Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc343d39-5432-46d6-8b43-32fbf285773d.roa
File:                     cc343d39-5432-46d6-8b43-32fbf285773d.roa (raw, json)
Hash identifier:          L4kGbYV7HDrR07TSdfscK096ohRt6oaeBRsze8JbQnI=
Subject key identifier:   41:0A:BA:D1:0F:44:EA:5F:49:BA:E6:71:61:EB:B9:F6:B4:B2:D7:4A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5410A48C21B5376E85D9F0D43D1DE7CE81EC9BBA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc343d39-5432-46d6-8b43-32fbf285773d.roa
Signing time:             Sat 30 Sep 2023 00:00:00 +0000
ROA not before:           Sat 30 Sep 2023 00:00:00 +0000
ROA not after:            Sat 04 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:10:a4:8c:21:b5:37:6e:85:d9:f0:d4:3d:1d:e7:ce:81:ec:9b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 30 00:00:00 2023 GMT
            Not After : Nov  4 23:59:59 2023 GMT
        Subject: serialNumber=d93a0d10abf1e4a1c62901effd054870722c4f1aa9e044646e5486bc8105033d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:b5:09:f9:9b:a6:8b:e2:48:a0:09:ca:d3:
                    97:1c:41:0d:0b:d3:48:a0:f9:0a:97:d7:fb:39:12:
                    be:e8:72:f8:ac:ed:9a:27:62:c8:c4:99:4f:89:56:
                    c8:f4:d7:0a:75:54:a3:09:0b:be:46:b6:84:77:25:
                    60:1a:85:5f:36:75:25:9a:74:15:2f:02:ad:2b:d3:
                    b9:43:7b:7a:4b:ef:97:97:3e:83:a2:25:0f:f4:e6:
                    da:84:7e:fb:72:6f:c6:b5:1f:a3:20:6f:3f:83:01:
                    82:08:07:e8:35:6b:0d:45:65:9f:a6:d7:03:39:00:
                    1a:36:7d:2c:f7:15:f0:16:68:dc:8e:3d:be:fe:fe:
                    a3:97:ff:e5:bb:5e:d6:cb:2e:3a:8b:e0:f0:28:fc:
                    20:ff:d1:f5:d0:c2:d5:73:c6:57:c2:84:a4:0e:89:
                    d4:e8:2d:41:ff:2e:e0:82:1b:bc:dd:6e:ee:66:e8:
                    53:a6:3c:c3:a7:f7:56:50:c3:ae:53:ae:4b:d5:9d:
                    5c:53:6c:9f:1d:4e:d4:af:5f:0e:78:95:00:22:94:
                    6b:21:06:ff:0e:db:f0:8d:e0:2e:9d:1a:b5:56:90:
                    12:80:ee:83:55:c2:21:e4:bf:78:91:54:e8:21:8b:
                    72:d4:5b:ef:4e:b6:16:f2:6c:55:3f:09:b6:0d:fe:
                    0b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0A:BA:D1:0F:44:EA:5F:49:BA:E6:71:61:EB:B9:F6:B4:B2:D7:4A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc343d39-5432-46d6-8b43-32fbf285773d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:07:86:42:71:87:d4:4e:d1:8f:c4:89:9c:1e:ad:e5:d1:ab:
         27:ff:74:22:ff:55:51:3a:dc:af:9d:81:29:68:6e:89:3e:c6:
         c9:f3:04:51:6e:b4:24:4d:65:0b:17:0a:9e:5f:c9:04:b5:43:
         6b:31:d9:72:71:90:81:67:16:08:15:c3:6b:0c:d9:5d:42:1e:
         4f:53:95:9b:04:bc:b4:62:be:6c:d3:9d:e0:a1:e4:6d:aa:49:
         14:37:39:68:bf:5d:b3:39:cc:d1:10:f8:c6:2a:13:87:7f:c1:
         0f:4a:44:51:2d:55:2a:de:52:14:e9:db:f3:91:5b:9b:28:56:
         0b:9f:8b:2e:17:04:03:37:5f:4c:4e:85:25:92:39:f3:2f:b1:
         9a:a2:72:c0:c7:87:77:fa:a4:e8:13:8f:a3:05:f9:b9:3e:18:
         2a:84:79:be:3e:3d:f3:0a:19:07:0e:d4:da:5a:d7:3e:e7:98:
         2b:e1:ae:57:92:ff:16:9d:ac:8a:ca:90:6d:2f:b0:ee:d4:63:
         28:8b:85:e5:c3:08:3c:04:f4:f1:8f:eb:41:a4:7d:7a:ba:39:
         dc:03:55:9a:33:38:11:96:0c:11:64:ee:b1:cd:6e:28:82:ad:
         11:3c:9e:34:6a:b9:9b:43:b8:a7:7f:59:c9:60:87:c9:65:10:
         74:62:32:c5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVBCkjCG1N26F2fDUPR3nzoHsm7owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTMwMDAwMDAwWhcNMjMxMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkOTNhMGQxMGFiZjFlNGExYzYyOTAxZWZmZDA1NDg3MDcy
MmM0ZjFhYTllMDQ0NjQ2ZTU0ODZiYzgxMDUwMzNkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCc57UJ+Zumi+JIoAnK05ccQQ0L00ig+QqX1/s5Er7ocvis
7ZonYsjEmU+JVsj01wp1VKMJC75GtoR3JWAahV82dSWadBUvAq0r07lDe3pL75eX
PoOiJQ/05tqEfvtyb8a1H6Mgbz+DAYIIB+g1aw1FZZ+m1wM5ABo2fSz3FfAWaNyO
Pb7+/qOX/+W7XtbLLjqL4PAo/CD/0fXQwtVzxlfChKQOidToLUH/LuCCG7zdbu5m
6FOmPMOn91ZQw65TrkvVnVxTbJ8dTtSvXw54lQAilGshBv8O2/CN4C6dGrVWkBKA
7oNVwiHkv3iRVOghi3LUW+9OthbybFU/CbYN/guPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUQQq60Q9E6l9JuuZxYeu59rSy10owHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NjMzQzZDM5LTU0MzItNDZkNi04YjQzLTMyZmJmMjg1NzczZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEYHhkJxh9RO0Y/EiZwereXRqyf/
dCL/VVE63K+dgSlobok+xsnzBFFutCRNZQsXCp5fyQS1Q2sx2XJxkIFnFggVw2sM
2V1CHk9TlZsEvLRivmzTneCh5G2qSRQ3OWi/XbM5zNEQ+MYqE4d/wQ9KRFEtVSre
UhTp2/ORW5soVgufiy4XBAM3X0xOhSWSOfMvsZqicsDHh3f6pOgTj6MF+bk+GCqE
eb4+PfMKGQcO1Npa1z7nmCvhrleS/xadrIrKkG0vsO7UYyiLheXDCDwE9PGP60Gk
fXq6OdwDVZozOBGWDBFk7rHNbiiCrRE8njRquZtDuKd/Wclgh8llEHRiMsU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:20 2024 by rpki-client on console-ams.rpki-client.org