Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f83dc2e-663f-44cc-8a6f-6d9243c39f28.roa
File:                     7f83dc2e-663f-44cc-8a6f-6d9243c39f28.roa (raw, json)
Hash identifier:          vYqrZg/YhfF+or3q2RlDU+BPG8GVN9PYc0tkaELkDbI=
Subject key identifier:   41:22:6A:2B:BA:35:4D:99:F2:4B:51:99:7A:F4:9A:BD:D5:04:CB:25
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       57EA78B26C156F1831820E22C7185AEA5C6CC2A0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f83dc2e-663f-44cc-8a6f-6d9243c39f28.roa
Signing time:             Sun 10 Sep 2023 00:00:00 +0000
ROA not before:           Sun 10 Sep 2023 00:00:00 +0000
ROA not after:            Sun 15 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ea:78:b2:6c:15:6f:18:31:82:0e:22:c7:18:5a:ea:5c:6c:c2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 10 00:00:00 2023 GMT
            Not After : Oct 15 23:59:59 2023 GMT
        Subject: serialNumber=ac3455611c054ffbd7f6e62845c3e1bfbf3e175f963572d41b4e78910f24c260, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6e:fb:45:1d:2d:d4:21:22:3f:e5:cc:ab:a8:
                    f6:60:e1:53:dc:32:bd:6e:9b:22:04:63:44:cb:eb:
                    0f:f0:ec:2d:ae:97:5b:9b:dc:73:e0:c3:02:00:0b:
                    71:e1:60:b4:ad:1b:ff:be:84:b1:0f:53:3d:9c:15:
                    4e:05:59:cb:3e:1e:70:bf:48:94:f0:7b:35:a9:61:
                    3c:2e:02:7f:ff:05:9a:43:10:a9:50:d3:62:17:80:
                    61:39:3d:a6:73:6b:a4:22:4a:1f:34:0e:77:c5:33:
                    ac:00:8a:3d:97:9b:a1:b9:64:e1:6b:c8:55:81:3b:
                    4f:cf:20:24:7f:bb:d3:f0:67:f8:c9:3b:c2:34:34:
                    e9:8e:c0:a2:ad:9c:c1:b3:9d:9e:40:ce:a3:c3:60:
                    54:d2:c9:84:a1:8e:91:14:53:9e:90:57:68:f0:ef:
                    53:45:58:ea:a0:75:b6:50:e3:b0:52:d6:4f:14:46:
                    86:65:b4:82:0b:39:e3:e1:20:7a:57:25:a3:86:df:
                    ab:bf:b5:35:9e:26:af:84:4a:f2:66:44:7f:99:3d:
                    a3:4d:6e:d8:fb:7c:d6:bb:65:72:8b:b8:c3:fc:5d:
                    c3:9a:9d:78:de:9b:63:a6:ba:c4:eb:e3:4d:60:24:
                    95:30:4c:c7:49:01:0e:98:ea:fc:d7:bc:0b:7a:c7:
                    3f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:22:6A:2B:BA:35:4D:99:F2:4B:51:99:7A:F4:9A:BD:D5:04:CB:25
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f83dc2e-663f-44cc-8a6f-6d9243c39f28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:24:9c:6d:c3:5e:aa:79:5a:4b:4e:2e:ea:9f:9a:24:c4:4d:
         85:c6:89:92:65:15:f9:33:4f:e8:9a:8b:87:a9:da:da:d2:e4:
         c1:13:81:e9:d3:13:54:74:d6:43:5a:35:8e:8f:de:57:12:ba:
         70:7b:78:b4:c2:6f:5f:27:51:45:34:c3:7d:85:d5:8d:9e:f8:
         c1:31:18:71:b4:ec:1b:40:67:e8:5d:35:2e:49:e1:b0:54:be:
         4a:6c:29:64:d5:8c:0e:fa:2c:60:4d:a6:8b:e1:57:3a:9e:98:
         9d:81:db:9d:fc:cb:e4:2d:6e:d1:81:96:93:6e:a6:bf:01:f5:
         b5:e6:10:3d:2b:6b:e8:3a:1c:e8:9f:56:69:27:ef:56:c1:a3:
         a1:ae:f3:f7:bc:db:7e:c1:1f:16:c0:66:55:a0:de:b3:f7:f5:
         e5:a5:83:f8:4e:13:d2:23:ec:df:00:d4:2a:38:0d:e2:0d:ad:
         a1:88:10:cd:3b:6c:08:46:67:69:f5:19:49:d3:ad:34:f3:45:
         a9:85:d7:46:0f:3e:fb:3d:a0:23:3e:78:ff:b9:73:ff:cc:d1:
         96:5a:0e:02:09:eb:aa:13:a4:8f:0e:b7:75:42:e9:c1:a8:49:
         da:9e:f1:e6:89:16:17:53:a2:94:53:e0:92:2c:4f:c6:5b:07:
         84:5e:6e:69
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUV+p4smwVbxgxgg4ixxha6lxswqAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTEwMDAwMDAwWhcNMjMxMDE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYzM0NTU2MTFjMDU0ZmZiZDdmNmU2Mjg0NWMzZTFiZmJm
M2UxNzVmOTYzNTcyZDQxYjRlNzg5MTBmMjRjMjYwMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDibvtFHS3UISI/5cyrqPZg4VPcMr1umyIEY0TL6w/w7C2u
l1ub3HPgwwIAC3HhYLStG/++hLEPUz2cFU4FWcs+HnC/SJTwezWpYTwuAn//BZpD
EKlQ02IXgGE5PaZza6QiSh80DnfFM6wAij2Xm6G5ZOFryFWBO0/PICR/u9PwZ/jJ
O8I0NOmOwKKtnMGznZ5AzqPDYFTSyYShjpEUU56QV2jw71NFWOqgdbZQ47BS1k8U
RoZltIILOePhIHpXJaOG36u/tTWeJq+ESvJmRH+ZPaNNbtj7fNa7ZXKLuMP8XcOa
nXjem2OmusTr401gJJUwTMdJAQ6Y6vzXvAt6xz+rAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUQSJqK7o1TZnyS1GZevSavdUEyyUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzdmODNkYzJlLTY2M2YtNDRjYy04YTZmLTZkOTI0M2MzOWYyOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABUknG3DXqp5WktOLuqfmiTETYXG
iZJlFfkzT+iai4ep2trS5METgenTE1R01kNaNY6P3lcSunB7eLTCb18nUUU0w32F
1Y2e+MExGHG07BtAZ+hdNS5J4bBUvkpsKWTVjA76LGBNpovhVzqemJ2B2538y+Qt
btGBlpNupr8B9bXmED0ra+g6HOifVmkn71bBo6Gu8/e8237BHxbAZlWg3rP39eWl
g/hOE9Ij7N8A1Co4DeINraGIEM07bAhGZ2n1GUnTrTTzRamF10YPPvs9oCM+eP+5
c//M0ZZaDgIJ66oTpI8Ot3VC6cGoSdqe8eaJFhdTopRT4JIsT8ZbB4Rebmk=
-----END CERTIFICATE-----