Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ebc1a489-41ce-46c2-acfe-1b5dd6a7c1ec.roa
File:                     ebc1a489-41ce-46c2-acfe-1b5dd6a7c1ec.roa (raw, json)
Hash identifier:          t5w540bBcClMhpfkXS1X27wdmz3Q10ryJtIzXbfOHmc=
Subject key identifier:   34:41:B6:F3:3C:A8:90:6A:C9:98:84:B0:61:04:C5:8B:30:4F:2E:4A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       246B65ECDFE7DEB74A304B4B12EFE6344FC2ED84
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ebc1a489-41ce-46c2-acfe-1b5dd6a7c1ec.roa
Signing time:             Tue 19 Sep 2023 00:00:00 +0000
ROA not before:           Tue 19 Sep 2023 00:00:00 +0000
ROA not after:            Tue 24 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6b:65:ec:df:e7:de:b7:4a:30:4b:4b:12:ef:e6:34:4f:c2:ed:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 19 00:00:00 2023 GMT
            Not After : Oct 24 23:59:59 2023 GMT
        Subject: serialNumber=60ec26f947cdba583210b6768045a68e9c41e6cfea868b0faeb5c1dc7ef775bd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:ec:99:a5:49:96:67:4c:49:15:2e:23:d5:
                    88:c5:bf:d6:c7:93:44:42:78:1d:ad:d1:f5:0d:b2:
                    88:95:b9:1d:9f:0b:b2:04:df:82:81:4a:ec:97:b7:
                    d7:77:11:00:ad:19:85:06:b4:26:5b:7e:d4:0a:6a:
                    dd:ff:3a:ed:03:6e:a1:80:76:ec:0a:d2:62:8b:bb:
                    b3:3e:af:08:e0:45:d0:c8:fd:76:94:70:52:21:3f:
                    42:fa:ea:f2:71:12:f3:03:73:22:d4:77:41:45:d7:
                    aa:ea:9d:18:9a:8a:63:65:a1:1e:7e:3e:ac:38:6f:
                    99:ac:92:1e:0a:90:9c:cd:9d:84:e9:71:83:11:a9:
                    f9:25:26:33:81:3a:6b:f5:96:8d:7a:18:29:52:e6:
                    37:b4:82:ec:39:3c:c2:59:a2:6f:af:10:ce:58:89:
                    f6:c1:25:fa:54:a2:bb:fe:64:16:d2:e3:c2:02:37:
                    da:cc:38:1c:36:8d:3c:6b:2a:f0:b4:70:f9:6d:c5:
                    9e:3c:17:d0:9f:23:59:ec:7d:6c:db:8a:06:fe:94:
                    ca:95:24:ac:ed:ec:13:0b:ca:85:7f:ec:75:9b:f4:
                    8f:b1:02:13:e3:81:97:8e:6c:c6:e7:da:f5:d1:ce:
                    ac:6a:54:3e:1b:81:b3:71:aa:e4:2c:67:db:e6:38:
                    f6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:41:B6:F3:3C:A8:90:6A:C9:98:84:B0:61:04:C5:8B:30:4F:2E:4A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ebc1a489-41ce-46c2-acfe-1b5dd6a7c1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:31:fb:e3:5f:15:7e:8a:60:48:bc:0e:49:fb:3d:c8:f4:b2:
         2f:86:95:86:2a:50:ab:e7:e0:8f:0f:c6:9f:02:dc:48:a6:fb:
         f3:eb:b8:5f:b0:85:6d:ad:8d:15:83:8c:eb:ea:6a:5a:a1:2b:
         47:cc:ff:f2:f0:05:44:e1:72:41:44:13:99:56:fa:9d:dd:54:
         51:cd:23:0a:b9:c0:5e:8c:b8:a3:a0:40:16:77:19:9e:85:f2:
         45:7f:75:55:2f:9a:e7:fa:83:f2:b1:88:dd:f5:88:c6:46:7e:
         30:f0:98:65:08:4a:01:3c:d8:9e:36:3d:90:39:38:d3:db:f0:
         05:d5:d8:1c:bd:25:ee:36:53:45:45:97:77:73:a4:e1:41:86:
         ae:c2:8e:b7:1b:5a:47:e8:9b:da:56:a7:3e:60:b5:c4:8e:68:
         7b:3a:4c:32:2c:38:0c:d0:78:2f:2c:e1:a3:71:64:61:83:4c:
         f3:62:84:2f:b0:ff:7f:ee:90:f3:18:83:df:9f:e7:8b:ca:91:
         f3:8d:61:c2:d1:2a:cc:99:fc:0e:99:85:f6:75:31:c9:5e:49:
         13:f7:80:f6:30:24:10:24:e1:3a:34:88:74:93:00:2f:df:8e:
         e9:97:42:82:f9:8d:fc:39:c1:2a:88:8d:f8:24:c6:8e:30:ed:
         43:04:4d:96
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJGtl7N/n3rdKMEtLEu/mNE/C7YQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTE5MDAwMDAwWhcNMjMxMDI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MGVjMjZmOTQ3Y2RiYTU4MzIxMGI2NzY4MDQ1YTY4ZTlj
NDFlNmNmZWE4NjhiMGZhZWI1YzFkYzdlZjc3NWJkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7NuyZpUmWZ0xJFS4j1YjFv9bHk0RCeB2t0fUNsoiVuR2f
C7IE34KBSuyXt9d3EQCtGYUGtCZbftQKat3/Ou0DbqGAduwK0mKLu7M+rwjgRdDI
/XaUcFIhP0L66vJxEvMDcyLUd0FF16rqnRiaimNloR5+Pqw4b5mskh4KkJzNnYTp
cYMRqfklJjOBOmv1lo16GClS5je0guw5PMJZom+vEM5YifbBJfpUorv+ZBbS48IC
N9rMOBw2jTxrKvC0cPltxZ48F9CfI1nsfWzbigb+lMqVJKzt7BMLyoV/7HWb9I+x
AhPjgZeObMbn2vXRzqxqVD4bgbNxquQsZ9vmOPYXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNEG28zyokGrJmISwYQTFizBPLkowHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2ViYzFhNDg5LTQxY2UtNDZjMi1hY2ZlLTFiNWRkNmE3YzFlYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACUx++NfFX6KYEi8Dkn7Pcj0si+G
lYYqUKvn4I8Pxp8C3Eim+/PruF+whW2tjRWDjOvqalqhK0fM//LwBUThckFEE5lW
+p3dVFHNIwq5wF6MuKOgQBZ3GZ6F8kV/dVUvmuf6g/KxiN31iMZGfjDwmGUISgE8
2J42PZA5ONPb8AXV2By9Je42U0VFl3dzpOFBhq7CjrcbWkfom9pWpz5gtcSOaHs6
TDIsOAzQeC8s4aNxZGGDTPNihC+w/3/ukPMYg9+f54vKkfONYcLRKsyZ/A6ZhfZ1
McleSRP3gPYwJBAk4To0iHSTAC/fjumXQoL5jfw5wSqIjfgkxo4w7UMETZY=
-----END CERTIFICATE-----