Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef2e7e35-8dda-40ca-af7b-656fb0e63720.roa
File:                     ef2e7e35-8dda-40ca-af7b-656fb0e63720.roa (raw, json)
Hash identifier:          +dBu/E9kcuIZFWACV/THMVVmhiMIi5YbdRHUrkow/to=
Subject key identifier:   69:C9:C6:14:67:5A:95:B9:FA:1F:09:2F:2A:33:E1:7C:3F:23:3D:5E
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2CC13616BBAD73D40B1E88E411EDD8292DD7A680
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef2e7e35-8dda-40ca-af7b-656fb0e63720.roa
Signing time:             Tue 15 Aug 2023 00:00:00 +0000
ROA not before:           Tue 15 Aug 2023 00:00:00 +0000
ROA not after:            Tue 19 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c1:36:16:bb:ad:73:d4:0b:1e:88:e4:11:ed:d8:29:2d:d7:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 15 00:00:00 2023 GMT
            Not After : Sep 19 23:59:59 2023 GMT
        Subject: serialNumber=d8bbc8fe7f8b29231579225ae1bfa8fe599bd1135ceece3765e667d925eb7a8d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:47:85:45:e4:5a:1a:62:b0:b9:5a:59:23:
                    9e:a5:30:09:5e:a8:46:4c:71:1b:08:83:aa:8f:39:
                    21:e3:03:07:df:53:5a:2c:ba:aa:a9:9a:70:d8:e0:
                    28:f1:b4:f3:2a:c5:01:99:cf:ca:c5:86:bc:34:06:
                    31:3b:bd:18:53:db:be:cd:3b:b2:c9:17:51:87:5c:
                    e9:11:9e:3f:2d:8d:8b:c4:db:fa:b2:19:e1:e7:e9:
                    25:90:4b:95:de:5b:ae:0a:8b:ff:c7:2f:9d:1f:08:
                    fb:ec:d2:0d:b9:3a:f9:16:d4:6e:4b:df:c7:23:28:
                    6f:c6:97:8d:14:2d:f5:27:80:9b:8c:ae:c9:d5:40:
                    44:4a:1d:2f:00:27:a0:b1:4d:41:03:a1:c3:19:ae:
                    d1:85:c0:85:8c:f7:9d:cd:82:79:93:42:c7:02:38:
                    de:e1:c8:2d:4e:25:3c:ff:47:a9:22:6c:06:07:76:
                    c8:66:dc:cd:89:cf:12:a5:89:9e:c3:48:2d:3e:69:
                    ee:ec:8e:c7:05:3e:95:f9:11:bc:29:9d:be:28:11:
                    fe:b2:7a:e9:8e:bf:7a:9a:0b:b4:20:51:39:51:cf:
                    f6:bc:c2:e4:4a:36:84:74:cf:8d:2c:bb:fc:36:e1:
                    8e:3b:d3:5c:00:c3:99:ff:dd:19:b8:ce:26:88:f3:
                    0b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C9:C6:14:67:5A:95:B9:FA:1F:09:2F:2A:33:E1:7C:3F:23:3D:5E
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef2e7e35-8dda-40ca-af7b-656fb0e63720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:a9:99:03:a5:26:1c:0d:63:38:08:50:55:66:3c:e3:e3:6d:
         7c:fd:47:2c:3d:a6:1b:a9:13:ee:38:bb:7f:ef:33:8b:10:b0:
         1e:64:8f:fb:29:30:1a:e6:43:fd:7b:7e:15:75:9c:87:41:2d:
         6f:86:df:c2:e4:d6:3f:c0:ac:29:c6:5c:83:2f:10:e9:da:4b:
         67:e9:8b:b3:f9:cd:09:cc:f0:f4:ba:3e:14:35:31:96:ad:12:
         52:1e:85:c5:96:f1:2c:6a:ce:4b:5d:6e:f6:2f:41:69:3c:77:
         7a:ff:b5:c1:4d:3d:5d:dc:eb:6c:6c:aa:50:88:c1:b9:16:d7:
         98:6d:83:4f:cb:2e:9c:98:3f:1c:1c:e5:ba:62:12:7a:52:00:
         9f:55:a7:a2:c4:f9:45:ac:5f:dc:34:77:59:e9:10:7d:56:ea:
         9e:1a:11:03:73:fb:20:1c:e9:1c:ae:2a:9e:ad:e0:74:ae:f2:
         fe:4b:ea:4f:90:d8:91:6d:13:8d:51:c2:4b:73:61:65:7a:f5:
         5f:d5:ed:24:65:8c:bc:ef:d9:68:30:8f:13:3a:67:32:6a:e7:
         d4:6c:79:c9:16:0d:e7:8b:6c:4a:b7:98:79:a9:3a:c9:df:ca:
         6c:10:d5:f1:f7:8a:03:00:cd:eb:a4:d4:b4:95:45:df:87:9d:
         04:71:2a:1f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULME2Frutc9QLHojkEe3YKS3XpoAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODE1MDAwMDAwWhcNMjMwOTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BkOGJiYzhmZTdmOGIyOTIzMTU3OTIyNWFlMWJmYThmZTU5
OWJkMTEzNWNlZWNlMzc2NWU2NjdkOTI1ZWI3YThkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpN0eFReRaGmKwuVpZI56lMAleqEZMcRsIg6qPOSHjAwff
U1osuqqpmnDY4CjxtPMqxQGZz8rFhrw0BjE7vRhT277NO7LJF1GHXOkRnj8tjYvE
2/qyGeHn6SWQS5XeW64Ki//HL50fCPvs0g25OvkW1G5L38cjKG/Gl40ULfUngJuM
rsnVQERKHS8AJ6CxTUEDocMZrtGFwIWM953NgnmTQscCON7hyC1OJTz/R6kibAYH
dshm3M2JzxKliZ7DSC0+ae7sjscFPpX5Ebwpnb4oEf6yeumOv3qaC7QgUTlRz/a8
wuRKNoR0z40su/w24Y4701wAw5n/3Rm4ziaI8ws9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUacnGFGdalbn6HwkvKjPhfD8jPV4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2VmMmU3ZTM1LThkZGEtNDBjYS1hZjdiLTY1NmZiMGU2MzcyMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJWpmQOlJhwNYzgIUFVmPOPjbXz9
Ryw9phupE+44u3/vM4sQsB5kj/spMBrmQ/17fhV1nIdBLW+G38Lk1j/ArCnGXIMv
EOnaS2fpi7P5zQnM8PS6PhQ1MZatElIehcWW8SxqzktdbvYvQWk8d3r/tcFNPV3c
62xsqlCIwbkW15htg0/LLpyYPxwc5bpiEnpSAJ9Vp6LE+UWsX9w0d1npEH1W6p4a
EQNz+yAc6RyuKp6t4HSu8v5L6k+Q2JFtE41RwktzYWV69V/V7SRljLzv2WgwjxM6
ZzJq59RseckWDeeLbEq3mHmpOsnfymwQ1fH3igMAzeuk1LSVRd+HnQRxKh8=
-----END CERTIFICATE-----