Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce1416a6-00df-4d2a-9fd4-3a50a4f2bab0.roa
File:                     ce1416a6-00df-4d2a-9fd4-3a50a4f2bab0.roa (raw, json)
Hash identifier:          ezBGW+X7Zo8cKywDuOtbnvmg3egZz6SHEOZJOJNfuv4=
Subject key identifier:   C9:33:25:C8:69:2A:65:D5:98:B3:04:99:65:BD:C0:02:27:EC:69:AE
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5C0254FACC8F0B51D1B896EB62B8A6F3E177754D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce1416a6-00df-4d2a-9fd4-3a50a4f2bab0.roa
Signing time:             Sun 30 Jul 2023 00:00:00 +0000
ROA not before:           Sun 30 Jul 2023 00:00:00 +0000
ROA not after:            Sun 03 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:02:54:fa:cc:8f:0b:51:d1:b8:96:eb:62:b8:a6:f3:e1:77:75:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 30 00:00:00 2023 GMT
            Not After : Sep  3 23:59:59 2023 GMT
        Subject: serialNumber=a52313b00d09237306d9e89fd04569657735666d85a133d548993f9dfc357719, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c1:6f:15:57:dc:ee:1a:cd:5b:19:61:23:be:
                    50:39:16:6e:8a:df:03:f9:d1:8f:09:6b:38:64:11:
                    68:3f:36:c5:22:ed:9c:2b:e8:ca:dd:59:c3:a1:84:
                    1a:2d:45:78:82:2f:49:cc:d6:6a:73:da:df:ab:e2:
                    71:e6:03:ab:31:ba:3e:c8:df:55:8a:1c:be:1e:e5:
                    11:27:3a:10:01:9e:ad:8b:b6:f1:2c:34:90:f6:d4:
                    7e:f0:c9:b4:68:38:a2:86:79:5e:47:0a:35:80:7d:
                    6e:8e:ed:dc:02:02:0b:6f:4e:cd:14:6b:ea:97:58:
                    e7:b8:aa:bb:15:9a:1c:ad:24:6a:b5:56:86:0d:ca:
                    4a:9c:c1:4f:29:ab:fd:9c:b4:c3:2c:37:07:1f:cd:
                    82:e1:28:55:0f:49:41:0f:56:89:c5:22:c8:6d:7a:
                    44:85:4f:3c:2a:cb:b1:26:06:66:de:a3:be:16:15:
                    12:2e:f2:df:82:7a:68:ee:a7:37:69:aa:0b:ca:8f:
                    d1:d4:5b:f5:30:bc:b9:f8:4a:f4:f3:6d:91:89:e6:
                    8b:a7:57:40:1a:47:ea:20:ef:eb:45:35:63:1d:ac:
                    9c:d5:f1:50:cd:ac:2d:4b:56:ba:06:62:bd:4f:48:
                    08:e6:04:a8:ba:8d:92:50:50:99:62:e2:8e:4c:b2:
                    cd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:33:25:C8:69:2A:65:D5:98:B3:04:99:65:BD:C0:02:27:EC:69:AE
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce1416a6-00df-4d2a-9fd4-3a50a4f2bab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:84:d0:4f:85:c4:28:61:e0:d4:5d:df:38:79:32:82:25:d6:
         f6:1a:e2:13:49:6c:12:5f:c6:ec:ba:88:24:a0:a2:d4:d7:82:
         3f:88:b1:23:72:89:e6:a1:ef:7c:e3:bf:74:77:fe:f5:03:cf:
         a0:74:62:71:71:f8:f1:61:51:0f:58:41:a2:2a:ed:ce:09:a0:
         43:f3:e5:29:14:f6:c3:ec:d9:c1:42:73:04:fb:89:e4:f6:ea:
         cb:e4:ea:c9:78:48:84:69:91:28:84:96:ce:b8:3d:5f:e0:ea:
         99:88:b0:c7:13:7d:bf:e7:c2:fd:24:da:af:a6:94:db:69:a1:
         0d:46:ec:cd:70:85:62:e5:5a:c2:ef:7b:a4:af:46:17:83:56:
         f7:d4:1f:ff:a2:2d:83:51:e4:b3:23:2f:83:02:2b:5e:a8:8e:
         16:0f:14:ec:5f:7d:a9:ce:8b:4b:c4:1d:88:3c:87:98:3a:4f:
         26:27:75:53:a9:2a:be:39:bc:09:f1:9a:9d:59:04:9b:c9:09:
         5a:b0:47:ae:99:a5:da:ab:65:f0:a5:61:9d:bf:11:88:49:a0:
         89:c8:00:f2:a5:d6:0b:66:09:62:7f:08:17:2b:00:85:a4:ed:
         fb:09:58:10:38:58:fb:3e:2b:d1:ed:29:46:2e:6a:fb:dd:c3:
         50:1c:cd:46
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXAJU+syPC1HRuJbrYrim8+F3dU0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzMwMDAwMDAwWhcNMjMwOTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNTIzMTNiMDBkMDkyMzczMDZkOWU4OWZkMDQ1Njk2NTc3
MzU2NjZkODVhMTMzZDU0ODk5M2Y5ZGZjMzU3NzE5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWwW8VV9zuGs1bGWEjvlA5Fm6K3wP50Y8JazhkEWg/NsUi
7Zwr6MrdWcOhhBotRXiCL0nM1mpz2t+r4nHmA6sxuj7I31WKHL4e5REnOhABnq2L
tvEsNJD21H7wybRoOKKGeV5HCjWAfW6O7dwCAgtvTs0Ua+qXWOe4qrsVmhytJGq1
VoYNykqcwU8pq/2ctMMsNwcfzYLhKFUPSUEPVonFIshtekSFTzwqy7EmBmbeo74W
FRIu8t+CemjupzdpqgvKj9HUW/UwvLn4SvTzbZGJ5ounV0AaR+og7+tFNWMdrJzV
8VDNrC1LVroGYr1PSAjmBKi6jZJQUJli4o5Mss2dAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUyTMlyGkqZdWYswSZZb3AAifsaa4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NlMTQxNmE2LTAwZGYtNGQyYS05ZmQ0LTNhNTBhNGYyYmFiMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJmE0E+FxChh4NRd3zh5MoIl1vYa
4hNJbBJfxuy6iCSgotTXgj+IsSNyieah73zjv3R3/vUDz6B0YnFx+PFhUQ9YQaIq
7c4JoEPz5SkU9sPs2cFCcwT7ieT26svk6sl4SIRpkSiEls64PV/g6pmIsMcTfb/n
wv0k2q+mlNtpoQ1G7M1whWLlWsLve6SvRheDVvfUH/+iLYNR5LMjL4MCK16ojhYP
FOxffanOi0vEHYg8h5g6TyYndVOpKr45vAnxmp1ZBJvJCVqwR66ZpdqrZfClYZ2/
EYhJoInIAPKl1gtmCWJ/CBcrAIWk7fsJWBA4WPs+K9HtKUYuavvdw1AczUY=
-----END CERTIFICATE-----