Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4e1701c8-f220-4aa8-89e8-a0fde3dd9531.roa
File:                     4e1701c8-f220-4aa8-89e8-a0fde3dd9531.roa (raw, json)
Hash identifier:          MJ1RF/U/6CIiDABmVFYL6x3bSoHo3SJ6mowUcsk5IkY=
Subject key identifier:   8E:73:D7:F3:57:55:52:68:E4:DE:A9:2E:54:06:93:E2:02:CE:1F:1B
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       15CAFBDB8309A810844318A3035F2F2F8DDE2737
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4e1701c8-f220-4aa8-89e8-a0fde3dd9531.roa
Signing time:             Mon 18 Sep 2023 00:00:00 +0000
ROA not before:           Mon 18 Sep 2023 00:00:00 +0000
ROA not after:            Mon 23 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ca:fb:db:83:09:a8:10:84:43:18:a3:03:5f:2f:2f:8d:de:27:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 18 00:00:00 2023 GMT
            Not After : Oct 23 23:59:59 2023 GMT
        Subject: serialNumber=1e000f1c795fd1ff962fe1ad8dc7751f6f29d7ec0a694c17d2f88fa885971ded, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:17:4f:23:44:15:29:55:ec:33:5f:2a:39:18:
                    fe:e0:d7:1d:d3:b8:38:ac:cb:43:41:10:be:29:be:
                    bb:ef:39:84:2a:1f:14:65:eb:60:6a:c9:22:7b:a2:
                    31:ef:c4:f7:2a:16:67:a7:b0:c1:93:21:84:cd:11:
                    85:bd:09:1d:1e:ca:ae:91:2c:c0:3e:84:67:9f:9e:
                    4e:4b:32:20:cf:8d:b1:3d:2c:77:e5:c2:59:f6:04:
                    66:0c:31:ce:eb:a9:37:87:8c:68:2a:f0:1c:73:3a:
                    c0:94:c5:d8:85:84:a1:9f:92:05:56:fa:b5:13:ed:
                    bb:73:57:06:d1:2f:45:a2:56:57:f8:60:96:23:a9:
                    45:c3:d4:a5:fe:13:48:8f:0d:8f:f5:56:ec:0e:7c:
                    c8:be:c1:75:77:bd:7b:23:9b:56:df:55:3c:72:5a:
                    bc:b0:e5:75:00:3c:f9:70:25:2e:97:ba:0c:2e:75:
                    9e:59:9d:87:46:1c:76:1d:04:73:40:bb:a6:4e:30:
                    db:14:9d:00:07:d9:0a:a1:8e:55:f5:65:e8:58:9b:
                    ed:2d:83:ff:dc:5e:38:09:c9:f9:42:4b:29:23:35:
                    7a:ca:12:85:a0:a3:f9:cd:c7:19:10:b2:8a:45:10:
                    9f:91:70:9c:2d:46:13:10:9d:00:fb:50:31:ed:f7:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:73:D7:F3:57:55:52:68:E4:DE:A9:2E:54:06:93:E2:02:CE:1F:1B
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4e1701c8-f220-4aa8-89e8-a0fde3dd9531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:18:ca:21:3c:5e:46:c7:e3:e5:d3:01:8c:8b:79:04:97:63:
         2d:04:36:53:f8:07:96:3d:46:44:cc:98:97:01:f2:72:9a:20:
         44:35:f1:04:b1:fe:4b:23:12:99:6a:9f:de:76:94:bd:ef:af:
         9a:c1:7d:89:5f:82:aa:cc:76:18:cf:37:ef:00:33:3e:a4:a8:
         04:0b:cd:10:eb:de:b4:a3:96:17:2e:37:c7:5c:b5:57:94:fb:
         9c:17:fd:2d:f1:53:22:86:c4:1a:d9:96:8b:d6:e5:e4:ed:81:
         65:3e:25:f9:74:ac:1e:2b:d0:d7:0d:c6:86:67:b1:4c:67:e9:
         fa:ca:a8:c2:6d:fe:a2:61:12:f0:51:fb:61:1c:60:ff:a9:5a:
         33:2b:82:fb:2e:bf:22:ea:2b:ed:a6:3c:5f:01:96:a3:e4:0f:
         be:53:97:20:6f:03:94:0b:68:4c:44:f2:1d:96:15:84:cf:a0:
         00:92:71:e1:0a:23:7d:64:e1:04:ce:c6:f6:7f:37:ff:00:a5:
         b0:05:45:57:d7:12:f2:f6:ad:8b:bb:54:23:02:87:df:e3:38:
         f5:4e:ce:53:e3:7c:a0:6e:3e:44:04:6a:80:e6:f9:bd:34:ef:
         8d:54:78:34:1d:83:31:35:3c:aa:41:b2:51:51:cb:41:7a:7d:
         9a:b6:cb:cc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFcr724MJqBCEQxijA18vL43eJzcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTE4MDAwMDAwWhcNMjMxMDIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxZTAwMGYxYzc5NWZkMWZmOTYyZmUxYWQ4ZGM3NzUxZjZm
MjlkN2VjMGE2OTRjMTdkMmY4OGZhODg1OTcxZGVkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCgF08jRBUpVewzXyo5GP7g1x3TuDisy0NBEL4pvrvvOYQq
HxRl62BqySJ7ojHvxPcqFmensMGTIYTNEYW9CR0eyq6RLMA+hGefnk5LMiDPjbE9
LHflwln2BGYMMc7rqTeHjGgq8BxzOsCUxdiFhKGfkgVW+rUT7btzVwbRL0WiVlf4
YJYjqUXD1KX+E0iPDY/1VuwOfMi+wXV3vXsjm1bfVTxyWryw5XUAPPlwJS6Xugwu
dZ5ZnYdGHHYdBHNAu6ZOMNsUnQAH2QqhjlX1ZehYm+0tg//cXjgJyflCSykjNXrK
EoWgo/nNxxkQsopFEJ+RcJwtRhMQnQD7UDHt9843AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjnPX81dVUmjk3qkuVAaT4gLOHxswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzRlMTcwMWM4LWYyMjAtNGFhOC04OWU4LWEwZmRlM2RkOTUzMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAF0YyiE8XkbH4+XTAYyLeQSXYy0E
NlP4B5Y9RkTMmJcB8nKaIEQ18QSx/ksjEplqn952lL3vr5rBfYlfgqrMdhjPN+8A
Mz6kqAQLzRDr3rSjlhcuN8dctVeU+5wX/S3xUyKGxBrZlovW5eTtgWU+Jfl0rB4r
0NcNxoZnsUxn6frKqMJt/qJhEvBR+2EcYP+pWjMrgvsuvyLqK+2mPF8BlqPkD75T
lyBvA5QLaExE8h2WFYTPoACSceEKI31k4QTOxvZ/N/8ApbAFRVfXEvL2rYu7VCMC
h9/jOPVOzlPjfKBuPkQEaoDm+b00741UeDQdgzE1PKpBslFRy0F6fZq2y8w=
-----END CERTIFICATE-----