Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f6fcb58-6fd4-490c-a55b-55b48e62cd2f.roa
File:                     7f6fcb58-6fd4-490c-a55b-55b48e62cd2f.roa (raw, json)
Hash identifier:          kpRG8H0sZZ+T8WOfqHaq1+sL4GD58ubYjOTnbnhtzNM=
Subject key identifier:   DE:9A:31:66:8D:80:2B:4A:7D:31:7B:C3:83:28:91:D1:FA:E4:C5:38
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4703FA0B0333D6EBA158FFFD8BFF7993376FDFA7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f6fcb58-6fd4-490c-a55b-55b48e62cd2f.roa
Signing time:             Thu 21 Sep 2023 00:00:00 +0000
ROA not before:           Thu 21 Sep 2023 00:00:00 +0000
ROA not after:            Thu 26 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:03:fa:0b:03:33:d6:eb:a1:58:ff:fd:8b:ff:79:93:37:6f:df:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 21 00:00:00 2023 GMT
            Not After : Oct 26 23:59:59 2023 GMT
        Subject: serialNumber=28b90af77c672eb4df5246196a7ce50835f84a39e95b8a1f2e51347b2d48fb76, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:3e:b3:59:e4:de:4d:27:90:a9:d9:18:60:
                    1b:db:46:9f:18:d8:e7:1a:1f:d6:6c:bf:7d:b3:3f:
                    a1:a0:2a:ff:b1:e3:15:96:f5:54:26:2b:58:f2:df:
                    f1:f3:6f:10:e9:2c:14:d3:84:65:7a:91:66:04:6c:
                    95:42:03:bb:c5:ed:af:d7:3a:8d:93:34:b2:b6:c4:
                    3f:e7:95:36:3d:31:59:af:2b:10:60:61:b9:7a:60:
                    74:67:02:89:30:e7:e1:ba:06:ed:64:b3:eb:77:ba:
                    ae:07:59:08:89:7a:70:e4:37:20:a7:90:99:0a:c8:
                    19:50:05:22:ad:b2:2c:a0:0e:b9:68:f8:32:e5:fd:
                    d0:56:6b:58:34:3e:25:19:1c:37:be:d9:83:c4:fb:
                    4f:bc:9d:00:4d:b7:f3:93:ce:ee:c2:5e:34:4c:95:
                    a9:70:9d:15:a0:d5:31:25:79:01:98:33:e7:9a:4f:
                    8e:da:50:4f:7d:5a:b8:a0:0c:63:21:fc:b2:74:84:
                    82:e6:db:3a:63:2c:42:92:96:a2:23:91:92:f7:06:
                    32:0a:12:7a:6e:16:db:98:71:cc:2c:25:af:5c:d2:
                    d6:61:23:91:7f:7b:4e:b5:99:d1:61:67:59:1a:8d:
                    f7:63:31:66:d9:05:db:cb:80:c8:da:a2:ca:f1:e8:
                    67:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9A:31:66:8D:80:2B:4A:7D:31:7B:C3:83:28:91:D1:FA:E4:C5:38
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f6fcb58-6fd4-490c-a55b-55b48e62cd2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:cf:eb:54:43:9e:ce:bb:f7:c7:17:19:dd:8a:62:9a:a7:d9:
         d5:38:33:f9:35:93:45:49:b9:73:9c:80:7e:e7:35:37:c4:21:
         99:01:1c:05:08:7a:57:ab:a5:b4:dc:08:4a:97:c2:86:8e:1d:
         79:1e:89:38:36:ef:2e:93:aa:ed:52:72:74:ba:9c:ac:20:a5:
         aa:5e:99:54:2c:40:b4:94:a0:d6:53:ef:4c:79:18:21:57:a4:
         68:9c:82:4e:ab:80:d5:c9:9d:0e:b2:bf:c3:6b:57:bb:5f:4b:
         8e:36:7d:13:3b:8b:46:7a:d6:22:e2:72:44:46:10:b5:d7:60:
         fd:b2:f9:4f:a8:72:70:1b:d3:3b:0c:d6:f0:db:d0:41:0e:19:
         5f:d7:02:41:69:4b:95:13:99:23:e0:0f:6c:c9:7a:9d:61:f2:
         b3:fe:c1:f6:2f:8a:b0:d1:16:54:bc:cd:c2:64:c2:f7:b0:48:
         9e:8b:db:b0:c4:20:b2:d0:f7:9c:5f:ab:b9:27:8a:c6:31:15:
         61:2e:47:cb:71:59:11:98:47:63:06:ad:2b:6a:d4:da:27:ea:
         52:c0:eb:ad:b4:c9:9b:14:27:36:f6:c3:12:19:b9:02:df:76:
         8b:9b:98:00:7b:89:8f:69:5a:52:29:7b:36:5f:8c:5b:6a:7a:
         d0:db:84:44
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURwP6CwMz1uuhWP/9i/95kzdv36cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTIxMDAwMDAwWhcNMjMxMDI2MjM1OTU5
WjB6MUkwRwYDVQQFE0AyOGI5MGFmNzdjNjcyZWI0ZGY1MjQ2MTk2YTdjZTUwODM1
Zjg0YTM5ZTk1YjhhMWYyZTUxMzQ3YjJkNDhmYjc2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0rD6zWeTeTSeQqdkYYBvbRp8Y2OcaH9Zsv32zP6GgKv+x
4xWW9VQmK1jy3/HzbxDpLBTThGV6kWYEbJVCA7vF7a/XOo2TNLK2xD/nlTY9MVmv
KxBgYbl6YHRnAokw5+G6Bu1ks+t3uq4HWQiJenDkNyCnkJkKyBlQBSKtsiygDrlo
+DLl/dBWa1g0PiUZHDe+2YPE+0+8nQBNt/OTzu7CXjRMlalwnRWg1TEleQGYM+ea
T47aUE99WrigDGMh/LJ0hILm2zpjLEKSlqIjkZL3BjIKEnpuFtuYccwsJa9c0tZh
I5F/e061mdFhZ1kajfdjMWbZBdvLgMjaosrx6GfHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU3poxZo2AK0p9MXvDgyiR0frkxTgwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzdmNmZjYjU4LTZmZDQtNDkwYy1hNTViLTU1YjQ4ZTYyY2QyZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKjP61RDns6798cXGd2KYpqn2dU4
M/k1k0VJuXOcgH7nNTfEIZkBHAUIelerpbTcCEqXwoaOHXkeiTg27y6Tqu1ScnS6
nKwgpapemVQsQLSUoNZT70x5GCFXpGicgk6rgNXJnQ6yv8NrV7tfS442fRM7i0Z6
1iLickRGELXXYP2y+U+ocnAb0zsM1vDb0EEOGV/XAkFpS5UTmSPgD2zJep1h8rP+
wfYvirDRFlS8zcJkwvewSJ6L27DEILLQ95xfq7knisYxFWEuR8txWRGYR2MGrStq
1Non6lLA6620yZsUJzb2wxIZuQLfdoubmAB7iY9pWlIpezZfjFtqetDbhEQ=
-----END CERTIFICATE-----