Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b16f3888-f9ca-4c27-8912-acd2ab84bcea.roa
File:                     b16f3888-f9ca-4c27-8912-acd2ab84bcea.roa (raw, json)
Hash identifier:          VTZ6Pno8Pr+/5xX6GSdVhg8MzXb/+uhVq0RwO5unosw=
Subject key identifier:   97:78:A8:EE:3B:04:5A:EF:8D:A3:EF:69:BE:AC:79:A2:42:BE:13:A6
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0496E14FA933492233A9690EBFC50A0C63CBA9D7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b16f3888-f9ca-4c27-8912-acd2ab84bcea.roa
Signing time:             Tue 19 Dec 2023 00:00:00 +0000
ROA not before:           Tue 19 Dec 2023 00:00:00 +0000
ROA not after:            Tue 23 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:96:e1:4f:a9:33:49:22:33:a9:69:0e:bf:c5:0a:0c:63:cb:a9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 19 00:00:00 2023 GMT
            Not After : Jan 23 23:59:59 2024 GMT
        Subject: serialNumber=46b8f2d68ca2881a03e2d8985a8bcafddfee655a36c5f8df63672aea8bdbed57, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e0:c0:58:e4:f6:f7:60:78:23:6a:63:1a:91:
                    86:fa:8d:da:0a:86:18:bb:39:e1:75:ce:8a:d3:27:
                    22:c6:96:d3:1a:64:c1:33:3a:46:16:92:5d:57:55:
                    38:fc:e0:9e:a1:fa:8e:1b:32:7f:a3:08:2e:98:21:
                    1a:d6:95:e5:59:92:e1:e8:ae:7a:cb:1a:98:93:81:
                    64:99:38:0f:23:14:83:ed:b0:63:c9:d1:22:23:93:
                    a8:0f:f3:e9:ae:a4:b2:e5:97:3c:7c:cd:7e:3f:1a:
                    5b:68:5b:95:98:fc:65:01:74:0a:03:f9:4c:8b:3e:
                    ba:1e:f5:46:0c:a2:94:18:78:95:b0:bb:be:5a:19:
                    6e:8d:0f:30:02:34:53:51:7b:65:c7:23:f6:c3:ef:
                    ed:05:38:48:3d:97:9f:17:a0:f4:b9:16:e5:f2:68:
                    31:90:60:7c:d9:b9:23:20:d5:df:92:40:02:c5:99:
                    a8:51:d5:89:9e:2c:cd:02:38:fc:ba:6f:87:48:65:
                    8c:a4:2d:dc:3b:fa:9b:9b:d3:07:f5:17:55:df:0a:
                    75:ad:8c:05:6c:e6:66:40:54:18:44:43:53:15:2a:
                    8e:99:15:ff:09:d2:0d:40:5a:dc:c3:7b:80:cc:7a:
                    b0:22:55:bf:74:d8:b0:5d:84:73:65:15:7d:63:f9:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:78:A8:EE:3B:04:5A:EF:8D:A3:EF:69:BE:AC:79:A2:42:BE:13:A6
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b16f3888-f9ca-4c27-8912-acd2ab84bcea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:53:11:01:d4:f8:cb:6a:33:bd:6a:08:42:8c:43:e1:a0:7d:
         a6:f9:e7:9f:f1:0b:7e:d0:a4:25:54:5b:fd:67:0f:2c:47:03:
         82:77:e3:fe:1b:ea:84:ee:f6:9f:5a:eb:6c:45:7d:c2:c0:69:
         99:b9:2c:9d:40:c2:12:3a:45:69:cb:18:b5:2f:50:08:4f:60:
         a7:2e:76:1a:fc:86:14:ca:41:a2:b2:67:96:05:f9:05:44:ca:
         aa:47:cc:71:c7:86:28:8c:0c:f7:49:d0:0d:39:a8:1e:81:8d:
         94:b5:11:6c:01:d3:9b:05:c0:c4:2f:80:ab:9e:f9:1a:e5:ad:
         75:ed:03:32:5c:1e:8e:f9:2a:04:c3:93:d0:24:8a:4b:52:11:
         2d:f5:3a:b8:81:1f:13:08:da:c5:9a:0a:ea:10:01:3c:cc:f0:
         a6:30:7a:c7:e3:a5:cc:72:63:ce:b9:80:03:b9:8d:aa:62:7a:
         e8:02:f2:23:10:1c:4d:6c:c4:da:29:35:b5:6e:27:dc:77:5f:
         e7:88:7a:ac:ef:38:9c:48:da:7e:a0:8c:81:8f:24:68:71:5f:
         21:bf:27:a2:2b:8c:e4:fd:00:c1:78:cb:43:22:9e:12:60:64:
         8e:bb:72:a1:e7:91:e0:e3:06:c9:20:df:c7:06:9d:b8:b2:b4:
         02:1c:cb:34
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBJbhT6kzSSIzqWkOv8UKDGPLqdcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjE5MDAwMDAwWhcNMjQwMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NmI4ZjJkNjhjYTI4ODFhMDNlMmQ4OTg1YThiY2FmZGRm
ZWU2NTVhMzZjNWY4ZGY2MzY3MmFlYThiZGJlZDU3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDY4MBY5Pb3YHgjamMakYb6jdoKhhi7OeF1zorTJyLGltMa
ZMEzOkYWkl1XVTj84J6h+o4bMn+jCC6YIRrWleVZkuHornrLGpiTgWSZOA8jFIPt
sGPJ0SIjk6gP8+mupLLllzx8zX4/GltoW5WY/GUBdAoD+UyLProe9UYMopQYeJWw
u75aGW6NDzACNFNRe2XHI/bD7+0FOEg9l58XoPS5FuXyaDGQYHzZuSMg1d+SQALF
mahR1YmeLM0COPy6b4dIZYykLdw7+pub0wf1F1XfCnWtjAVs5mZAVBhEQ1MVKo6Z
Ff8J0g1AWtzDe4DMerAiVb902LBdhHNlFX1j+Ux5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUl3io7jsEWu+No+9pvqx5okK+E6YwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2IxNmYzODg4LWY5Y2EtNGMyNy04OTEyLWFjZDJhYjg0YmNlYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIRTEQHU+MtqM71qCEKMQ+Ggfab5
55/xC37QpCVUW/1nDyxHA4J34/4b6oTu9p9a62xFfcLAaZm5LJ1AwhI6RWnLGLUv
UAhPYKcudhr8hhTKQaKyZ5YF+QVEyqpHzHHHhiiMDPdJ0A05qB6BjZS1EWwB05sF
wMQvgKue+RrlrXXtAzJcHo75KgTDk9AkiktSES31OriBHxMI2sWaCuoQATzM8KYw
esfjpcxyY865gAO5japieugC8iMQHE1sxNopNbVuJ9x3X+eIeqzvOJxI2n6gjIGP
JGhxXyG/J6IrjOT9AMF4y0MinhJgZI67cqHnkeDjBskg38cGnbiytAIcyzQ=
-----END CERTIFICATE-----