Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cd808b79-214d-4c4c-b14f-008f9b5c419a.roa
File:                     cd808b79-214d-4c4c-b14f-008f9b5c419a.roa (raw, json)
Hash identifier:          KVvJK19FisCHg6LWc80tB3v2bObew4TkGO2q5Zz2+sM=
Subject key identifier:   82:69:76:06:1A:A3:41:ED:A3:E7:68:42:F0:CA:D2:F7:ED:D6:A7:FC
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2B8C264DBC6DCEA4A04F211503A7C551A0F3020A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cd808b79-214d-4c4c-b14f-008f9b5c419a.roa
Signing time:             Sun 09 Jul 2023 00:00:00 +0000
ROA not before:           Sun 09 Jul 2023 00:00:00 +0000
ROA not after:            Sun 13 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8c:26:4d:bc:6d:ce:a4:a0:4f:21:15:03:a7:c5:51:a0:f3:02:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul  9 00:00:00 2023 GMT
            Not After : Aug 13 23:59:59 2023 GMT
        Subject: serialNumber=4a51b10381e2d922495f313c48e9d69b7b269c91d47eba8de504bf6b9b2c5d29, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:06:b4:7b:d1:9d:a5:c6:41:0f:b1:de:f4:
                    5b:89:9d:a3:07:34:3d:c8:a7:52:46:a8:ec:b5:38:
                    5e:3d:5d:34:66:1f:0e:69:b3:c1:0a:19:ba:e5:6e:
                    db:ae:04:91:b6:45:0d:c4:dc:57:b8:6f:23:87:5a:
                    03:31:05:cc:0b:4e:34:60:3d:75:bb:1d:85:f9:54:
                    1e:83:2e:54:3c:1d:13:ef:6c:12:f2:c1:ab:10:83:
                    66:95:b0:53:61:40:60:7a:0c:22:b3:88:30:01:2a:
                    98:73:3e:bf:1f:d2:ac:5c:37:c7:f6:19:ea:d1:0a:
                    f3:27:fa:d1:5a:7e:6a:e2:05:fe:12:65:44:1c:75:
                    d3:2a:02:5a:4a:4c:41:af:7b:c1:da:d1:d6:c8:b3:
                    84:80:53:9f:9f:22:b7:ce:bc:73:38:e4:a3:ff:72:
                    c7:31:57:db:b0:32:f0:ba:59:ce:c5:a2:6c:f6:3b:
                    3a:df:d9:a2:7e:71:0a:68:8b:25:69:d7:24:b1:9b:
                    b6:7a:44:31:85:79:aa:60:a6:69:68:55:af:ee:4a:
                    a6:73:a8:11:49:46:3a:d7:ef:91:68:32:9c:5b:f1:
                    ce:d3:41:7c:77:e2:b4:ab:8a:b7:33:fd:58:fb:b3:
                    25:ff:70:1a:ea:e2:3d:a4:a6:a6:bc:0a:79:7b:52:
                    8e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:69:76:06:1A:A3:41:ED:A3:E7:68:42:F0:CA:D2:F7:ED:D6:A7:FC
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cd808b79-214d-4c4c-b14f-008f9b5c419a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:a4:a9:14:2f:bc:2f:66:20:48:c8:8c:a5:ba:54:ef:c6:f9:
         60:75:81:26:e4:54:78:52:92:33:01:b2:2f:8c:11:de:92:27:
         a2:df:54:b6:f8:57:92:83:7a:bc:0b:b6:c8:b2:d7:75:5b:d3:
         ed:60:6e:dd:53:f5:a6:bc:ae:9f:43:01:57:69:63:68:df:ce:
         b7:b5:bc:13:3f:9f:2b:fb:33:af:fc:3e:8f:9c:b2:7c:54:38:
         e8:d5:b1:9b:e2:30:21:4a:7b:82:30:b5:0c:3f:23:76:db:1f:
         c7:bd:59:c1:87:19:f2:76:c6:42:2d:d6:45:40:d0:22:43:41:
         bb:24:82:df:18:98:b5:49:98:49:a6:44:df:09:68:e2:81:db:
         5f:9a:71:18:82:dd:58:e8:40:2d:59:6a:89:29:1e:5d:38:45:
         fa:70:24:2b:53:1e:6e:63:0b:c5:5e:04:7f:18:1f:f6:23:32:
         e1:98:7f:db:a2:f8:f0:9e:d0:9d:29:ce:69:45:81:26:b7:be:
         a8:48:7b:31:d0:36:e9:7d:2f:32:d9:29:b8:e8:ea:2b:0e:be:
         68:76:41:c7:2f:66:93:8e:18:70:10:7a:a6:f1:d9:ce:ae:fd:
         03:30:05:a0:14:89:6b:72:57:c5:e8:0f:af:37:6e:d2:5b:f5:
         eb:8e:94:ca
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUK4wmTbxtzqSgTyEVA6fFUaDzAgowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzA5MDAwMDAwWhcNMjMwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0YTUxYjEwMzgxZTJkOTIyNDk1ZjMxM2M0OGU5ZDY5Yjdi
MjY5YzkxZDQ3ZWJhOGRlNTA0YmY2YjliMmM1ZDI5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrdga0e9GdpcZBD7He9FuJnaMHND3Ip1JGqOy1OF49XTRm
Hw5ps8EKGbrlbtuuBJG2RQ3E3Fe4byOHWgMxBcwLTjRgPXW7HYX5VB6DLlQ8HRPv
bBLywasQg2aVsFNhQGB6DCKziDABKphzPr8f0qxcN8f2GerRCvMn+tFafmriBf4S
ZUQcddMqAlpKTEGve8Ha0dbIs4SAU5+fIrfOvHM45KP/cscxV9uwMvC6Wc7Fomz2
Ozrf2aJ+cQpoiyVp1ySxm7Z6RDGFeapgpmloVa/uSqZzqBFJRjrX75FoMpxb8c7T
QXx34rSrircz/Vj7syX/cBrq4j2kpqa8Cnl7Uo55AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUgml2BhqjQe2j52hC8MrS9+3Wp/wwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NkODA4Yjc5LTIxNGQtNGM0Yy1iMTRmLTAwOGY5YjVjNDE5YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAD6kqRQvvC9mIEjIjKW6VO/G+WB1
gSbkVHhSkjMBsi+MEd6SJ6LfVLb4V5KDerwLtsiy13Vb0+1gbt1T9aa8rp9DAVdp
Y2jfzre1vBM/nyv7M6/8Po+csnxUOOjVsZviMCFKe4IwtQw/I3bbH8e9WcGHGfJ2
xkIt1kVA0CJDQbskgt8YmLVJmEmmRN8JaOKB21+acRiC3VjoQC1ZaokpHl04Rfpw
JCtTHm5jC8VeBH8YH/YjMuGYf9ui+PCe0J0pzmlFgSa3vqhIezHQNul9LzLZKbjo
6isOvmh2QccvZpOOGHAQeqbx2c6u/QMwBaAUiWtyV8XoD683btJb9euOlMo=
-----END CERTIFICATE-----