Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d489284b-0d82-4c5b-8064-f6f9e1f161fa.roa
File:                     d489284b-0d82-4c5b-8064-f6f9e1f161fa.roa (raw, json)
Hash identifier:          ygLhDJ79MNmc6CS6L8Ng3eEIocTot9EvxRFtArFQWhk=
Subject key identifier:   82:6A:E1:1C:A6:07:7D:04:6E:1F:D0:E1:7F:9E:F6:B0:6D:A6:4E:66
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       58C5EE4C1DC0FBC668EFBE9458D0D91CDE5A9FAF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d489284b-0d82-4c5b-8064-f6f9e1f161fa.roa
Signing time:             Mon 11 Dec 2023 00:00:00 +0000
ROA not before:           Mon 11 Dec 2023 00:00:00 +0000
ROA not after:            Mon 15 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c5:ee:4c:1d:c0:fb:c6:68:ef:be:94:58:d0:d9:1c:de:5a:9f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 11 00:00:00 2023 GMT
            Not After : Jan 15 23:59:59 2024 GMT
        Subject: serialNumber=9144faec67b5caeeda2803546b88b03235cd0e072545108cec63fc9776f756f4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:44:50:cb:02:84:02:a2:d8:b2:4c:e6:ef:c4:
                    cc:89:b8:49:96:df:9a:65:96:1a:1c:7f:a1:4b:4e:
                    3d:3c:ad:48:bf:6a:1f:5e:5e:83:3c:ea:62:f0:a4:
                    43:35:68:bd:9b:c6:83:f4:02:8b:5d:b9:0e:f8:34:
                    14:ed:ce:9a:d1:cb:76:28:9d:29:ad:14:8d:df:1d:
                    1e:b7:08:7d:09:b1:27:59:32:0b:d0:b7:72:da:79:
                    08:05:12:f9:29:3f:37:20:6b:e0:d4:2e:77:9f:90:
                    d5:68:36:b0:b0:01:00:44:b4:a3:a0:4a:a2:39:8c:
                    23:23:b1:b2:65:08:e1:2d:db:16:9f:30:9d:84:22:
                    60:03:d9:dd:db:85:7e:44:5b:53:7f:2c:9e:22:43:
                    09:5b:9f:e7:ca:0f:c2:87:43:00:4d:ad:43:14:f6:
                    c1:17:db:5d:7a:5f:39:63:c8:87:53:b2:e2:c6:35:
                    67:ce:f2:4c:5a:64:61:b2:40:4d:10:38:7a:e7:07:
                    8c:81:04:95:85:67:6a:6e:fb:a1:ae:50:f4:33:0e:
                    29:74:6f:c7:a5:1c:15:b0:53:2e:ce:96:ec:50:8a:
                    4a:f0:12:6c:2e:05:25:a2:42:42:a7:17:b7:6f:00:
                    ef:ec:8c:39:58:38:28:39:dd:19:14:c9:36:c2:49:
                    f2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6A:E1:1C:A6:07:7D:04:6E:1F:D0:E1:7F:9E:F6:B0:6D:A6:4E:66
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d489284b-0d82-4c5b-8064-f6f9e1f161fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:46:11:3e:de:72:ca:68:e6:9d:57:61:ae:a7:20:5b:e0:3d:
         64:04:ad:d1:72:8f:13:ca:34:7e:e5:f1:44:93:a2:5a:4e:97:
         8d:ea:7e:61:73:7f:29:2b:7e:e7:24:c9:d8:98:57:01:4c:d3:
         fc:31:d1:98:61:fc:73:c8:67:42:fb:7a:63:63:9b:86:ff:6a:
         9d:99:58:ac:17:c8:2c:a7:bd:ba:cc:bf:9b:71:64:ab:d8:81:
         98:7e:0c:08:56:e8:95:90:99:af:4d:fb:0d:00:54:8d:00:7f:
         b8:7b:cd:48:4e:f4:72:26:65:73:d8:e7:d5:fd:90:94:08:21:
         7e:66:14:35:da:67:51:fc:09:29:4a:33:50:57:a9:cc:d3:33:
         7d:ce:69:13:e1:a9:5d:7f:96:72:72:2d:7b:d9:8e:1e:7f:48:
         64:4f:c6:92:0f:0f:cb:a2:b8:1a:aa:bd:74:1e:e0:9b:da:89:
         ce:e5:33:e3:85:4c:ef:64:77:41:6f:af:e0:5f:64:e8:af:25:
         c4:40:85:8f:23:2d:17:b4:bd:4e:a7:b9:95:47:40:2e:3d:25:
         2d:c6:ab:84:92:fc:b2:c9:c2:d4:c0:39:91:f2:b4:08:d0:04:
         4f:d8:6f:a4:2c:61:2c:d9:e8:36:59:d7:6d:b5:10:cd:55:7c:
         22:16:ba:20
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWMXuTB3A+8Zo776UWNDZHN5an68wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjExMDAwMDAwWhcNMjQwMTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A5MTQ0ZmFlYzY3YjVjYWVlZGEyODAzNTQ2Yjg4YjAzMjM1
Y2QwZTA3MjU0NTEwOGNlYzYzZmM5Nzc2Zjc1NmY0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDURFDLAoQCotiyTObvxMyJuEmW35pllhocf6FLTj08rUi/
ah9eXoM86mLwpEM1aL2bxoP0AotduQ74NBTtzprRy3YonSmtFI3fHR63CH0JsSdZ
MgvQt3LaeQgFEvkpPzcga+DULnefkNVoNrCwAQBEtKOgSqI5jCMjsbJlCOEt2xaf
MJ2EImAD2d3bhX5EW1N/LJ4iQwlbn+fKD8KHQwBNrUMU9sEX2116XzljyIdTsuLG
NWfO8kxaZGGyQE0QOHrnB4yBBJWFZ2pu+6GuUPQzDil0b8elHBWwUy7OluxQikrw
EmwuBSWiQkKnF7dvAO/sjDlYOCg53RkUyTbCSfLXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUgmrhHKYHfQRuH9Dhf572sG2mTmYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Q0ODkyODRiLTBkODItNGM1Yi04MDY0LWY2ZjllMWYxNjFmYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAC9GET7ecspo5p1XYa6nIFvgPWQE
rdFyjxPKNH7l8USTolpOl43qfmFzfykrfuckydiYVwFM0/wx0Zhh/HPIZ0L7emNj
m4b/ap2ZWKwXyCynvbrMv5txZKvYgZh+DAhW6JWQma9N+w0AVI0Af7h7zUhO9HIm
ZXPY59X9kJQIIX5mFDXaZ1H8CSlKM1BXqczTM33OaRPhqV1/lnJyLXvZjh5/SGRP
xpIPD8uiuBqqvXQe4Jvaic7lM+OFTO9kd0Fvr+BfZOivJcRAhY8jLRe0vU6nuZVH
QC49JS3Gq4SS/LLJwtTAOZHytAjQBE/Yb6QsYSzZ6DZZ1221EM1VfCIWuiA=
-----END CERTIFICATE-----