Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b082316b-704b-4064-af56-af717d005999.roa
File:                     b082316b-704b-4064-af56-af717d005999.roa (raw, json)
Hash identifier:          YilDyKVxDevpKjUjH7LNUS6Sr+i3xAedg4dW3MbIXv0=
Subject key identifier:   C8:53:97:E1:D4:AE:B4:15:7D:7E:4D:E9:62:3E:93:CC:A0:28:F9:DA
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       406196E62410937E4767AEA88D72A87A225AB9AE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b082316b-704b-4064-af56-af717d005999.roa
Signing time:             Thu 27 Jul 2023 00:00:00 +0000
ROA not before:           Thu 27 Jul 2023 00:00:00 +0000
ROA not after:            Thu 31 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:61:96:e6:24:10:93:7e:47:67:ae:a8:8d:72:a8:7a:22:5a:b9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 27 00:00:00 2023 GMT
            Not After : Aug 31 23:59:59 2023 GMT
        Subject: serialNumber=4fe882c45685558013902aba4d967b8f3c1c8c98b389a0d4e5f8c07382e34440, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:59:e1:a9:30:10:66:9a:e9:30:30:c3:a7:
                    61:df:13:d2:8d:ae:50:60:fe:71:2b:bd:96:49:cb:
                    23:a9:87:16:ba:8f:4e:d2:66:ca:11:07:79:e3:c4:
                    3a:54:09:fe:fe:a2:a7:49:4c:c1:f7:e0:cf:ca:11:
                    16:8e:ae:c5:25:a2:02:d0:10:97:b9:84:b3:f8:bc:
                    64:5c:97:fb:f5:37:7d:8c:f4:ae:44:b5:25:4d:04:
                    2b:6c:b0:94:58:01:10:b2:a3:5d:46:88:a8:48:71:
                    1b:6c:95:f1:97:67:0a:fe:be:d0:c3:91:ac:73:82:
                    d0:8b:23:f9:12:6a:08:4d:e1:de:2e:fd:1b:c5:d5:
                    e8:14:e7:95:cb:4b:13:1e:48:5b:3c:7a:b1:87:10:
                    eb:96:87:0f:05:d3:75:fc:2f:5b:d2:23:9d:34:ce:
                    e2:65:5e:1a:40:ce:1d:f3:4e:0b:c2:ab:9f:0b:94:
                    4f:00:a0:f6:ea:0b:01:3f:bb:ee:e9:35:7f:6d:1e:
                    16:3f:e7:a7:02:47:6c:b1:b2:ee:38:5d:c8:80:62:
                    d9:1b:09:6b:47:bd:29:3a:33:0b:f2:6a:03:50:cc:
                    33:3f:67:9f:7e:e5:73:97:d1:84:94:ab:70:c7:75:
                    01:54:fa:35:2a:f2:e2:92:f5:f7:21:88:48:e9:16:
                    d8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:53:97:E1:D4:AE:B4:15:7D:7E:4D:E9:62:3E:93:CC:A0:28:F9:DA
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b082316b-704b-4064-af56-af717d005999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:55:cb:6b:78:68:38:23:2e:08:df:65:8e:dd:2e:c3:39:fa:
         f5:18:ca:63:b1:25:41:df:51:15:f2:43:74:87:d9:b6:f2:c9:
         36:00:ee:1e:eb:fc:e4:8b:49:8b:45:b2:d1:e2:96:b8:c6:c9:
         53:23:17:0e:c4:e8:df:9e:ac:67:af:2a:8b:15:26:e0:13:cb:
         34:46:36:33:01:5a:09:67:38:1f:17:30:b3:93:dd:72:21:ce:
         06:69:d7:4d:e9:63:97:fc:45:25:b0:51:0f:c4:9a:96:ae:b5:
         29:92:d5:d8:11:43:fb:b2:41:2b:87:2b:a9:85:1f:af:e7:71:
         a5:2f:a8:60:44:d6:ae:eb:e9:1d:fb:51:e0:00:28:e5:22:b5:
         88:c4:cb:86:f6:ae:5f:34:df:f8:e0:e7:fb:97:6d:ef:96:e4:
         af:7b:46:5d:d0:bd:4a:68:92:3e:ca:53:5b:f8:ac:d5:2e:8d:
         72:16:ba:9c:7b:f1:e0:1a:77:57:1f:db:71:22:c7:6d:82:29:
         43:1c:19:15:fd:65:56:39:b2:90:6a:69:11:08:99:7d:26:39:
         69:6b:c5:08:f8:3f:74:e2:ab:48:00:b7:5a:20:43:5b:a7:69:
         91:c2:46:63:5b:40:b4:92:fc:08:34:58:3c:4f:11:ee:4e:ab:
         f6:68:a2:6c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQGGW5iQQk35HZ66ojXKoeiJaua4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzI3MDAwMDAwWhcNMjMwODMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZmU4ODJjNDU2ODU1NTgwMTM5MDJhYmE0ZDk2N2I4ZjNj
MWM4Yzk4YjM4OWEwZDRlNWY4YzA3MzgyZTM0NDQwMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDISVnhqTAQZprpMDDDp2HfE9KNrlBg/nErvZZJyyOphxa6
j07SZsoRB3njxDpUCf7+oqdJTMH34M/KERaOrsUlogLQEJe5hLP4vGRcl/v1N32M
9K5EtSVNBCtssJRYARCyo11GiKhIcRtslfGXZwr+vtDDkaxzgtCLI/kSaghN4d4u
/RvF1egU55XLSxMeSFs8erGHEOuWhw8F03X8L1vSI500zuJlXhpAzh3zTgvCq58L
lE8AoPbqCwE/u+7pNX9tHhY/56cCR2yxsu44XciAYtkbCWtHvSk6MwvyagNQzDM/
Z59+5XOX0YSUq3DHdQFU+jUq8uKS9fchiEjpFtgNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUyFOX4dSutBV9fk3pYj6TzKAo+dowHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2IwODIzMTZiLTcwNGItNDA2NC1hZjU2LWFmNzE3ZDAwNTk5OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABBVy2t4aDgjLgjfZY7dLsM5+vUY
ymOxJUHfURXyQ3SH2bbyyTYA7h7r/OSLSYtFstHilrjGyVMjFw7E6N+erGevKosV
JuATyzRGNjMBWglnOB8XMLOT3XIhzgZp103pY5f8RSWwUQ/EmpautSmS1dgRQ/uy
QSuHK6mFH6/ncaUvqGBE1q7r6R37UeAAKOUitYjEy4b2rl803/jg5/uXbe+W5K97
Rl3QvUpokj7KU1v4rNUujXIWupx78eAad1cf23Eix22CKUMcGRX9ZVY5spBqaREI
mX0mOWlrxQj4P3Tiq0gAt1ogQ1unaZHCRmNbQLSS/Ag0WDxPEe5Oq/Zoomw=
-----END CERTIFICATE-----