Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d59ebf7d-eef8-4c66-819c-7892fb6c399c.roa
File:                     d59ebf7d-eef8-4c66-819c-7892fb6c399c.roa (raw, json)
Hash identifier:          abrriUiJ0q2r0W2+rQkVtouMqfVbzLwJoAiyOsVgzI8=
Subject key identifier:   39:96:BD:22:D3:05:E7:43:BB:A1:6F:F6:03:37:1D:90:72:90:08:FA
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5F2F1C42A9E274B600A909D795D05DD7E141D02F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d59ebf7d-eef8-4c66-819c-7892fb6c399c.roa
Signing time:             Wed 06 Sep 2023 00:00:00 +0000
ROA not before:           Wed 06 Sep 2023 00:00:00 +0000
ROA not after:            Wed 11 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2f:1c:42:a9:e2:74:b6:00:a9:09:d7:95:d0:5d:d7:e1:41:d0:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep  6 00:00:00 2023 GMT
            Not After : Oct 11 23:59:59 2023 GMT
        Subject: serialNumber=36547c7ac96f0ca44c591981ee1fe6631c3d8f4e2905fc5747870a9f10dda668, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:cf:f8:37:9e:26:f0:04:2f:ba:62:dc:30:
                    c6:e5:58:f3:3e:93:09:62:22:27:34:2a:93:73:f0:
                    22:13:14:b9:9d:11:39:56:2e:3f:6c:22:9b:99:a0:
                    af:41:48:64:98:c5:51:84:5a:54:a0:58:25:3f:0b:
                    b2:0c:e2:2f:28:0d:3f:a6:22:87:f1:86:17:5c:ab:
                    d2:fd:b6:9a:4c:07:b5:eb:ff:02:06:70:4c:37:7c:
                    d3:11:00:8c:d7:d8:72:ae:22:f7:b9:07:50:ac:86:
                    89:50:1c:37:bd:d3:83:59:84:52:f2:c0:37:d5:0a:
                    5e:f5:5f:ca:eb:b2:2d:3f:95:2f:e9:8f:0b:f1:3f:
                    9e:8e:b0:35:8e:bf:ca:49:7f:77:8a:3f:aa:a5:c6:
                    13:a2:1a:36:40:c0:09:f6:dd:f3:01:e0:25:1b:09:
                    0e:ab:3c:c4:1f:fa:39:e6:70:82:07:be:fb:50:a4:
                    0e:8a:69:65:98:b9:27:e1:2a:1a:2e:4d:73:70:06:
                    6e:98:35:01:33:e6:22:16:44:d4:19:8d:fd:c2:42:
                    4a:83:77:56:9e:2d:fb:d7:de:7c:62:90:ce:b7:71:
                    17:35:9e:b0:cd:b9:1e:2d:a1:e4:37:87:b5:eb:8c:
                    d8:1d:2a:8b:05:63:15:4e:31:00:1a:d1:c8:74:57:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:96:BD:22:D3:05:E7:43:BB:A1:6F:F6:03:37:1D:90:72:90:08:FA
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d59ebf7d-eef8-4c66-819c-7892fb6c399c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:63:95:fb:f1:a7:ad:30:42:19:95:50:da:77:50:bb:55:b5:
         04:83:cf:21:fb:40:2d:1f:5c:96:ac:3e:c4:93:c5:1d:fc:10:
         9b:37:3e:47:8e:b1:86:81:f3:66:53:0e:bf:67:f4:5d:e7:2a:
         08:99:1d:e2:1a:1d:23:41:f3:b9:96:42:e0:14:b1:cc:1b:eb:
         5f:2f:f1:80:9f:41:94:ea:12:87:f6:9c:5d:00:bf:58:fc:c5:
         44:4f:cf:4b:9b:66:71:fc:b3:b3:00:b7:18:f3:a8:24:eb:58:
         e6:37:2a:cd:c5:e7:f0:19:83:c9:42:dd:23:36:2d:c7:84:b0:
         4c:dc:73:c6:59:77:28:3f:14:dd:39:74:a5:01:b8:c9:b4:6f:
         ae:4d:56:e6:bc:89:c9:b3:df:56:ea:43:61:00:eb:1b:51:5a:
         4b:ad:7c:e2:da:37:0b:30:a2:7d:07:cf:f1:a5:c3:d9:61:ee:
         b1:25:73:ef:33:d0:df:7f:5e:5c:bd:c1:a3:97:c3:a3:67:ea:
         00:cb:3d:ab:07:23:4b:5a:88:04:75:ea:28:79:58:3c:33:6e:
         f4:36:f1:8a:ba:21:6d:2f:29:51:9d:09:9c:70:1f:c9:fe:a4:
         d4:0c:39:45:e2:6a:0d:5f:dc:6f:de:8a:d7:ef:77:cf:ce:ef:
         ba:bc:0d:95
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXy8cQqnidLYAqQnXldBd1+FB0C8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTA2MDAwMDAwWhcNMjMxMDExMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNjU0N2M3YWM5NmYwY2E0NGM1OTE5ODFlZTFmZTY2MzFj
M2Q4ZjRlMjkwNWZjNTc0Nzg3MGE5ZjEwZGRhNjY4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnOM/4N54m8AQvumLcMMblWPM+kwliIic0KpNz8CITFLmd
ETlWLj9sIpuZoK9BSGSYxVGEWlSgWCU/C7IM4i8oDT+mIofxhhdcq9L9tppMB7Xr
/wIGcEw3fNMRAIzX2HKuIve5B1CsholQHDe904NZhFLywDfVCl71X8rrsi0/lS/p
jwvxP56OsDWOv8pJf3eKP6qlxhOiGjZAwAn23fMB4CUbCQ6rPMQf+jnmcIIHvvtQ
pA6KaWWYuSfhKhouTXNwBm6YNQEz5iIWRNQZjf3CQkqDd1aeLfvX3nxikM63cRc1
nrDNuR4toeQ3h7XrjNgdKosFYxVOMQAa0ch0V9IHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOZa9ItMF50O7oW/2AzcdkHKQCPowHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Q1OWViZjdkLWVlZjgtNGM2Ni04MTljLTc4OTJmYjZjMzk5Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGRjlfvxp60wQhmVUNp3ULtVtQSD
zyH7QC0fXJasPsSTxR38EJs3PkeOsYaB82ZTDr9n9F3nKgiZHeIaHSNB87mWQuAU
scwb618v8YCfQZTqEof2nF0Av1j8xURPz0ubZnH8s7MAtxjzqCTrWOY3Ks3F5/AZ
g8lC3SM2LceEsEzcc8ZZdyg/FN05dKUBuMm0b65NVua8icmz31bqQ2EA6xtRWkut
fOLaNwswon0Hz/Glw9lh7rElc+8z0N9/Xly9waOXw6Nn6gDLPasHI0taiAR16ih5
WDwzbvQ28Yq6IW0vKVGdCZxwH8n+pNQMOUXiag1f3G/eitfvd8/O77q8DZU=
-----END CERTIFICATE-----