Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e9934a2b-4c3b-4df7-bb94-cc3de2f7018a.roa
File:                     e9934a2b-4c3b-4df7-bb94-cc3de2f7018a.roa (raw, json)
Hash identifier:          gL+shpu4Qm9lGFkAMckW6WtDhticO6M/CKuZ+WX0vKw=
Subject key identifier:   56:FF:62:C2:8D:B1:B8:C3:76:BB:8D:3F:AA:BC:ED:28:0A:CD:BB:99
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6571F2B9296483716223E9B10629C2021F8BA640
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e9934a2b-4c3b-4df7-bb94-cc3de2f7018a.roa
Signing time:             Thu 21 Sep 2023 00:00:00 +0000
ROA not before:           Thu 21 Sep 2023 00:00:00 +0000
ROA not after:            Thu 26 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:71:f2:b9:29:64:83:71:62:23:e9:b1:06:29:c2:02:1f:8b:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 21 00:00:00 2023 GMT
            Not After : Oct 26 23:59:59 2023 GMT
        Subject: serialNumber=12339ebbfb9d8983d1bdbdbe0023ac8285e5e4353064cac1dea6b243f8d664b8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c1:e8:66:e3:58:9a:d1:ce:43:e6:7f:7c:54:
                    6c:e7:7d:64:d9:b7:21:b8:26:12:cf:80:0a:17:38:
                    46:ab:fe:22:fe:c0:10:6b:e2:51:e0:62:b9:b2:8c:
                    b4:21:37:1d:8a:83:ec:0e:6e:ee:90:ff:49:fe:3d:
                    34:63:1c:b8:11:a0:b5:44:33:e6:d4:25:0a:f0:7c:
                    c4:b1:08:d4:86:53:cd:d5:6d:94:f4:f4:b0:3c:6d:
                    b0:3e:8c:3a:a5:8b:8a:5b:c2:3d:2c:7e:92:13:a3:
                    00:4e:8c:10:45:80:23:2d:aa:c5:ec:60:34:e7:2d:
                    5d:9c:86:99:db:7f:3a:6a:9f:9f:d7:69:bb:f1:fb:
                    8f:72:84:81:c3:7e:24:28:a7:4e:fe:9e:12:7f:4e:
                    51:ef:06:a4:e2:c1:7e:fd:ab:47:38:5e:d6:07:ea:
                    7a:21:bb:d0:68:11:c0:a6:c0:58:63:d4:ef:76:eb:
                    57:7f:aa:e4:1f:c2:57:0d:2c:e1:c6:1e:9d:9a:1c:
                    03:e9:58:65:3c:79:5f:14:95:1f:f2:8b:95:7f:b8:
                    37:ae:f9:3e:d2:42:8a:f1:39:bd:e5:b9:67:7c:34:
                    dc:55:87:80:0d:d7:f6:74:63:d1:42:c9:15:ae:0b:
                    fc:15:0d:01:0e:14:c9:b3:3f:2c:e3:77:ea:43:c1:
                    2b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FF:62:C2:8D:B1:B8:C3:76:BB:8D:3F:AA:BC:ED:28:0A:CD:BB:99
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e9934a2b-4c3b-4df7-bb94-cc3de2f7018a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:af:1d:8a:50:89:ef:46:f6:50:19:0d:aa:74:9a:33:18:bb:
         71:24:a1:33:24:4c:b8:7c:1a:4e:31:b5:20:03:9d:26:02:3a:
         f2:28:e6:cc:7e:d4:12:83:6e:22:59:f5:d3:32:9f:e7:27:bb:
         4b:9e:5c:b0:98:2c:1a:c1:4f:75:b7:2e:9c:e9:8b:d8:45:6c:
         5d:7b:bb:81:b2:41:73:05:b5:71:e5:63:ef:e1:51:a3:33:1d:
         6a:48:23:82:80:8d:ab:00:19:69:b2:42:2b:c2:9d:c5:9d:69:
         c5:4a:52:ef:d3:d2:ae:5c:09:83:d8:05:0b:38:a9:a8:86:77:
         30:6f:9a:55:c6:fb:30:8a:69:09:2b:3f:bc:5b:4e:e2:e7:cc:
         89:7f:38:40:8c:b3:e4:34:f3:eb:c5:37:23:72:01:68:c8:e2:
         31:1c:19:35:e7:77:15:f6:ae:4c:fb:9f:ae:71:3d:e7:8b:43:
         96:69:26:27:d6:18:c0:cd:0d:fe:df:cf:84:8d:ed:fb:fc:6d:
         1b:9e:da:4a:5f:8d:52:82:a7:ae:66:f0:64:3e:db:27:94:53:
         a0:3d:d0:ba:4d:10:3c:c5:6d:3c:97:43:8a:78:4e:d8:0e:f9:
         2d:1e:e2:23:e3:6d:eb:2c:fd:db:ad:c6:a3:cf:1f:92:e6:40:
         50:93:35:2d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZXHyuSlkg3FiI+mxBinCAh+LpkAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTIxMDAwMDAwWhcNMjMxMDI2MjM1OTU5
WjB6MUkwRwYDVQQFE0AxMjMzOWViYmZiOWQ4OTgzZDFiZGJkYmUwMDIzYWM4Mjg1
ZTVlNDM1MzA2NGNhYzFkZWE2YjI0M2Y4ZDY2NGI4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCTwehm41ia0c5D5n98VGznfWTZtyG4JhLPgAoXOEar/iL+
wBBr4lHgYrmyjLQhNx2Kg+wObu6Q/0n+PTRjHLgRoLVEM+bUJQrwfMSxCNSGU83V
bZT09LA8bbA+jDqli4pbwj0sfpITowBOjBBFgCMtqsXsYDTnLV2chpnbfzpqn5/X
abvx+49yhIHDfiQop07+nhJ/TlHvBqTiwX79q0c4XtYH6nohu9BoEcCmwFhj1O92
61d/quQfwlcNLOHGHp2aHAPpWGU8eV8UlR/yi5V/uDeu+T7SQorxOb3luWd8NNxV
h4AN1/Z0Y9FCyRWuC/wVDQEOFMmzPyzjd+pDwSsZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVv9iwo2xuMN2u40/qrztKArNu5kwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2U5OTM0YTJiLTRjM2ItNGRmNy1iYjk0LWNjM2RlMmY3MDE4YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFWvHYpQie9G9lAZDap0mjMYu3Ek
oTMkTLh8Gk4xtSADnSYCOvIo5sx+1BKDbiJZ9dMyn+cnu0ueXLCYLBrBT3W3Lpzp
i9hFbF17u4GyQXMFtXHlY+/hUaMzHWpII4KAjasAGWmyQivCncWdacVKUu/T0q5c
CYPYBQs4qaiGdzBvmlXG+zCKaQkrP7xbTuLnzIl/OECMs+Q08+vFNyNyAWjI4jEc
GTXndxX2rkz7n65xPeeLQ5ZpJifWGMDNDf7fz4SN7fv8bRue2kpfjVKCp65m8GQ+
2yeUU6A90LpNEDzFbTyXQ4p4TtgO+S0e4iPjbess/dutxqPPH5LmQFCTNS0=
-----END CERTIFICATE-----