Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78421fee-114a-442f-aa8c-93f9e1ee4f44.roa
File:                     78421fee-114a-442f-aa8c-93f9e1ee4f44.roa (raw, json)
Hash identifier:          NZ665NInB6/456orlxG8s53pFFBi341xdiEfVddi4JA=
Subject key identifier:   55:2C:E3:4C:D4:89:37:58:A7:2E:27:49:6E:26:95:9E:B8:44:95:82
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       028307942BAB5744AC72F3BA7141CB31BA3D26AC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78421fee-114a-442f-aa8c-93f9e1ee4f44.roa
Signing time:             Mon 18 Sep 2023 00:00:00 +0000
ROA not before:           Mon 18 Sep 2023 00:00:00 +0000
ROA not after:            Mon 23 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:83:07:94:2b:ab:57:44:ac:72:f3:ba:71:41:cb:31:ba:3d:26:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 18 00:00:00 2023 GMT
            Not After : Oct 23 23:59:59 2023 GMT
        Subject: serialNumber=3f5dc36e189ac1d168a432855bfe71ba83bf74586333d93c823fc6a5f8a28574, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c5:7d:22:fe:b0:55:dc:02:37:50:13:8e:3c:
                    f8:05:4f:40:00:63:da:d9:76:3d:81:d9:f3:93:2e:
                    95:ba:ae:2b:01:5b:a6:0c:15:a3:ea:b9:cf:71:0f:
                    d9:f4:b2:55:76:41:fa:38:b7:27:6a:0f:73:04:01:
                    fe:d8:5b:2c:83:f6:3f:2b:b1:df:16:a0:17:e8:8a:
                    cb:37:98:90:b5:e5:72:d1:59:d1:2c:95:7e:af:de:
                    a1:d6:73:f7:09:31:8a:cf:e1:d9:71:74:17:3e:e4:
                    da:4a:f7:86:7a:12:10:93:a5:88:c6:d7:82:e3:30:
                    5f:33:aa:15:0c:19:11:e5:ee:d3:3c:0d:9b:11:06:
                    a5:17:c5:29:01:8c:05:e4:b8:0f:71:f5:5c:dc:c8:
                    81:56:68:da:45:e7:45:39:a0:2b:cd:0f:dd:c1:2f:
                    30:74:36:70:63:30:4f:c2:b9:21:d8:48:e7:b4:69:
                    be:9c:14:00:56:a2:2f:6d:51:14:db:2d:bb:30:58:
                    d3:2b:09:08:be:69:2f:17:52:14:6d:f0:b3:7f:d8:
                    9c:b4:ca:85:6d:39:de:90:14:8f:c6:84:a8:ea:6d:
                    3e:5c:03:c5:e7:29:e6:d5:b1:c8:37:6c:7f:0d:59:
                    24:57:6b:3e:92:1c:e7:36:05:5c:99:9a:91:1d:70:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2C:E3:4C:D4:89:37:58:A7:2E:27:49:6E:26:95:9E:B8:44:95:82
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78421fee-114a-442f-aa8c-93f9e1ee4f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:f4:96:98:50:29:fe:d0:44:ab:e5:aa:89:18:ad:8a:d1:bf:
         7f:2a:6c:2e:5a:da:a9:73:2a:ca:a0:74:38:78:ce:c3:44:3f:
         32:b9:ad:d6:18:fb:67:55:9a:3e:f8:da:b0:2b:34:48:5b:15:
         e9:51:71:2f:e3:3b:02:a4:98:73:17:a9:5f:21:0e:cc:a0:4e:
         5c:84:18:4f:cc:fe:5d:d9:eb:e0:86:2a:9d:9d:a1:9d:9b:26:
         80:70:2d:c6:4c:da:a3:f1:14:3a:f1:fe:a6:96:17:d8:0b:e0:
         8d:54:82:30:4b:19:42:3f:2b:2a:26:b7:2b:30:84:29:32:45:
         ec:c6:d6:4c:2f:83:f1:f2:c9:6a:5d:e7:ec:dc:5f:0a:3a:fc:
         07:35:ed:12:5f:fa:47:0d:19:b2:a8:3d:f1:68:e9:ea:6b:a4:
         6c:75:3a:21:17:36:fb:1e:79:df:70:d5:7f:b1:7a:31:da:18:
         22:10:6a:5f:73:b0:b5:6e:1d:bd:4b:11:3d:d5:8b:43:69:10:
         36:f6:85:0e:d3:99:e8:ea:a0:a9:a0:35:de:5b:e0:0c:eb:f2:
         c6:11:8a:7f:4a:c4:b4:da:35:47:3b:52:4f:80:f4:e7:a1:98:
         4f:8e:46:d7:8f:9c:00:e2:73:f7:45:5a:cb:86:44:c8:1d:58:
         c9:d2:0f:eb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAoMHlCurV0SscvO6cUHLMbo9JqwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTE4MDAwMDAwWhcNMjMxMDIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZjVkYzM2ZTE4OWFjMWQxNjhhNDMyODU1YmZlNzFiYTgz
YmY3NDU4NjMzM2Q5M2M4MjNmYzZhNWY4YTI4NTc0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSxX0i/rBV3AI3UBOOPPgFT0AAY9rZdj2B2fOTLpW6risB
W6YMFaPquc9xD9n0slV2Qfo4tydqD3MEAf7YWyyD9j8rsd8WoBfoiss3mJC15XLR
WdEslX6v3qHWc/cJMYrP4dlxdBc+5NpK94Z6EhCTpYjG14LjMF8zqhUMGRHl7tM8
DZsRBqUXxSkBjAXkuA9x9VzcyIFWaNpF50U5oCvND93BLzB0NnBjME/CuSHYSOe0
ab6cFABWoi9tURTbLbswWNMrCQi+aS8XUhRt8LN/2Jy0yoVtOd6QFI/GhKjqbT5c
A8XnKebVscg3bH8NWSRXaz6SHOc2BVyZmpEdcCp/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVSzjTNSJN1inLidJbiaVnrhElYIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzc4NDIxZmVlLTExNGEtNDQyZi1hYThjLTkzZjllMWVlNGY0NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHz0lphQKf7QRKvlqokYrYrRv38q
bC5a2qlzKsqgdDh4zsNEPzK5rdYY+2dVmj742rArNEhbFelRcS/jOwKkmHMXqV8h
DsygTlyEGE/M/l3Z6+CGKp2doZ2bJoBwLcZM2qPxFDrx/qaWF9gL4I1UgjBLGUI/
KyomtyswhCkyRezG1kwvg/HyyWpd5+zcXwo6/Ac17RJf+kcNGbKoPfFo6eprpGx1
OiEXNvseed9w1X+xejHaGCIQal9zsLVuHb1LET3Vi0NpEDb2hQ7TmejqoKmgNd5b
4Azr8sYRin9KxLTaNUc7Uk+A9OehmE+ORtePnADic/dFWsuGRMgdWMnSD+s=
-----END CERTIFICATE-----