Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e2eeb861-6e64-4a0b-acea-70ee112e3816.roa
File:                     e2eeb861-6e64-4a0b-acea-70ee112e3816.roa (raw, json)
Hash identifier:          3Mq2VRE1zKrp84Bv6DaBQekVBZfHfkPUqgMg6ucK37g=
Subject key identifier:   08:37:33:79:E1:E5:F9:2C:60:E4:4B:42:35:D2:89:F4:71:4E:75:B0
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       790D9139B06C44DF54588C564B026D3AEE81747E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e2eeb861-6e64-4a0b-acea-70ee112e3816.roa
Signing time:             Mon 04 Dec 2023 00:00:00 +0000
ROA not before:           Mon 04 Dec 2023 00:00:00 +0000
ROA not after:            Mon 08 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0d:91:39:b0:6c:44:df:54:58:8c:56:4b:02:6d:3a:ee:81:74:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec  4 00:00:00 2023 GMT
            Not After : Jan  8 23:59:59 2024 GMT
        Subject: serialNumber=85bab2649e5aaf92f255bce1e3528b7ac09decec02cbc06ba4d29b80f79e7a2e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:1c:be:e6:90:76:08:8e:89:c8:65:33:c2:
                    e3:99:4d:2b:73:61:eb:9e:2c:9a:ca:0b:ff:82:77:
                    9b:c3:55:ec:1a:94:73:10:34:cd:22:4b:cf:3b:96:
                    b2:36:1d:df:2e:04:a2:46:f9:57:8a:43:b0:5e:61:
                    e4:db:f3:2e:c5:69:fa:bd:10:c9:2c:09:18:05:93:
                    8a:d6:2d:44:dd:87:35:15:98:49:ad:b9:63:b0:75:
                    eb:f6:13:9a:f6:47:80:0b:00:d4:89:dd:b9:88:08:
                    a8:8a:cf:1d:0d:d8:fb:21:d7:83:a7:ff:c1:df:07:
                    b9:ac:37:a5:77:af:3a:a1:52:e2:0b:43:d0:68:68:
                    74:1f:31:82:77:12:c4:7e:0c:e4:75:16:93:71:b6:
                    ac:0a:82:37:67:30:5f:e1:73:86:a1:30:24:9d:13:
                    21:c0:98:e2:7f:61:de:92:a5:cc:dc:c0:81:ca:93:
                    74:36:ca:01:c1:1a:1c:18:31:fd:ae:ae:ce:34:db:
                    be:b8:de:40:4c:e1:6e:df:51:47:cd:df:ce:f7:e1:
                    6c:d6:38:a6:69:b1:8d:b1:9d:cc:e6:63:6d:53:a6:
                    3a:8d:b7:37:65:c3:0a:33:fd:5a:d1:3b:62:79:23:
                    3c:da:0c:5b:77:84:73:fe:cf:65:39:7c:69:cb:5f:
                    0c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:37:33:79:E1:E5:F9:2C:60:E4:4B:42:35:D2:89:F4:71:4E:75:B0
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e2eeb861-6e64-4a0b-acea-70ee112e3816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:00:e1:bf:2c:2b:df:c7:da:73:bf:36:48:bc:6e:01:54:f3:
         9e:8a:e7:0f:b4:c8:2d:99:69:bd:c4:48:84:d0:b0:a0:3b:21:
         3a:f3:2c:a6:f3:87:b9:07:25:97:d3:2b:da:11:4a:4f:0b:17:
         2a:54:08:84:5e:7d:f9:f3:85:2d:a3:f9:76:6b:1d:16:91:3c:
         e6:88:23:0f:e2:23:3f:de:99:bc:d0:93:1a:86:5b:ea:da:92:
         db:8e:bb:b4:79:d8:ca:5a:53:39:a7:90:7a:8b:48:bc:7e:91:
         04:ea:71:a1:c5:fb:01:a8:4c:20:4f:ac:1c:6f:d4:4a:6d:9e:
         92:c2:78:93:cc:fa:70:57:5c:b8:58:60:a0:74:a5:97:8f:d9:
         7e:17:93:a3:7a:40:25:c4:88:37:62:32:ff:22:39:3b:f0:4b:
         de:df:39:c7:a4:ed:d6:28:17:d9:45:f6:ff:3f:e7:e1:2f:46:
         2b:8b:8a:f9:06:1d:47:19:fe:d0:d7:b0:5e:b1:2b:37:39:a1:
         be:83:39:33:c6:03:6a:25:28:df:df:a4:c5:c4:6c:87:c9:2c:
         52:76:3a:a6:2a:a9:d4:25:ed:ba:4e:78:fd:02:e6:b2:f9:c2:
         6e:2c:94:53:31:bc:5d:4d:0b:0b:a9:3a:56:ff:f7:69:0f:17:
         2b:c3:6f:05
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeQ2RObBsRN9UWIxWSwJtOu6BdH4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjA0MDAwMDAwWhcNMjQwMTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A4NWJhYjI2NDllNWFhZjkyZjI1NWJjZTFlMzUyOGI3YWMw
OWRlY2VjMDJjYmMwNmJhNGQyOWI4MGY3OWU3YTJlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+Ihy+5pB2CI6JyGUzwuOZTStzYeueLJrKC/+Cd5vDVewa
lHMQNM0iS887lrI2Hd8uBKJG+VeKQ7BeYeTb8y7Fafq9EMksCRgFk4rWLUTdhzUV
mEmtuWOwdev2E5r2R4ALANSJ3bmICKiKzx0N2Psh14On/8HfB7msN6V3rzqhUuIL
Q9BoaHQfMYJ3EsR+DOR1FpNxtqwKgjdnMF/hc4ahMCSdEyHAmOJ/Yd6SpczcwIHK
k3Q2ygHBGhwYMf2urs4027643kBM4W7fUUfN38734WzWOKZpsY2xnczmY21TpjqN
tzdlwwoz/VrRO2J5IzzaDFt3hHP+z2U5fGnLXwzfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUCDczeeHl+Sxg5EtCNdKJ9HFOdbAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2UyZWViODYxLTZlNjQtNGEwYi1hY2VhLTcwZWUxMTJlMzgxNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEIA4b8sK9/H2nO/Nki8bgFU856K
5w+0yC2Zab3ESITQsKA7ITrzLKbzh7kHJZfTK9oRSk8LFypUCIReffnzhS2j+XZr
HRaRPOaIIw/iIz/embzQkxqGW+raktuOu7R52MpaUzmnkHqLSLx+kQTqcaHF+wGo
TCBPrBxv1EptnpLCeJPM+nBXXLhYYKB0pZeP2X4Xk6N6QCXEiDdiMv8iOTvwS97f
Ocek7dYoF9lF9v8/5+EvRiuLivkGHUcZ/tDXsF6xKzc5ob6DOTPGA2olKN/fpMXE
bIfJLFJ2OqYqqdQl7bpOeP0C5rL5wm4slFMxvF1NCwupOlb/92kPFyvDbwU=
-----END CERTIFICATE-----