Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f49abac1-cc07-4470-baa9-c2b47436de4e.roa
File:                     f49abac1-cc07-4470-baa9-c2b47436de4e.roa (raw, json)
Hash identifier:          NDfOb8r/wPfR5MnLi+vxfzAA5l8Ec92RrvaQ9JvBDoM=
Subject key identifier:   D3:55:15:03:23:7B:67:65:F5:22:39:24:89:DE:A5:A8:C9:D0:0B:39
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3B6D6D1D2AD4528423B1AFA09AE17F49CFE3A9F1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f49abac1-cc07-4470-baa9-c2b47436de4e.roa
Signing time:             Tue 12 Sep 2023 00:00:00 +0000
ROA not before:           Tue 12 Sep 2023 00:00:00 +0000
ROA not after:            Tue 17 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6d:6d:1d:2a:d4:52:84:23:b1:af:a0:9a:e1:7f:49:cf:e3:a9:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 12 00:00:00 2023 GMT
            Not After : Oct 17 23:59:59 2023 GMT
        Subject: serialNumber=3c5e91991d165906877245a09ac698e32f46893d8b362d560aaf588036768a76, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:56:c9:a6:af:aa:bf:3e:42:67:3f:43:9b:
                    da:d1:dc:46:ce:f7:e4:85:2e:5b:e8:cc:00:a0:84:
                    ea:49:52:02:43:fd:24:48:3e:9a:4c:17:63:eb:89:
                    84:b8:14:37:15:ae:4f:a0:94:b5:17:d0:d4:a8:b8:
                    e4:f2:ff:b4:cd:5e:94:78:cb:33:a2:28:3c:4a:6e:
                    d3:40:37:f9:df:88:fe:0b:37:a6:37:da:ff:ff:a5:
                    8e:a4:8a:dd:21:99:bd:34:98:6e:c3:9b:4a:68:4a:
                    bd:a0:50:6d:ff:1c:22:40:a5:b9:eb:c1:14:1e:b0:
                    12:e1:87:d4:8f:05:86:fc:a9:22:8d:68:8c:f9:8e:
                    2a:db:d2:75:4a:8e:be:79:3e:70:b1:66:20:ec:a2:
                    8a:aa:89:27:53:98:e2:36:e4:b2:6a:22:1d:6b:50:
                    08:39:4c:59:0d:fb:a4:86:6e:43:78:6e:3e:e1:ad:
                    ee:b4:e0:e7:bf:c9:3b:41:0a:9c:79:35:d6:a1:3b:
                    73:32:6d:22:5b:c4:93:66:0e:cc:33:d4:92:5e:43:
                    b4:2b:56:eb:e3:09:f5:df:3d:fe:5d:c5:27:9d:1d:
                    05:56:6d:43:86:24:d4:8a:4d:c1:d6:72:c4:14:3d:
                    f6:d0:80:b0:9d:6d:0d:1b:e5:12:92:3b:b1:cf:92:
                    7f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:55:15:03:23:7B:67:65:F5:22:39:24:89:DE:A5:A8:C9:D0:0B:39
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f49abac1-cc07-4470-baa9-c2b47436de4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:35:c1:a4:58:5a:23:f3:60:cd:3f:42:0a:52:d1:c2:f1:97:
         23:9d:53:0a:6b:3b:cd:49:52:e5:65:d2:ae:52:c8:8c:ff:b0:
         2f:df:ec:87:67:a2:5f:53:fe:20:b3:e1:c0:0c:de:c9:3a:30:
         e2:ca:13:85:8f:07:b0:ee:f5:b2:a5:ca:c1:b3:03:82:f6:25:
         fc:67:fb:94:f9:2e:ac:ac:2d:a4:a7:86:b2:4c:1f:59:16:64:
         71:a2:7d:e0:75:6b:97:95:08:62:c9:4c:d9:7d:bf:0d:44:6f:
         db:72:cf:79:93:e7:66:68:81:09:73:07:bd:7a:26:25:51:5a:
         b3:aa:a1:4d:27:d8:0f:82:17:cb:29:1f:c8:f7:76:a7:3c:78:
         e6:ae:25:c9:1f:2c:63:1d:ce:75:0b:0e:f4:15:7d:d2:a6:f0:
         f6:6b:ef:62:e2:05:c0:b4:ff:ea:72:1f:8e:4c:41:48:fc:a5:
         29:40:fe:62:71:84:78:db:97:49:0e:c3:97:58:3b:ef:75:fb:
         05:fd:0d:fe:80:1b:fd:3d:49:1e:e1:27:b1:f4:84:c4:84:61:
         47:f9:dc:52:83:52:30:ca:7d:39:40:c3:41:96:bf:5f:23:c4:
         be:e8:c9:8a:39:45:74:f0:f3:92:2b:30:12:33:e6:45:24:54:
         a0:b8:59:b5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUO21tHSrUUoQjsa+gmuF/Sc/jqfEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTEyMDAwMDAwWhcNMjMxMDE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYzVlOTE5OTFkMTY1OTA2ODc3MjQ1YTA5YWM2OThlMzJm
NDY4OTNkOGIzNjJkNTYwYWFmNTg4MDM2NzY4YTc2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChf1bJpq+qvz5CZz9Dm9rR3EbO9+SFLlvozACghOpJUgJD
/SRIPppMF2PriYS4FDcVrk+glLUX0NSouOTy/7TNXpR4yzOiKDxKbtNAN/nfiP4L
N6Y32v//pY6kit0hmb00mG7Dm0poSr2gUG3/HCJApbnrwRQesBLhh9SPBYb8qSKN
aIz5jirb0nVKjr55PnCxZiDsooqqiSdTmOI25LJqIh1rUAg5TFkN+6SGbkN4bj7h
re604Oe/yTtBCpx5NdahO3MybSJbxJNmDswz1JJeQ7QrVuvjCfXfPf5dxSedHQVW
bUOGJNSKTcHWcsQUPfbQgLCdbQ0b5RKSO7HPkn+hAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU01UVAyN7Z2X1Ijkkid6lqMnQCzkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Y0OWFiYWMxLWNjMDctNDQ3MC1iYWE5LWMyYjQ3NDM2ZGU0ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACg1waRYWiPzYM0/QgpS0cLxlyOd
UwprO81JUuVl0q5SyIz/sC/f7Idnol9T/iCz4cAM3sk6MOLKE4WPB7Du9bKlysGz
A4L2Jfxn+5T5LqysLaSnhrJMH1kWZHGifeB1a5eVCGLJTNl9vw1Eb9tyz3mT52Zo
gQlzB716JiVRWrOqoU0n2A+CF8spH8j3dqc8eOauJckfLGMdznULDvQVfdKm8PZr
72LiBcC0/+pyH45MQUj8pSlA/mJxhHjbl0kOw5dYO+91+wX9Df6AG/09SR7hJ7H0
hMSEYUf53FKDUjDKfTlAw0GWv18jxL7oyYo5RXTw85IrMBIz5kUkVKC4WbU=
-----END CERTIFICATE-----