Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6895f3a8-161c-4541-9c5b-6fd5d4be2333.roa
File:                     6895f3a8-161c-4541-9c5b-6fd5d4be2333.roa (raw, json)
Hash identifier:          D004Y0970Gza5dZhof6BAvySG9EnwQUqL5uukPdwpmI=
Subject key identifier:   B5:B0:EB:CD:3A:0A:1D:96:C8:29:BC:66:AD:C7:37:39:FB:7E:2D:5D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       03533020F8570A73579D7A30FCDC64EF6A7306E4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6895f3a8-161c-4541-9c5b-6fd5d4be2333.roa
Signing time:             Tue 11 Jul 2023 00:00:00 +0000
ROA not before:           Tue 11 Jul 2023 00:00:00 +0000
ROA not after:            Tue 15 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:53:30:20:f8:57:0a:73:57:9d:7a:30:fc:dc:64:ef:6a:73:06:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 11 00:00:00 2023 GMT
            Not After : Aug 15 23:59:59 2023 GMT
        Subject: serialNumber=107afe60bda4d1e9612482b30f5a1d09a22993dd2457e364f4d761bee0e284b9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:c3:59:76:03:41:15:d4:5e:81:c7:9e:a6:
                    c0:00:44:fa:03:1b:c2:82:e3:ee:98:1c:02:1d:c8:
                    af:b4:fb:42:3d:be:45:0e:da:f6:41:0d:ed:65:3e:
                    97:73:c9:d6:fd:2b:60:c5:78:8e:08:32:76:b7:34:
                    b3:0b:ae:01:e4:58:af:46:44:52:2a:d8:dd:76:85:
                    81:db:45:ec:c3:d9:f9:21:7f:3e:a7:3d:b0:41:c8:
                    17:0f:e3:df:11:21:c6:b2:0b:a9:a4:83:8a:ec:ba:
                    e6:7d:81:57:5e:c0:ab:a6:1f:6a:68:4f:f5:08:b3:
                    30:3d:73:21:79:cf:3d:bd:9f:55:fb:2a:5e:34:2e:
                    f8:44:5a:39:28:21:c8:1a:a7:44:b2:14:f6:18:ae:
                    a0:7d:3a:22:70:31:9e:8a:68:d8:49:e8:96:3d:0d:
                    86:8e:1f:e9:08:85:50:a5:7f:ac:9d:8f:5f:dc:bc:
                    be:8d:d7:e3:83:94:36:c3:32:76:65:3c:04:bd:33:
                    f8:72:a2:43:65:e5:f0:f9:a9:45:96:b4:87:15:c9:
                    66:ee:a2:17:42:39:e2:52:25:4b:5c:7b:75:87:01:
                    6d:62:78:3a:c5:2f:bb:71:f0:7e:b5:a1:65:e4:f0:
                    91:d0:9f:2f:e4:64:bd:c3:61:2f:97:31:c8:d7:61:
                    96:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B0:EB:CD:3A:0A:1D:96:C8:29:BC:66:AD:C7:37:39:FB:7E:2D:5D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6895f3a8-161c-4541-9c5b-6fd5d4be2333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:e8:1a:73:2f:8a:eb:12:e3:b2:96:5b:13:bc:c9:f2:49:03:
         dd:4c:21:a5:10:dc:d4:72:42:b6:e2:42:a5:ab:67:f6:89:0c:
         45:d0:bf:5c:56:91:89:88:3b:bf:4b:8c:91:6c:c0:b2:a5:94:
         9c:06:47:c0:18:5d:5e:4f:73:41:59:35:e0:6d:a1:9b:8f:ca:
         3e:7f:88:61:d8:e2:d1:2b:eb:bc:08:60:0a:e4:84:31:a8:bf:
         6d:a8:4d:4d:70:27:1f:39:79:33:53:40:34:c1:82:bb:3d:a2:
         d5:1c:00:d1:95:de:e1:00:2c:7b:59:8d:fe:73:80:cb:6b:f0:
         99:50:97:4c:df:12:df:6d:ba:a5:25:77:a5:18:62:1c:a8:ad:
         82:19:6f:2a:14:9d:61:3f:71:46:0b:aa:f0:37:f8:10:b1:36:
         2e:27:2c:97:60:4e:51:ef:89:2e:e5:23:d9:cd:de:4b:4e:e6:
         a3:e6:66:a2:72:11:3d:a3:a8:7e:e4:43:27:0f:fe:26:0d:59:
         e2:f8:43:f1:bb:30:7c:20:26:f7:00:06:7c:91:48:30:a0:1e:
         c4:26:a6:cc:b9:e9:ee:39:10:c2:db:c9:0a:93:5c:b7:bf:9d:
         4f:00:3f:2a:c0:d8:1b:f1:5b:a8:02:9e:ef:d1:2c:0b:4e:4a:
         3c:b3:28:eb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUA1MwIPhXCnNXnXow/Nxk72pzBuQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzExMDAwMDAwWhcNMjMwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxMDdhZmU2MGJkYTRkMWU5NjEyNDgyYjMwZjVhMWQwOWEy
Mjk5M2RkMjQ1N2UzNjRmNGQ3NjFiZWUwZTI4NGI5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCz/MNZdgNBFdRegceepsAARPoDG8KC4+6YHAIdyK+0+0I9
vkUO2vZBDe1lPpdzydb9K2DFeI4IMna3NLMLrgHkWK9GRFIq2N12hYHbRezD2fkh
fz6nPbBByBcP498RIcayC6mkg4rsuuZ9gVdewKumH2poT/UIszA9cyF5zz29n1X7
Kl40LvhEWjkoIcgap0SyFPYYrqB9OiJwMZ6KaNhJ6JY9DYaOH+kIhVClf6ydj1/c
vL6N1+ODlDbDMnZlPAS9M/hyokNl5fD5qUWWtIcVyWbuohdCOeJSJUtce3WHAW1i
eDrFL7tx8H61oWXk8JHQny/kZL3DYS+XMcjXYZZ/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtbDrzToKHZbIKbxmrcc3Oft+LV0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzY4OTVmM2E4LTE2MWMtNDU0MS05YzViLTZmZDVkNGJlMjMzMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAD3oGnMviusS47KWWxO8yfJJA91M
IaUQ3NRyQrbiQqWrZ/aJDEXQv1xWkYmIO79LjJFswLKllJwGR8AYXV5Pc0FZNeBt
oZuPyj5/iGHY4tEr67wIYArkhDGov22oTU1wJx85eTNTQDTBgrs9otUcANGV3uEA
LHtZjf5zgMtr8JlQl0zfEt9tuqUld6UYYhyorYIZbyoUnWE/cUYLqvA3+BCxNi4n
LJdgTlHviS7lI9nN3ktO5qPmZqJyET2jqH7kQycP/iYNWeL4Q/G7MHwgJvcABnyR
SDCgHsQmpsy56e45EMLbyQqTXLe/nU8APyrA2BvxW6gCnu/RLAtOSjyzKOs=
-----END CERTIFICATE-----