Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c0f06a43-5df3-4f55-8591-e5fc28ecceb4.roa
File:                     c0f06a43-5df3-4f55-8591-e5fc28ecceb4.roa (raw, json)
Hash identifier:          WQVAjGVlr8eyz5Cl0h6tTjwsMC08LXanP2BTz2odsq8=
Subject key identifier:   92:9D:0A:2D:FA:21:3E:32:8C:14:38:7D:C2:8A:08:BB:A5:49:B6:79
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       19070093E3D0332C5252E8F06CCFF66255775375
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c0f06a43-5df3-4f55-8591-e5fc28ecceb4.roa
Signing time:             Wed 21 Jun 2023 00:00:00 +0000
ROA not before:           Wed 21 Jun 2023 00:00:00 +0000
ROA not after:            Wed 26 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:07:00:93:e3:d0:33:2c:52:52:e8:f0:6c:cf:f6:62:55:77:53:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 21 00:00:00 2023 GMT
            Not After : Jul 26 23:59:59 2023 GMT
        Subject: serialNumber=d08c58c4105a1567ba044c359e287be847548cd92032ec784cf171e0381982d2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6a:88:a5:69:f5:42:6e:92:2c:da:0e:8c:2f:
                    03:ad:81:66:2c:80:bf:a3:2b:f3:04:8e:7f:3d:70:
                    f4:d1:72:27:bc:2b:a8:7d:04:9a:67:0c:2d:3b:38:
                    a2:ce:9b:d0:73:ea:de:a2:04:db:d1:00:71:f1:3e:
                    24:23:c4:48:7f:9b:46:ed:5c:a9:ed:c0:db:21:cd:
                    b5:b1:2a:a5:bc:25:f3:3a:1a:23:66:c1:60:00:85:
                    96:5e:3a:6f:4c:93:50:fe:b9:54:8b:fc:a9:14:f4:
                    e5:7a:4a:a6:d7:1c:00:97:39:74:ee:02:0c:79:50:
                    68:f9:56:7e:9c:02:6e:ff:3a:42:d3:98:cc:ed:b8:
                    e0:44:5c:75:fd:f5:fc:52:c4:35:90:a8:f6:9a:af:
                    6b:99:64:79:ce:66:cd:87:b2:e3:f0:c1:05:73:af:
                    af:9d:f2:bb:71:b1:49:e2:13:ef:92:b6:0e:e7:d2:
                    94:7a:8c:10:53:fc:a4:2f:60:23:e3:81:75:28:d8:
                    4c:d6:36:1c:2d:0d:0b:26:05:fd:b1:90:9c:8f:95:
                    93:e2:6e:20:08:80:a5:a8:a7:a3:6d:dc:a4:26:4e:
                    51:e8:db:d6:a0:75:28:e7:ce:01:dd:c3:51:a5:1c:
                    bf:11:17:69:83:e0:6e:75:cd:7d:1b:98:64:2e:42:
                    0c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9D:0A:2D:FA:21:3E:32:8C:14:38:7D:C2:8A:08:BB:A5:49:B6:79
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c0f06a43-5df3-4f55-8591-e5fc28ecceb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:f6:59:43:bd:96:26:9b:d1:eb:2a:a4:44:88:c4:1c:2c:60:
         28:c8:e8:21:95:61:ac:46:ba:8b:6a:50:6a:41:55:74:7d:ac:
         0c:c4:a3:3c:76:d6:b1:68:5a:c0:df:43:09:d9:2f:e2:4a:86:
         97:29:f1:9b:88:d9:ec:56:f8:d0:4f:54:aa:dd:6d:bc:64:88:
         86:cb:cf:98:5e:5c:57:c4:e4:8a:1b:9a:2d:c5:bf:65:d1:75:
         25:b0:23:a8:2c:f7:7d:66:6a:69:8b:0e:af:ae:38:23:9f:b7:
         2b:05:d2:55:44:8c:ea:49:fb:58:37:a5:32:04:cd:9c:27:44:
         62:be:46:a3:5f:9c:36:a3:54:bd:f9:9e:96:fe:3e:05:88:26:
         05:3e:38:cd:79:08:ef:c1:9a:54:f5:cd:1b:3c:1f:ef:01:39:
         fb:05:48:05:9c:48:e4:1d:09:23:66:e4:7d:f1:ac:57:8e:f5:
         b4:16:c6:b8:27:b1:1b:2b:ab:a8:87:03:f8:a1:8c:1c:c6:a3:
         d7:ea:00:db:99:aa:cb:bf:3f:7d:86:52:82:57:7a:45:25:76:
         f0:66:37:d4:9c:aa:61:ab:cf:63:02:24:08:bd:29:b2:52:62:
         d0:87:23:5a:bd:e2:cf:0e:98:cd:ef:f1:9d:94:d8:a5:ce:47:
         b3:44:f6:f5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGQcAk+PQMyxSUujwbM/2YlV3U3UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjIxMDAwMDAwWhcNMjMwNzI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMDhjNThjNDEwNWExNTY3YmEwNDRjMzU5ZTI4N2JlODQ3
NTQ4Y2Q5MjAzMmVjNzg0Y2YxNzFlMDM4MTk4MmQyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTaoilafVCbpIs2g6MLwOtgWYsgL+jK/MEjn89cPTRcie8
K6h9BJpnDC07OKLOm9Bz6t6iBNvRAHHxPiQjxEh/m0btXKntwNshzbWxKqW8JfM6
GiNmwWAAhZZeOm9Mk1D+uVSL/KkU9OV6SqbXHACXOXTuAgx5UGj5Vn6cAm7/OkLT
mMztuOBEXHX99fxSxDWQqPaar2uZZHnOZs2HsuPwwQVzr6+d8rtxsUniE++Stg7n
0pR6jBBT/KQvYCPjgXUo2EzWNhwtDQsmBf2xkJyPlZPibiAIgKWop6Nt3KQmTlHo
29agdSjnzgHdw1GlHL8RF2mD4G51zX0bmGQuQgwdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkp0KLfohPjKMFDh9wooIu6VJtnkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2MwZjA2YTQzLTVkZjMtNGY1NS04NTkxLWU1ZmMyOGVjY2ViNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACX2WUO9liab0esqpESIxBwsYCjI
6CGVYaxGuotqUGpBVXR9rAzEozx21rFoWsDfQwnZL+JKhpcp8ZuI2exW+NBPVKrd
bbxkiIbLz5heXFfE5Iobmi3Fv2XRdSWwI6gs931mammLDq+uOCOftysF0lVEjOpJ
+1g3pTIEzZwnRGK+RqNfnDajVL35npb+PgWIJgU+OM15CO/BmlT1zRs8H+8BOfsF
SAWcSOQdCSNm5H3xrFeO9bQWxrgnsRsrq6iHA/ihjBzGo9fqANuZqsu/P32GUoJX
ekUldvBmN9ScqmGrz2MCJAi9KbJSYtCHI1q94s8OmM3v8Z2U2KXOR7NE9vU=
-----END CERTIFICATE-----