Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cb6a323a-d189-4547-945f-04e269ab4100.roa
File:                     cb6a323a-d189-4547-945f-04e269ab4100.roa (raw, json)
Hash identifier:          gYRb2Dv6WVAC6XdLVwHJbLHw1YveaV3aGU6KI0sdxYQ=
Subject key identifier:   DB:7E:3D:4C:65:B1:FA:90:09:41:04:86:79:56:F7:1F:8D:97:BF:24
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3D6DF471DFDA144217BF17A1BBBAEF08FEBD51CD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cb6a323a-d189-4547-945f-04e269ab4100.roa
Signing time:             Tue 26 Sep 2023 00:00:00 +0000
ROA not before:           Tue 26 Sep 2023 00:00:00 +0000
ROA not after:            Tue 31 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6d:f4:71:df:da:14:42:17:bf:17:a1:bb:ba:ef:08:fe:bd:51:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 26 00:00:00 2023 GMT
            Not After : Oct 31 23:59:59 2023 GMT
        Subject: serialNumber=318cc7863db4409176c9236bbe14d3f9b0d86599b3ba0be172243b50f8b40c43, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:2c:86:9c:b7:2f:ce:b6:78:bf:66:da:1e:
                    8f:0a:2b:e2:b3:42:32:f2:a8:a6:4c:50:01:5e:06:
                    db:a9:fe:bb:bd:26:07:ea:5d:99:14:8a:bd:dc:e2:
                    ce:f7:f4:bc:ef:5a:5e:86:ca:23:e9:d3:76:3e:67:
                    f3:5a:f2:e6:61:10:68:87:4a:84:1f:8d:70:64:91:
                    5c:b8:9e:f6:ef:92:18:b6:3e:09:75:13:85:af:58:
                    6b:2a:c6:fc:a1:07:e5:a9:ca:72:c7:bb:8f:35:4d:
                    ea:0a:b3:2d:19:8a:64:6b:9f:fb:20:db:84:23:a4:
                    e4:f9:09:f3:10:a9:c6:f2:fc:50:69:87:b8:33:39:
                    7c:d6:8f:07:e4:b9:5a:40:44:dd:be:95:22:cc:0d:
                    c9:29:84:0e:c3:f8:24:e5:08:43:bc:6b:3b:c0:d7:
                    3e:e2:00:90:d0:25:a2:16:fc:df:3c:dc:7a:54:58:
                    10:fb:90:20:4b:18:4e:e4:bb:97:94:53:98:75:16:
                    02:90:39:53:3f:10:d0:66:cd:d2:f5:a7:91:a6:ad:
                    81:8f:a3:a3:3c:8c:76:25:18:d5:47:ac:4a:57:97:
                    2b:de:59:cc:83:40:85:93:d7:1b:05:ab:63:f3:a0:
                    77:9c:1d:0f:4c:93:31:2e:3d:61:cb:ed:f2:42:8e:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7E:3D:4C:65:B1:FA:90:09:41:04:86:79:56:F7:1F:8D:97:BF:24
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cb6a323a-d189-4547-945f-04e269ab4100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:87:90:40:da:4d:38:b0:10:4b:f7:3f:f0:9e:67:b8:14:23:
         57:27:74:e9:a1:2a:61:22:8b:66:a0:62:9d:b2:6f:41:99:97:
         98:4e:f6:77:17:19:d4:a3:08:15:78:ca:bd:8b:a5:e4:07:ab:
         8a:25:7b:80:04:2c:a5:c6:e1:aa:2b:59:a6:8f:af:34:dc:86:
         5c:67:10:c2:47:68:8a:6b:f5:1d:5e:c9:11:ce:a0:7d:57:54:
         d3:12:f4:58:9e:ed:ca:25:a1:5a:55:e7:63:10:2e:a4:d9:e9:
         c0:27:9f:d4:78:74:71:28:0b:0c:a8:20:e6:f5:7c:eb:57:99:
         32:5d:b0:d6:4a:04:72:1c:08:5a:af:04:10:0d:65:59:21:de:
         6f:56:01:4e:2d:63:9e:47:61:a3:f7:cb:7a:d2:65:42:2b:08:
         58:a6:b6:48:ca:b4:28:cd:c6:47:3d:e8:40:a0:56:23:3e:c1:
         47:82:c2:2b:16:9a:0b:7d:c4:21:ed:c5:38:d0:84:eb:ab:8a:
         b5:e3:ce:da:1a:cf:c0:49:e8:13:eb:0d:51:76:ab:ee:6d:7b:
         f1:87:78:09:40:2e:c9:ed:71:86:0a:9d:b0:24:f2:8c:7d:90:
         b5:b9:f5:35:cf:53:9f:b4:47:17:0b:9b:40:e2:66:de:2d:88:
         00:0e:17:5d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPW30cd/aFEIXvxehu7rvCP69Uc0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTI2MDAwMDAwWhcNMjMxMDMxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMThjYzc4NjNkYjQ0MDkxNzZjOTIzNmJiZTE0ZDNmOWIw
ZDg2NTk5YjNiYTBiZTE3MjI0M2I1MGY4YjQwYzQzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCiwCyGnLcvzrZ4v2baHo8KK+KzQjLyqKZMUAFeBtup/ru9
JgfqXZkUir3c4s739LzvWl6GyiPp03Y+Z/Na8uZhEGiHSoQfjXBkkVy4nvbvkhi2
Pgl1E4WvWGsqxvyhB+WpynLHu481TeoKsy0ZimRrn/sg24QjpOT5CfMQqcby/FBp
h7gzOXzWjwfkuVpARN2+lSLMDckphA7D+CTlCEO8azvA1z7iAJDQJaIW/N883HpU
WBD7kCBLGE7ku5eUU5h1FgKQOVM/ENBmzdL1p5GmrYGPo6M8jHYlGNVHrEpXlyve
WcyDQIWT1xsFq2PzoHecHQ9MkzEuPWHL7fJCjs+XAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2349TGWx+pAJQQSGeVb3H42XvyQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NiNmEzMjNhLWQxODktNDU0Ny05NDVmLTA0ZTI2OWFiNDEwMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEyHkEDaTTiwEEv3P/CeZ7gUI1cn
dOmhKmEii2agYp2yb0GZl5hO9ncXGdSjCBV4yr2LpeQHq4ole4AELKXG4aorWaaP
rzTchlxnEMJHaIpr9R1eyRHOoH1XVNMS9Fie7coloVpV52MQLqTZ6cAnn9R4dHEo
CwyoIOb1fOtXmTJdsNZKBHIcCFqvBBANZVkh3m9WAU4tY55HYaP3y3rSZUIrCFim
tkjKtCjNxkc96ECgViM+wUeCwisWmgt9xCHtxTjQhOurirXjztoaz8BJ6BPrDVF2
q+5te/GHeAlALsntcYYKnbAk8ox9kLW59TXPU5+0RxcLm0DiZt4tiAAOF10=
-----END CERTIFICATE-----