Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c773dbe-7d4d-4a65-9d31-2b60cf1d6402.roa
File:                     7c773dbe-7d4d-4a65-9d31-2b60cf1d6402.roa (raw, json)
Hash identifier:          0I0g7G8h9eWJwGxQO2VuX4FfmZ+l1K0v5rVZIE8IEaI=
Subject key identifier:   AC:3F:85:53:14:84:27:CE:3A:6A:7F:F3:84:58:43:C8:C1:1C:2C:8D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2A7C722BA2FE9C8043A56007A312A0A280B500CC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c773dbe-7d4d-4a65-9d31-2b60cf1d6402.roa
Signing time:             Tue 20 Jun 2023 00:00:00 +0000
ROA not before:           Tue 20 Jun 2023 00:00:00 +0000
ROA not after:            Tue 25 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7c:72:2b:a2:fe:9c:80:43:a5:60:07:a3:12:a0:a2:80:b5:00:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 20 00:00:00 2023 GMT
            Not After : Jul 25 23:59:59 2023 GMT
        Subject: serialNumber=f05e0cf7fc065137761d5a487e97a035d2097670c740267a547aae0c6269cd5e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1c:34:e0:8a:c0:9c:b5:58:d7:20:57:0a:34:
                    8b:79:0f:10:9a:e0:c7:3f:31:4f:5b:ab:ed:8d:26:
                    7f:de:40:ff:47:a5:4c:03:01:7c:da:aa:ab:92:63:
                    dc:06:42:c8:79:9a:23:e6:81:6a:2e:c9:65:e2:dc:
                    d0:39:f4:4b:7b:2c:25:14:73:b0:5f:09:23:1b:9c:
                    41:fe:50:7b:2c:65:60:78:7c:ef:77:7b:ad:01:bc:
                    e7:bb:02:7f:a5:1e:87:9e:84:c0:ee:7d:97:12:9e:
                    ab:7e:f0:d3:1b:f2:84:e7:fc:b7:0e:3c:7c:1f:df:
                    7b:3e:28:ef:c1:72:a7:a8:35:af:36:8d:16:1c:12:
                    fa:d2:c8:61:47:aa:00:89:c1:e8:83:85:24:35:9e:
                    8b:e2:f3:a8:b2:bf:cd:e2:97:8a:ae:f6:8b:51:c5:
                    f5:45:37:4a:68:27:9b:74:f8:8b:f0:e4:af:c6:f6:
                    85:5d:4f:a0:99:40:03:41:d3:d7:78:c6:3c:01:3c:
                    02:8b:7a:92:c7:1e:81:e3:7e:28:88:de:87:77:2b:
                    0d:69:66:fa:14:5e:62:11:d9:85:11:91:2b:a1:a2:
                    ce:b4:a4:26:f0:fd:d1:e2:0f:a2:91:03:fb:1b:ce:
                    79:06:7b:3e:ce:82:5f:b1:03:7c:a0:17:4e:15:6a:
                    db:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3F:85:53:14:84:27:CE:3A:6A:7F:F3:84:58:43:C8:C1:1C:2C:8D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c773dbe-7d4d-4a65-9d31-2b60cf1d6402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:6e:15:91:03:16:66:4f:19:aa:0a:46:57:e9:6a:46:85:e0:
         75:88:13:4d:31:e0:40:d7:cc:02:58:1a:36:ea:35:e4:e3:7d:
         05:08:c6:97:b5:62:c0:c9:94:2e:7c:66:4c:6c:86:ae:92:b8:
         ce:1f:9f:95:8a:c2:e0:b3:00:ce:4e:eb:e3:a8:4c:02:12:81:
         cf:46:48:ea:88:39:d8:f1:2b:eb:2a:e6:b2:ef:6b:f1:c2:88:
         b8:08:ae:e1:8c:90:6e:97:ad:1e:2e:a5:44:e9:55:75:04:e9:
         9e:ba:c0:be:3f:a3:1d:43:81:1e:46:5f:67:4c:51:b3:87:a4:
         04:9e:df:24:d9:8a:38:6e:20:2d:c2:f5:99:a2:76:8a:a2:21:
         b3:dd:f6:1f:a4:7e:1b:ce:0d:1c:d0:af:b4:4d:0e:77:01:40:
         73:a7:e4:72:44:b0:b8:71:a8:ab:97:fe:f2:dd:ab:23:10:0c:
         48:ae:89:00:c2:72:f0:64:e2:3e:4f:87:6d:b2:4e:e5:79:ef:
         92:98:27:39:0f:d8:b6:92:e9:eb:2a:0a:63:f6:62:87:03:ef:
         67:64:94:d7:15:44:02:b9:5f:43:ad:5c:e5:1f:ef:51:a7:ed:
         8e:68:f9:bd:08:23:35:23:9e:5d:36:2b:c3:f6:4a:6e:96:71:
         76:19:b3:12
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKnxyK6L+nIBDpWAHoxKgooC1AMwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjIwMDAwMDAwWhcNMjMwNzI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMDVlMGNmN2ZjMDY1MTM3NzYxZDVhNDg3ZTk3YTAzNWQy
MDk3NjcwYzc0MDI2N2E1NDdhYWUwYzYyNjljZDVlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCOHDTgisCctVjXIFcKNIt5DxCa4Mc/MU9bq+2NJn/eQP9H
pUwDAXzaqquSY9wGQsh5miPmgWouyWXi3NA59Et7LCUUc7BfCSMbnEH+UHssZWB4
fO93e60BvOe7An+lHoeehMDufZcSnqt+8NMb8oTn/LcOPHwf33s+KO/BcqeoNa82
jRYcEvrSyGFHqgCJweiDhSQ1novi86iyv83il4qu9otRxfVFN0poJ5t0+Ivw5K/G
9oVdT6CZQANB09d4xjwBPAKLepLHHoHjfiiI3od3Kw1pZvoUXmIR2YURkSuhos60
pCbw/dHiD6KRA/sbznkGez7Ogl+xA3ygF04VatthAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrD+FUxSEJ846an/zhFhDyMEcLI0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzdjNzczZGJlLTdkNGQtNGE2NS05ZDMxLTJiNjBjZjFkNjQwMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAH9uFZEDFmZPGaoKRlfpakaF4HWI
E00x4EDXzAJYGjbqNeTjfQUIxpe1YsDJlC58Zkxshq6SuM4fn5WKwuCzAM5O6+Oo
TAISgc9GSOqIOdjxK+sq5rLva/HCiLgIruGMkG6XrR4upUTpVXUE6Z66wL4/ox1D
gR5GX2dMUbOHpASe3yTZijhuIC3C9ZmidoqiIbPd9h+kfhvODRzQr7RNDncBQHOn
5HJEsLhxqKuX/vLdqyMQDEiuiQDCcvBk4j5Ph22yTuV575KYJzkP2LaS6esqCmP2
YocD72dklNcVRAK5X0OtXOUf71Gn7Y5o+b0IIzUjnl02K8P2Sm6WcXYZsxI=
-----END CERTIFICATE-----