Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dcc17e07-c652-4c10-9163-d94bef250f43.roa
File:                     dcc17e07-c652-4c10-9163-d94bef250f43.roa (raw, json)
Hash identifier:          akhF8YBafsF53P96Yybonq0Sw4tNMDe9AOYQgOybvdA=
Subject key identifier:   8F:A4:B7:CF:55:3D:83:41:94:55:8A:3B:7F:BD:86:E6:32:EC:D8:CD
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       54976D1FF8A035AC0A93D204D15EFADB60A3D559
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dcc17e07-c652-4c10-9163-d94bef250f43.roa
Signing time:             Mon 25 Sep 2023 00:00:00 +0000
ROA not before:           Mon 25 Sep 2023 00:00:00 +0000
ROA not after:            Mon 30 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:97:6d:1f:f8:a0:35:ac:0a:93:d2:04:d1:5e:fa:db:60:a3:d5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 25 00:00:00 2023 GMT
            Not After : Oct 30 23:59:59 2023 GMT
        Subject: serialNumber=488bc686d903ebcaedd8e610850ac7855a68ed459cf9f6f8a8811fd39056da1c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:0c:db:00:87:50:fc:68:43:5a:0a:cb:a2:
                    37:e2:ef:50:da:4d:1f:3b:63:8d:3f:89:e8:5c:7c:
                    ee:d6:11:7d:bc:36:37:98:ed:fb:bf:c2:62:79:57:
                    59:4d:03:ac:f1:6f:79:89:39:c8:1c:fa:c2:e1:2f:
                    42:25:8d:4c:70:c9:fa:0d:e6:80:5f:20:4a:04:e6:
                    dd:8e:53:61:dd:74:e6:5a:5d:e9:a5:70:42:e8:29:
                    1e:67:a8:38:c4:95:79:88:7c:09:b3:19:8f:b1:e7:
                    d2:93:a5:f9:35:aa:ea:39:08:0e:eb:a0:e2:6c:9c:
                    db:29:ce:c8:3e:fa:19:52:79:68:3f:dd:4a:17:66:
                    db:ff:81:a9:d0:e1:d3:44:4d:29:8b:c3:be:38:62:
                    c9:4e:6d:58:72:0d:f2:a2:00:f9:6c:4a:43:7a:27:
                    91:20:2f:d3:3c:88:f4:9c:97:81:75:6d:cf:a6:f9:
                    a7:15:2f:a1:2f:89:ef:2f:b7:ef:d9:aa:fb:d8:51:
                    12:d9:1f:41:76:de:bb:7f:82:1f:04:92:62:e8:b6:
                    e6:23:41:4b:96:35:82:eb:d4:e0:74:97:58:7a:88:
                    80:64:d7:1d:ba:4e:e1:c5:b2:c9:e4:81:c1:23:a8:
                    e1:2a:18:7c:5c:af:3d:38:2e:64:b2:b7:9b:8d:bb:
                    40:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A4:B7:CF:55:3D:83:41:94:55:8A:3B:7F:BD:86:E6:32:EC:D8:CD
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dcc17e07-c652-4c10-9163-d94bef250f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:63:d3:20:8f:28:84:d7:24:8a:43:d2:1a:63:c9:df:6e:fd:
         2c:84:74:cf:14:10:56:3b:53:63:d6:ba:3e:52:c7:8c:24:ce:
         26:e7:37:9e:15:f8:d5:d4:ab:72:42:b2:27:32:21:ca:73:04:
         b4:d7:a9:6e:14:6d:54:bf:a4:26:1c:d1:d9:eb:31:06:74:e3:
         ee:d1:f9:cb:4a:b1:5a:aa:72:0b:a5:bc:63:fe:95:c2:8b:fb:
         da:13:fc:b7:32:ca:9f:26:99:a9:55:a8:90:73:cf:da:b2:df:
         f1:0e:3c:58:51:a9:a3:d8:25:44:37:c6:9b:4b:62:d1:4e:19:
         f5:b9:72:67:e8:ee:d6:79:28:06:c3:f6:b5:a6:52:93:bd:96:
         d4:ee:9a:0d:35:de:bc:7a:7b:92:18:ec:a8:26:b1:b4:fb:b1:
         7b:a9:8b:80:10:f1:41:c9:ac:9c:e6:d6:a1:e3:67:fa:c1:9b:
         8a:dc:8a:8c:6c:58:ea:f2:f2:52:77:c7:ca:02:2d:3a:24:94:
         d1:b7:f9:87:a6:57:c0:86:b0:9f:f5:c0:37:64:d6:bb:4e:2a:
         6f:df:4a:2a:80:81:ee:13:c1:9f:8e:5d:0a:65:73:35:c8:57:
         ba:ac:ef:ca:61:f1:f1:d7:06:5e:62:b6:76:e5:76:3a:39:7e:
         79:a6:61:57
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVJdtH/igNawKk9IE0V7622Cj1VkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTI1MDAwMDAwWhcNMjMxMDMwMjM1OTU5
WjB6MUkwRwYDVQQFE0A0ODhiYzY4NmQ5MDNlYmNhZWRkOGU2MTA4NTBhYzc4NTVh
NjhlZDQ1OWNmOWY2ZjhhODgxMWZkMzkwNTZkYTFjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCkAzbAIdQ/GhDWgrLojfi71DaTR87Y40/iehcfO7WEX28
NjeY7fu/wmJ5V1lNA6zxb3mJOcgc+sLhL0IljUxwyfoN5oBfIEoE5t2OU2HddOZa
XemlcELoKR5nqDjElXmIfAmzGY+x59KTpfk1quo5CA7roOJsnNspzsg++hlSeWg/
3UoXZtv/ganQ4dNETSmLw744YslObVhyDfKiAPlsSkN6J5EgL9M8iPScl4F1bc+m
+acVL6Evie8vt+/ZqvvYURLZH0F23rt/gh8EkmLotuYjQUuWNYLr1OB0l1h6iIBk
1x26TuHFssnkgcEjqOEqGHxcrz04LmSyt5uNu0D7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUj6S3z1U9g0GUVYo7f72G5jLs2M0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2RjYzE3ZTA3LWM2NTItNGMxMC05MTYzLWQ5NGJlZjI1MGY0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFFj0yCPKITXJIpD0hpjyd9u/SyE
dM8UEFY7U2PWuj5Sx4wkzibnN54V+NXUq3JCsicyIcpzBLTXqW4UbVS/pCYc0dnr
MQZ04+7R+ctKsVqqcgulvGP+lcKL+9oT/Lcyyp8mmalVqJBzz9qy3/EOPFhRqaPY
JUQ3xptLYtFOGfW5cmfo7tZ5KAbD9rWmUpO9ltTumg013rx6e5IY7KgmsbT7sXup
i4AQ8UHJrJzm1qHjZ/rBm4rcioxsWOry8lJ3x8oCLToklNG3+YemV8CGsJ/1wDdk
1rtOKm/fSiqAge4TwZ+OXQplczXIV7qs78ph8fHXBl5itnbldjo5fnmmYVc=
-----END CERTIFICATE-----