Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e64a78fc-ecdb-410b-9bf5-fb2af8bb48aa.roa
File:                     e64a78fc-ecdb-410b-9bf5-fb2af8bb48aa.roa (raw, json)
Hash identifier:          8m8k1svwPj7JC7/csgJGiMEvqN20OYygFm28zPqLhSg=
Subject key identifier:   15:5E:9F:78:FB:FD:A2:E3:21:3D:52:18:C3:50:1F:47:C1:43:F6:22
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2988E0F91994F7822A1B8AC547260ADA209CF66D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e64a78fc-ecdb-410b-9bf5-fb2af8bb48aa.roa
Signing time:             Tue 14 Nov 2023 00:00:00 +0000
ROA not before:           Tue 14 Nov 2023 00:00:00 +0000
ROA not after:            Tue 19 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:88:e0:f9:19:94:f7:82:2a:1b:8a:c5:47:26:0a:da:20:9c:f6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 14 00:00:00 2023 GMT
            Not After : Dec 19 23:59:59 2023 GMT
        Subject: serialNumber=25240bed8c14fc8e08c1580fdc6a376fc202b3f5e215e7971647e188f65c636c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:3d:62:c0:0b:10:b6:aa:56:2a:ba:44:b2:
                    9d:0f:4a:f8:61:79:c2:9d:56:03:4d:3f:d9:da:08:
                    8f:c2:3e:eb:63:67:0a:b5:3b:7e:c9:5d:e8:4e:3d:
                    03:7f:3e:37:3a:d2:bc:fe:fc:66:da:1b:b2:46:e2:
                    35:80:ee:33:3b:34:a2:fa:61:3c:95:17:f2:9f:c5:
                    3a:20:3a:48:38:ef:d0:82:0a:e4:29:ac:11:71:34:
                    a6:5c:65:79:9a:9a:0a:39:01:c6:5b:8f:e9:4f:73:
                    4c:08:64:c5:65:ca:36:b4:b8:1b:ae:aa:c5:6f:7d:
                    cb:dd:7b:59:3e:6b:20:ae:c6:d7:59:21:06:5c:27:
                    e0:35:45:28:fd:87:44:16:91:62:e9:59:34:3f:d2:
                    23:b7:f9:6e:08:14:c6:23:b2:fc:26:2c:f2:d7:61:
                    d4:70:b1:a8:5a:e2:df:b3:5e:fa:05:54:ca:f4:89:
                    0b:f4:8e:e7:6b:d2:32:40:a2:18:fc:3f:de:12:5c:
                    b2:82:c8:ed:0e:d4:83:fb:57:4f:4a:53:15:ad:b2:
                    ce:27:f1:b3:9e:53:f2:8d:3e:f5:22:1e:c8:a0:b8:
                    f3:03:c7:1f:c9:39:26:98:e7:4e:36:d7:5f:a2:0c:
                    f7:cb:ff:10:c6:ee:19:25:d5:f7:a4:c0:c3:9a:86:
                    b1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5E:9F:78:FB:FD:A2:E3:21:3D:52:18:C3:50:1F:47:C1:43:F6:22
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e64a78fc-ecdb-410b-9bf5-fb2af8bb48aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:94:d1:63:4f:16:3e:46:39:a5:72:c7:aa:75:1c:6f:d7:0a:
         38:5d:00:6b:1b:98:e0:47:8d:5d:f4:18:ac:30:ee:55:07:42:
         3b:6b:3d:0e:05:42:1e:41:02:81:aa:52:ac:0d:86:ab:a3:14:
         cc:45:92:ed:ae:2d:4d:93:3c:3d:16:44:4c:7b:52:52:dc:05:
         00:56:03:06:02:48:77:bf:24:63:a8:f3:b7:75:99:6c:38:3f:
         6b:7f:c7:a6:3e:2b:f0:75:48:7d:a3:32:c0:b2:e8:80:cf:5d:
         73:d4:71:bd:d8:c7:8d:36:12:75:e9:54:0b:10:79:72:e0:ab:
         88:2e:15:3b:48:aa:51:4e:cd:8c:8e:e4:9f:78:6a:84:f1:03:
         20:04:3a:9d:b4:27:32:6a:9e:db:23:94:67:26:86:e5:2f:bb:
         88:f3:97:ed:64:3c:a1:e3:18:62:42:99:ca:a2:23:7e:56:4f:
         9d:02:b4:a3:b6:c4:08:54:e8:94:56:2a:60:09:ee:79:26:25:
         c2:f9:27:ee:0f:a9:e9:5b:e2:21:4a:ab:05:e3:3e:b7:ca:16:
         cc:62:95:0f:23:d6:20:e0:8c:94:49:86:23:82:6e:53:c2:a3:
         9d:34:c0:68:29:96:bf:66:a2:86:66:81:fb:d8:a7:0c:a4:e1:
         f2:0f:00:c2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKYjg+RmU94IqG4rFRyYK2iCc9m0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTE0MDAwMDAwWhcNMjMxMjE5MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNTI0MGJlZDhjMTRmYzhlMDhjMTU4MGZkYzZhMzc2ZmMy
MDJiM2Y1ZTIxNWU3OTcxNjQ3ZTE4OGY2NWM2MzZjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoVj1iwAsQtqpWKrpEsp0PSvhhecKdVgNNP9naCI/CPutj
Zwq1O37JXehOPQN/Pjc60rz+/GbaG7JG4jWA7jM7NKL6YTyVF/KfxTogOkg479CC
CuQprBFxNKZcZXmamgo5AcZbj+lPc0wIZMVlyja0uBuuqsVvfcvde1k+ayCuxtdZ
IQZcJ+A1RSj9h0QWkWLpWTQ/0iO3+W4IFMYjsvwmLPLXYdRwsaha4t+zXvoFVMr0
iQv0judr0jJAohj8P94SXLKCyO0O1IP7V09KUxWtss4n8bOeU/KNPvUiHsiguPMD
xx/JOSaY504211+iDPfL/xDG7hkl1fekwMOahrGDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUFV6fePv9ouMhPVIYw1AfR8FD9iIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2U2NGE3OGZjLWVjZGItNDEwYi05YmY1LWZiMmFmOGJiNDhhYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAESU0WNPFj5GOaVyx6p1HG/XCjhd
AGsbmOBHjV30GKww7lUHQjtrPQ4FQh5BAoGqUqwNhqujFMxFku2uLU2TPD0WREx7
UlLcBQBWAwYCSHe/JGOo87d1mWw4P2t/x6Y+K/B1SH2jMsCy6IDPXXPUcb3Yx402
EnXpVAsQeXLgq4guFTtIqlFOzYyO5J94aoTxAyAEOp20JzJqntsjlGcmhuUvu4jz
l+1kPKHjGGJCmcqiI35WT50CtKO2xAhU6JRWKmAJ7nkmJcL5J+4Pqelb4iFKqwXj
PrfKFsxilQ8j1iDgjJRJhiOCblPCo500wGgplr9mooZmgfvYpwyk4fIPAMI=
-----END CERTIFICATE-----