Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cbb4f42f-cb94-4e28-a4ff-b63745bf2b48.roa
File:                     cbb4f42f-cb94-4e28-a4ff-b63745bf2b48.roa (raw, json)
Hash identifier:          ZjEO9yYiNsNAOo5NxDZrfYNpPNZ/m8mdzCgvdVebLO4=
Subject key identifier:   9F:E6:71:C4:6A:B0:F4:D9:61:42:E2:5C:EE:66:02:35:2B:C4:20:AD
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2C6AAD0F175B1D3DAF5AB0C63A93DA1367596086
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cbb4f42f-cb94-4e28-a4ff-b63745bf2b48.roa
Signing time:             Sun 25 Jun 2023 00:00:00 +0000
ROA not before:           Sun 25 Jun 2023 00:00:00 +0000
ROA not after:            Sun 30 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6a:ad:0f:17:5b:1d:3d:af:5a:b0:c6:3a:93:da:13:67:59:60:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 25 00:00:00 2023 GMT
            Not After : Jul 30 23:59:59 2023 GMT
        Subject: serialNumber=e497d222b6420a448c203687666083e32af36baa4e9912472dec41d682b41401, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:cb:45:b8:20:98:b4:95:33:30:00:9f:df:
                    10:98:b8:30:bb:28:49:33:7e:5e:a0:20:27:3b:80:
                    0f:22:11:a6:d9:29:72:51:72:08:88:a8:c3:db:ca:
                    2a:90:4f:cb:07:88:a0:26:51:dd:3c:a3:1b:c0:61:
                    98:f3:28:23:6a:9b:15:81:10:c1:e7:ce:20:a8:4d:
                    8d:22:1d:08:63:9c:07:6d:26:7f:e0:40:d9:e6:39:
                    e4:6d:16:d0:99:75:d0:a4:4d:5c:20:a9:58:1e:ae:
                    a6:2e:4d:e0:09:e4:28:71:d3:00:68:2d:ad:69:14:
                    09:ce:1b:bd:92:c3:da:6f:78:64:5c:3b:54:92:5d:
                    3a:be:20:f6:96:d1:04:dd:98:2b:82:31:86:49:99:
                    ba:ce:38:34:5b:b9:db:a9:34:e1:0b:77:89:8d:d9:
                    5b:d4:17:0c:de:8b:09:39:05:48:ad:30:9d:81:4f:
                    d6:9b:b2:25:b1:1e:f5:7d:18:db:e8:2e:18:80:79:
                    9d:6e:c4:57:cc:4b:75:a3:a6:5b:53:f7:d3:50:21:
                    bf:09:7c:f9:cd:ce:bb:a2:9a:73:e2:65:40:b5:f5:
                    c1:ae:c8:a7:5a:c6:31:c2:c6:9a:22:df:7b:79:58:
                    6f:a0:fc:02:c4:dc:2f:e8:70:de:80:40:86:2c:11:
                    10:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E6:71:C4:6A:B0:F4:D9:61:42:E2:5C:EE:66:02:35:2B:C4:20:AD
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cbb4f42f-cb94-4e28-a4ff-b63745bf2b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:22:5f:01:77:79:37:b3:7d:dd:5e:4a:93:6f:96:61:20:09:
         7d:21:56:a4:bf:fa:37:10:e8:e2:d8:37:0d:49:af:41:0e:57:
         d3:57:d1:a2:66:bf:e3:40:11:3a:47:f4:36:5a:42:3a:11:9c:
         c8:1f:de:eb:a9:a4:57:4b:b8:77:5d:04:85:da:ad:af:36:41:
         23:0b:a8:08:26:ce:cb:1f:fb:3e:c0:4b:45:3b:67:1b:ed:af:
         d8:b7:9a:c1:4c:a0:94:d2:db:f5:b1:f6:69:bd:92:16:95:fd:
         c7:2f:39:bf:d6:a9:b3:a6:6d:d1:2e:72:40:4b:5f:93:44:d4:
         ed:e1:60:1b:95:dc:8d:8c:54:43:77:da:27:a0:df:2a:5f:03:
         a9:08:66:0c:fb:4c:db:f0:c9:2e:53:66:20:8a:cb:0e:2f:26:
         e1:e8:f8:e8:6c:2c:21:d4:d9:08:a6:a2:c9:92:37:05:f9:e0:
         51:9c:e7:5a:db:db:94:fe:09:68:6a:19:8d:e1:c5:8a:af:6e:
         47:eb:d5:bc:13:30:b6:e5:1a:0c:e6:8c:9f:d8:24:26:17:b3:
         ff:b5:64:f5:41:31:b1:5a:9f:c5:94:e8:a1:c5:df:15:f4:bc:
         57:b6:58:92:4e:5d:ed:29:0f:ba:3f:9b:4c:42:6d:ec:55:ff:
         08:79:8e:52
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULGqtDxdbHT2vWrDGOpPaE2dZYIYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjI1MDAwMDAwWhcNMjMwNzMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNDk3ZDIyMmI2NDIwYTQ0OGMyMDM2ODc2NjYwODNlMzJh
ZjM2YmFhNGU5OTEyNDcyZGVjNDFkNjgyYjQxNDAxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1nctFuCCYtJUzMACf3xCYuDC7KEkzfl6gICc7gA8iEabZ
KXJRcgiIqMPbyiqQT8sHiKAmUd08oxvAYZjzKCNqmxWBEMHnziCoTY0iHQhjnAdt
Jn/gQNnmOeRtFtCZddCkTVwgqVgerqYuTeAJ5Chx0wBoLa1pFAnOG72Sw9pveGRc
O1SSXTq+IPaW0QTdmCuCMYZJmbrOODRbudupNOELd4mN2VvUFwzeiwk5BUitMJ2B
T9absiWxHvV9GNvoLhiAeZ1uxFfMS3WjpltT99NQIb8JfPnNzruimnPiZUC19cGu
yKdaxjHCxpoi33t5WG+g/ALE3C/ocN6AQIYsERChAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUn+ZxxGqw9NlhQuJc7mYCNSvEIK0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NiYjRmNDJmLWNiOTQtNGUyOC1hNGZmLWI2Mzc0NWJmMmI0OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIMiXwF3eTezfd1eSpNvlmEgCX0h
VqS/+jcQ6OLYNw1Jr0EOV9NX0aJmv+NAETpH9DZaQjoRnMgf3uuppFdLuHddBIXa
ra82QSMLqAgmzssf+z7AS0U7Zxvtr9i3msFMoJTS2/Wx9mm9khaV/ccvOb/WqbOm
bdEuckBLX5NE1O3hYBuV3I2MVEN32ieg3ypfA6kIZgz7TNvwyS5TZiCKyw4vJuHo
+OhsLCHU2QimosmSNwX54FGc51rb25T+CWhqGY3hxYqvbkfr1bwTMLblGgzmjJ/Y
JCYXs/+1ZPVBMbFan8WU6KHF3xX0vFe2WJJOXe0pD7o/m0xCbexV/wh5jlI=
-----END CERTIFICATE-----