Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b26e4934-ccc2-4684-9c1f-72f159a962af.roa
File:                     b26e4934-ccc2-4684-9c1f-72f159a962af.roa (raw, json)
Hash identifier:          i7Gg3kLlI7uvUpcEATjSs+oqlUSnIzPbWxHxUN3fuWQ=
Subject key identifier:   63:AB:78:26:21:67:9A:E3:05:3A:A6:21:86:37:41:31:F2:FD:8C:5F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0C428E416F0954E76D723777D0294FE2EA760233
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b26e4934-ccc2-4684-9c1f-72f159a962af.roa
Signing time:             Thu 17 Aug 2023 00:00:00 +0000
ROA not before:           Thu 17 Aug 2023 00:00:00 +0000
ROA not after:            Thu 21 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:42:8e:41:6f:09:54:e7:6d:72:37:77:d0:29:4f:e2:ea:76:02:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 17 00:00:00 2023 GMT
            Not After : Sep 21 23:59:59 2023 GMT
        Subject: serialNumber=8d882b9b4619354981717b269509924eb9332b8de68453de276c5e0d5f6cf179, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:6b:de:13:c8:e6:8f:47:b1:44:45:9a:1f:
                    2d:01:01:90:20:f2:4b:36:15:7e:fa:06:de:6c:12:
                    4c:6c:80:39:4b:f9:42:08:ff:66:6f:e6:e1:86:b9:
                    ba:bb:01:64:74:19:a2:50:47:17:5d:1c:5c:02:7d:
                    56:63:ef:98:75:73:b2:90:f6:e9:f3:d8:13:55:2c:
                    96:c2:8b:50:97:be:a5:c6:7a:30:f5:02:f7:be:7b:
                    7d:f1:1c:23:0c:45:08:4d:91:4b:e0:67:00:19:f2:
                    a2:74:d6:8e:9c:1e:84:b4:c8:f3:e2:2c:4f:8f:9d:
                    12:38:93:c7:35:d6:80:ad:d8:71:5b:e7:af:0a:df:
                    eb:cd:75:14:db:d1:61:1b:8a:78:88:81:dc:97:24:
                    e8:6b:3f:c8:5d:43:2c:70:9a:b5:03:a5:64:f7:53:
                    bd:63:5e:71:48:bf:1a:c8:cc:a9:5d:d2:d1:8f:a9:
                    f1:ef:4e:cc:a0:f1:4b:63:c2:10:c8:c3:cb:7b:ba:
                    55:46:40:c7:b8:5d:a8:1f:e0:86:a1:f5:d6:2e:6b:
                    2f:f2:9e:21:05:03:e8:75:32:83:37:6b:f6:ae:95:
                    dc:b8:ce:0c:8c:05:30:4e:b9:fb:c6:8a:8d:48:cf:
                    72:2a:f5:eb:1d:5d:e5:f9:c4:e2:c9:bc:52:43:d5:
                    40:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AB:78:26:21:67:9A:E3:05:3A:A6:21:86:37:41:31:F2:FD:8C:5F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b26e4934-ccc2-4684-9c1f-72f159a962af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:2d:77:fa:39:a5:68:bd:fe:09:9f:03:85:50:15:5d:74:c2:
         6a:9f:5f:d5:ec:37:ad:d2:25:78:76:d6:65:25:21:22:39:40:
         d1:39:2d:49:dd:71:fe:af:a2:e5:77:98:bd:c0:84:7e:cc:5c:
         24:4a:c4:b8:64:f1:c7:11:6e:11:38:25:21:ef:26:43:d4:dd:
         6f:3b:86:6b:b6:04:cc:2a:0b:38:fa:bc:39:ee:36:eb:15:79:
         31:a6:1a:86:5d:6c:99:55:5c:be:a1:3b:52:3d:95:bb:ec:06:
         99:4c:be:58:be:35:fe:02:8a:76:f8:b4:60:9c:d7:7d:93:7f:
         65:e9:13:a1:56:a4:75:46:2d:dd:6a:73:b3:40:28:ee:65:c6:
         67:1d:f0:c7:86:2c:06:72:ee:19:2f:e1:71:47:76:1b:3f:29:
         a4:3a:33:35:74:07:12:33:30:a2:87:49:d7:a9:2a:ac:1e:bc:
         76:35:ad:d0:b4:f9:2c:f8:26:b0:d9:df:7d:b9:fa:fc:a6:6e:
         c7:c4:1d:57:37:05:49:f8:c7:5e:c9:b5:7b:59:19:09:63:bb:
         1f:cb:48:18:a3:68:3d:2f:d2:bd:ae:fe:9d:8f:ff:f8:5e:20:
         7c:9f:c2:7d:b5:be:db:33:8f:6a:b5:93:21:39:dc:47:1e:5d:
         71:3e:f7:a4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDEKOQW8JVOdtcjd30ClP4up2AjMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODE3MDAwMDAwWhcNMjMwOTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZDg4MmI5YjQ2MTkzNTQ5ODE3MTdiMjY5NTA5OTI0ZWI5
MzMyYjhkZTY4NDUzZGUyNzZjNWUwZDVmNmNmMTc5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJSWveE8jmj0exREWaHy0BAZAg8ks2FX76Bt5sEkxsgDlL
+UII/2Zv5uGGubq7AWR0GaJQRxddHFwCfVZj75h1c7KQ9unz2BNVLJbCi1CXvqXG
ejD1Ave+e33xHCMMRQhNkUvgZwAZ8qJ01o6cHoS0yPPiLE+PnRI4k8c11oCt2HFb
568K3+vNdRTb0WEbiniIgdyXJOhrP8hdQyxwmrUDpWT3U71jXnFIvxrIzKld0tGP
qfHvTsyg8UtjwhDIw8t7ulVGQMe4Xagf4Iah9dYuay/yniEFA+h1MoM3a/auldy4
zgyMBTBOufvGio1Iz3Iq9esdXeX5xOLJvFJD1UCdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUY6t4JiFnmuMFOqYhhjdBMfL9jF8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2IyNmU0OTM0LWNjYzItNDY4NC05YzFmLTcyZjE1OWE5NjJhZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKwtd/o5pWi9/gmfA4VQFV10wmqf
X9XsN63SJXh21mUlISI5QNE5LUndcf6vouV3mL3AhH7MXCRKxLhk8ccRbhE4JSHv
JkPU3W87hmu2BMwqCzj6vDnuNusVeTGmGoZdbJlVXL6hO1I9lbvsBplMvli+Nf4C
inb4tGCc132Tf2XpE6FWpHVGLd1qc7NAKO5lxmcd8MeGLAZy7hkv4XFHdhs/KaQ6
MzV0BxIzMKKHSdepKqwevHY1rdC0+Sz4JrDZ3325+vymbsfEHVc3BUn4x17JtXtZ
GQljux/LSBijaD0v0r2u/p2P//heIHyfwn21vtszj2q1kyE53EceXXE+96Q=
-----END CERTIFICATE-----