Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9fcd9b7-5565-412a-a2bc-bee042c42a02.roa
File:                     b9fcd9b7-5565-412a-a2bc-bee042c42a02.roa (raw, json)
Hash identifier:          F+23XnrhIRyeo8vQbME/rKbB5P+iO3ZkAwuvzJ8ULXo=
Subject key identifier:   66:4B:0B:AF:C9:BD:5F:D4:3A:73:C0:F9:98:3A:56:0F:28:D3:1C:61
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       78E1DB72ADC16E2280E6F8C7F48EB9C834D9E698
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9fcd9b7-5565-412a-a2bc-bee042c42a02.roa
Signing time:             Sat 26 Aug 2023 00:00:00 +0000
ROA not before:           Sat 26 Aug 2023 00:00:00 +0000
ROA not after:            Sat 30 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e1:db:72:ad:c1:6e:22:80:e6:f8:c7:f4:8e:b9:c8:34:d9:e6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 26 00:00:00 2023 GMT
            Not After : Sep 30 23:59:59 2023 GMT
        Subject: serialNumber=8a556eb839c2da87b30f6727f424b339a598d571ca5fd404b7b5d0b2939fce28, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fd:10:da:be:7d:67:2f:47:1c:c0:83:b9:e1:
                    7a:dd:85:11:d1:7d:30:3c:81:9d:17:56:f6:5d:17:
                    b4:a0:14:3d:49:b8:d8:47:d9:d9:27:7f:1d:7d:b6:
                    dd:f0:95:35:be:ab:3f:4f:ef:83:27:b0:9b:64:2a:
                    bb:57:0b:7a:9e:5c:99:96:52:96:d7:b1:11:54:0a:
                    b1:81:0a:df:76:47:bb:83:48:50:80:77:8b:06:3c:
                    c8:32:28:83:04:6a:90:aa:02:00:5a:18:61:18:a4:
                    35:74:a0:f1:7e:c4:cf:e0:37:d9:5c:15:3b:39:7e:
                    6a:87:6f:60:35:8f:07:a6:fe:e0:d8:29:c9:7e:1c:
                    2c:31:ee:26:67:6a:a1:74:1d:91:50:fa:38:33:bb:
                    7b:6b:70:0a:7f:0a:c2:c1:f9:2b:9c:60:8d:96:02:
                    88:ed:70:2c:b3:bb:38:b0:71:46:51:01:f0:f2:80:
                    59:83:35:44:61:5a:d4:03:28:db:e8:64:8f:5f:7a:
                    db:03:08:5a:d1:a4:3d:ee:69:26:37:82:c5:7c:02:
                    00:54:da:f2:65:36:dd:80:22:e7:2f:dd:6f:9c:c2:
                    a3:3a:68:b4:30:79:da:2f:6c:80:44:61:67:eb:bf:
                    81:70:da:ae:f0:63:37:d5:82:86:c9:f0:48:94:51:
                    ca:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4B:0B:AF:C9:BD:5F:D4:3A:73:C0:F9:98:3A:56:0F:28:D3:1C:61
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9fcd9b7-5565-412a-a2bc-bee042c42a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:f1:0e:58:ce:5a:aa:a3:0f:0d:24:76:66:4f:d2:b1:80:0a:
         6f:50:eb:6f:05:d0:5e:9b:d4:11:de:17:eb:37:9b:6f:10:4a:
         2f:d6:c6:ce:a5:58:74:e2:72:33:cb:41:a7:02:c4:75:21:8b:
         0a:c2:fe:6c:85:cb:99:91:d4:48:12:56:27:a9:d9:bd:32:5c:
         7f:e7:6f:ed:a3:2a:29:56:a2:1d:21:6d:7a:40:da:79:7b:a3:
         41:d6:7c:44:be:5f:78:bd:95:47:0a:c1:6b:fc:e6:c6:0f:90:
         00:dc:06:8f:a6:5f:fc:3b:6f:a1:b9:e7:d6:ee:b1:89:3e:6c:
         0d:ab:99:bd:cf:1d:70:a0:df:6a:00:b4:45:99:18:fc:ce:21:
         4b:52:c0:b1:8d:e2:d8:b8:c6:3c:5d:bf:9b:82:70:68:51:25:
         cd:73:10:c0:91:0e:22:d5:1b:1a:b6:4d:c5:a2:96:63:df:17:
         85:83:89:ea:0b:3d:43:7a:54:85:9d:b4:46:9d:35:54:a6:5d:
         57:fa:c0:63:6b:7a:2a:4d:2b:bf:ee:cc:c0:a2:79:88:7c:0b:
         c6:64:12:23:a9:91:e3:3e:05:fa:06:73:0e:1d:57:bd:c5:97:
         cf:9d:13:23:89:f7:08:0e:d1:f1:30:20:ba:84:07:c3:bb:23:
         0e:58:30:a4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeOHbcq3BbiKA5vjH9I65yDTZ5pgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODI2MDAwMDAwWhcNMjMwOTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0A4YTU1NmViODM5YzJkYTg3YjMwZjY3MjdmNDI0YjMzOWE1
OThkNTcxY2E1ZmQ0MDRiN2I1ZDBiMjkzOWZjZTI4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDe/RDavn1nL0ccwIO54XrdhRHRfTA8gZ0XVvZdF7SgFD1J
uNhH2dknfx19tt3wlTW+qz9P74MnsJtkKrtXC3qeXJmWUpbXsRFUCrGBCt92R7uD
SFCAd4sGPMgyKIMEapCqAgBaGGEYpDV0oPF+xM/gN9lcFTs5fmqHb2A1jwem/uDY
Kcl+HCwx7iZnaqF0HZFQ+jgzu3trcAp/CsLB+SucYI2WAojtcCyzuziwcUZRAfDy
gFmDNURhWtQDKNvoZI9fetsDCFrRpD3uaSY3gsV8AgBU2vJlNt2AIucv3W+cwqM6
aLQwedovbIBEYWfrv4Fw2q7wYzfVgobJ8EiUUcqdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZksLr8m9X9Q6c8D5mDpWDyjTHGEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2I5ZmNkOWI3LTU1NjUtNDEyYS1hMmJjLWJlZTA0MmM0MmEwMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADbxDljOWqqjDw0kdmZP0rGACm9Q
628F0F6b1BHeF+s3m28QSi/Wxs6lWHTicjPLQacCxHUhiwrC/myFy5mR1EgSViep
2b0yXH/nb+2jKilWoh0hbXpA2nl7o0HWfES+X3i9lUcKwWv85sYPkADcBo+mX/w7
b6G559busYk+bA2rmb3PHXCg32oAtEWZGPzOIUtSwLGN4ti4xjxdv5uCcGhRJc1z
EMCRDiLVGxq2TcWilmPfF4WDieoLPUN6VIWdtEadNVSmXVf6wGNreipNK7/uzMCi
eYh8C8ZkEiOpkeM+BfoGcw4dV73Fl8+dEyOJ9wgO0fEwILqEB8O7Iw5YMKQ=
-----END CERTIFICATE-----