Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f6c3769a-df93-425f-a5d2-5e9c5825c636.roa
File:                     f6c3769a-df93-425f-a5d2-5e9c5825c636.roa (raw, json)
Hash identifier:          +seQtajNv955eJqI4hjGD9g2kQRZfqn7QG5Ca3ZH25U=
Subject key identifier:   1D:E9:14:BA:6E:27:08:BF:E9:A7:15:5F:EB:5C:01:2A:B2:9B:D4:D1
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       185ADEB37DCB46F376F3349BFB2F0AFE067FAD8D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f6c3769a-df93-425f-a5d2-5e9c5825c636.roa
Signing time:             Thu 02 Nov 2023 00:00:00 +0000
ROA not before:           Thu 02 Nov 2023 00:00:00 +0000
ROA not after:            Thu 07 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5a:de:b3:7d:cb:46:f3:76:f3:34:9b:fb:2f:0a:fe:06:7f:ad:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov  2 00:00:00 2023 GMT
            Not After : Dec  7 23:59:59 2023 GMT
        Subject: serialNumber=947facb7661ab828691ffd7e4538048146457fe7b516910286134b5bd01338ee, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:33:17:5c:12:28:51:72:4c:ff:aa:10:fd:7a:
                    5b:65:95:aa:3f:f8:aa:75:10:72:b5:c5:2a:88:05:
                    82:1c:00:81:5a:ac:f6:ce:2d:a1:03:ae:b3:42:79:
                    30:95:ae:4a:60:56:89:ab:2d:c3:84:0f:6d:44:78:
                    a2:69:a6:a3:72:51:b8:3f:c3:bf:79:3a:1f:09:49:
                    bc:d0:33:0a:e3:6b:fb:6f:38:aa:53:ee:b9:d3:95:
                    86:07:f7:f8:ac:67:16:57:3e:13:7f:8a:bd:2d:b0:
                    68:69:22:af:f1:61:3e:0c:e8:e0:2a:f0:3d:98:88:
                    1c:92:e9:34:8e:72:02:b7:23:9f:5f:fd:6e:03:56:
                    c4:ad:4d:9f:48:38:3f:50:87:66:4c:67:a8:2b:ab:
                    c2:e2:d4:c4:13:a1:52:0c:c6:6d:b4:cd:ee:83:5f:
                    c0:12:3b:84:4c:36:d0:5e:00:f8:26:c3:42:f1:ab:
                    7b:9f:f4:21:75:48:16:97:e3:5e:b8:e6:20:7b:90:
                    14:c9:5b:74:bd:27:07:1e:60:6b:25:f3:e8:30:45:
                    fd:3a:69:6e:5e:41:ce:aa:ed:ec:e2:9d:66:8c:26:
                    ad:f8:82:9b:02:44:54:10:7a:2f:0a:23:d9:0a:b9:
                    ee:0b:b1:c8:c7:31:86:d3:26:12:85:c3:12:f0:5b:
                    d2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E9:14:BA:6E:27:08:BF:E9:A7:15:5F:EB:5C:01:2A:B2:9B:D4:D1
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f6c3769a-df93-425f-a5d2-5e9c5825c636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:3b:b9:da:fe:aa:cc:1e:5d:5f:c0:a2:ad:ea:88:94:2d:7a:
         02:cc:5f:f9:5c:93:24:4b:4e:4b:ea:bf:12:bd:26:b9:38:38:
         d8:84:5b:86:ce:a3:87:0e:b7:d5:25:73:6f:a9:0c:42:71:7f:
         06:8f:cb:32:ee:85:ff:5e:ae:ac:0d:38:12:0c:5e:41:98:e5:
         94:16:fa:8d:4c:2d:38:0d:03:d0:58:1e:ec:fb:f2:17:b6:9e:
         3c:fb:05:5c:04:9e:93:55:aa:74:7e:f5:ed:49:6e:36:22:38:
         90:5d:3e:47:a0:2e:e8:c1:6f:19:fd:3c:fd:e3:ba:0f:18:2e:
         8c:ff:13:21:c9:ad:a6:ba:5f:e9:34:f4:1a:25:81:ec:db:d9:
         93:66:95:86:60:d0:e9:8a:65:dd:39:68:3f:26:3e:13:fe:66:
         c8:10:42:6b:f4:5e:4b:74:e2:bd:34:71:9e:09:b2:6b:bc:1c:
         a6:cc:85:e6:f4:f6:e1:4f:92:88:db:db:17:90:40:fd:27:c5:
         4a:06:90:75:42:bd:60:fd:a2:3f:11:6b:99:85:58:4b:7d:d4:
         e7:47:bb:07:1b:11:2d:40:ac:72:ea:d5:53:b4:f2:66:1e:ae:
         0f:f5:d2:e9:9d:15:d3:ce:ab:f9:60:76:43:9d:79:2a:86:89:
         10:f2:e6:a4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGFres33LRvN28zSb+y8K/gZ/rY0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTAyMDAwMDAwWhcNMjMxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NDdmYWNiNzY2MWFiODI4NjkxZmZkN2U0NTM4MDQ4MTQ2
NDU3ZmU3YjUxNjkxMDI4NjEzNGI1YmQwMTMzOGVlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDmMxdcEihRckz/qhD9eltllao/+Kp1EHK1xSqIBYIcAIFa
rPbOLaEDrrNCeTCVrkpgVomrLcOED21EeKJppqNyUbg/w795Oh8JSbzQMwrja/tv
OKpT7rnTlYYH9/isZxZXPhN/ir0tsGhpIq/xYT4M6OAq8D2YiByS6TSOcgK3I59f
/W4DVsStTZ9IOD9Qh2ZMZ6grq8Li1MQToVIMxm20ze6DX8ASO4RMNtBeAPgmw0Lx
q3uf9CF1SBaX41645iB7kBTJW3S9JwceYGsl8+gwRf06aW5eQc6q7ezinWaMJq34
gpsCRFQQei8KI9kKue4LscjHMYbTJhKFwxLwW9IpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHekUum4nCL/ppxVf61wBKrKb1NEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Y2YzM3NjlhLWRmOTMtNDI1Zi1hNWQyLTVlOWM1ODI1YzYzNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAc7udr+qsweXV/Aoq3qiJQtegLM
X/lckyRLTkvqvxK9Jrk4ONiEW4bOo4cOt9Ulc2+pDEJxfwaPyzLuhf9erqwNOBIM
XkGY5ZQW+o1MLTgNA9BYHuz78he2njz7BVwEnpNVqnR+9e1JbjYiOJBdPkegLujB
bxn9PP3jug8YLoz/EyHJraa6X+k09Bolgezb2ZNmlYZg0OmKZd05aD8mPhP+ZsgQ
Qmv0Xkt04r00cZ4Jsmu8HKbMheb09uFPkojb2xeQQP0nxUoGkHVCvWD9oj8Ra5mF
WEt91OdHuwcbES1ArHLq1VO08mYerg/10umdFdPOq/lgdkOdeSqGiRDy5qQ=
-----END CERTIFICATE-----