa:47:09:2a:5a:ea:72:eb:
                    5e:eb:7a:c3:10:75:6b:67:4c:16:43:05:9d:fe:e4:
                    9f:b1:43:11:de:8a:d3:e8:b3:d3:e6:7a:56:18:6d:
                    c4:0d:03:8c:48:85:34:a0:d3:a9:f4:04:aa:0a:39:
                    dd:98:1f:4a:81:b8:64:ad:d3:db:37:59:01:1e:e1:
                    95:6e:db:0e:5d:fd:f0:31:b6:bf:c0:f0:e0:c2:e1:
                    20:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C1:D6:B4:81:56:D2:E1:84:E3:E2:21:21:67:BC:A1:69:43:50:9D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a73fe68-118b-465b-8752-d7afa394076a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:95:1f:36:4b:a0:76:1c:a1:0e:c8:fa:b8:31:61:72:e5:ae:
         b1:c5:a4:29:0d:50:75:ac:4d:06:2d:ef:5d:f7:a4:5d:2a:90:
         8d:ea:62:dd:f5:c5:e0:fb:f9:fb:02:0d:4c:f9:fd:c2:25:24:
         85:74:60:87:e9:8a:b9:16:89:df:71:3b:a1:fd:8a:fb:02:fb:
         13:e4:3d:1c:31:ec:57:5c:b8:75:28:9f:d8:64:5c:34:cb:32:
         bc:ac:86:40:b2:76:98:95:b7:a3:30:00:23:ce:c5:15:60:48:
         1c:96:6e:30:62:fc:e6:ac:50:3e:62:91:fd:bc:1e:05:0d:1d:
         20:09:1f:cd:69:ba:2a:dd:41:80:de:8d:ad:5d:5f:93:5f:84:
         c7:01:d9:59:d9:d5:09:2a:b0:48:27:1d:8c:b8:72:b9:e5:c8:
         fb:37:74:c7:d5:15:62:8a:ba:78:30:82:98:bb:8c:6d:a4:3d:
         eb:95:a4:40:97:26:ad:ab:39:88:ea:57:24:95:e2:0d:e7:fb:
         cc:c2:f3:9f:6b:1b:a1:47:7a:15:ca:5f:1c:ac:15:53:61:3e:
         ec:bc:38:af:ff:32:d6:1e:0c:14:7d:06:f7:4f:97:c2:99:cb:
         e9:ce:f3:ec:36:7a:14:5f:8a:d8:96:37:aa:b1:3a:9d:a5:42:
         ea:bf:35:3f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVVquhqk787bOKGe1OwCl43REPnMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjIzMDAwMDAwWhcNMjMwNzI4MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYTIwMTU3MTMwNjNmNTU5MTAwMmQwODg3NDE5ZjE3NjQy
ZmM2NjNlZDA4YzA4YmQzYTBkOTAyNzlhNGUxYTVmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCm2uvmB5okOT83nhxT/TroqZUre3axsTzAFTmAbRoWfBTg
b31QnHSphjaAiS2A6fiPEZ1LdzDjQWHForOuMQ+IEU8Gqp+tqGVePxGbe7yFIXlZ
PpBd27vdLnUDUr0ReobyrIAhX2j6MNiPTGQLACC+8tKVSm/USRa0UbVVTpPA0zvS
GozZ90edklVA/k2Tvkp04RhNCknuQxihjkhMkxFVfxxor7ci6im1I6GqRwkqWupy
617resMQdWtnTBZDBZ3+5J+xQxHeitPos9PmelYYbcQNA4xIhTSg06n0BKoKOd2Y
H0qBuGSt09s3WQEe4ZVu2w5d/fAxtr/A8ODC4SDvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUCsHWtIFW0uGE4+IhIWe8oWlDUJ0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzZhNzNmZTY4LTExOGItNDY1Yi04NzUyLWQ3YWZhMzk0MDc2YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIKVHzZLoHYcoQ7I+rgxYXLlrrHF
pCkNUHWsTQYt7133pF0qkI3qYt31xeD7+fsCDUz5/cIlJIV0YIfpirkWid9xO6H9
ivsC+xPkPRwx7FdcuHUon9hkXDTLMryshkCydpiVt6MwACPOxRVgSByWbjBi/Oas
UD5ikf28HgUNHSAJH81puirdQYDeja1dX5NfhMcB2VnZ1QkqsEgnHYy4crnlyPs3
dMfVFWKKungwgpi7jG2kPeuVpECXJq2rOYjqVySV4g3n+8zC859rG6FHehXKXxys
FVNhPuy8OK//MtYeDBR9BvdPl8KZy+nO8+w2ehRfitiWN6qxOp2lQuq/NT8=
-----END CERTIFICATE-----