Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/37587872-8c02-4058-a810-3dcf9724e3b7.roa
File:                     37587872-8c02-4058-a810-3dcf9724e3b7.roa (raw, json)
Hash identifier:          Zler9MNxI0f6wvLVBTWXck/S4ab1NlLElAxUjBS/v4Y=
Subject key identifier:   18:67:D8:F4:82:4D:8F:DB:E0:26:8E:C0:89:6E:2F:92:46:CA:27:E4
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       411C6CF7A749CE131C3DD17C0475FE025EE7C4AC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/37587872-8c02-4058-a810-3dcf9724e3b7.roa
Signing time:             Sun 24 Nov 2024 00:00:00 +0000
ROA not before:           Sun 24 Nov 2024 00:00:00 +0000
ROA not after:            Sun 29 Dec 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1c:6c:f7:a7:49:ce:13:1c:3d:d1:7c:04:75:fe:02:5e:e7:c4:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 24 00:00:00 2024 GMT
            Not After : Dec 29 23:59:59 2024 GMT
        Subject: serialNumber=9e3b4cab2cfd91e5e0c6fd1783afb2dd564c99d34aced2b758ff6c45d49a7d68, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2a:3c:e8:c1:43:02:da:5c:12:9d:58:ce:01:
                    e1:8e:2f:2f:24:06:f8:70:4c:ce:ca:55:f5:42:4b:
                    04:b4:5f:80:38:a2:be:34:2c:17:31:b8:e3:7d:d5:
                    63:c6:22:a7:fc:9d:0d:cc:9d:ff:7a:fa:62:3d:ac:
                    de:4a:8f:e2:66:d9:5b:ef:b6:b0:30:12:c3:0d:b8:
                    d9:2d:bd:14:49:c1:ac:55:8a:e4:62:ab:b7:dd:30:
                    b1:8c:ad:fa:2f:61:9c:8f:1e:f2:9c:b4:74:8e:a3:
                    33:ba:fb:68:63:c6:7a:5b:e3:4e:28:5d:84:56:b6:
                    05:d9:98:e9:fe:cb:6c:77:34:22:ff:ef:b3:6d:72:
                    dd:b5:2f:46:86:7d:9b:a8:cd:47:c3:85:3c:4b:d1:
                    e7:fd:50:91:67:0f:88:12:be:bb:30:de:bf:94:22:
                    6f:56:a3:04:e4:a4:22:e8:dd:e8:20:77:9e:de:e6:
                    ba:9c:c4:c3:d4:b7:cc:3a:c7:e0:3c:78:43:30:4a:
                    c2:72:65:14:c7:98:c6:1f:53:a9:65:2a:f3:c5:6c:
                    ab:75:cb:c9:6e:73:dd:67:24:49:f7:72:d5:22:70:
                    3d:81:bd:45:b3:4a:62:aa:ab:ce:81:e4:45:46:27:
                    7f:88:12:8e:51:61:ff:c3:a1:31:56:63:46:4b:13:
                    9e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:67:D8:F4:82:4D:8F:DB:E0:26:8E:C0:89:6E:2F:92:46:CA:27:E4
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/37587872-8c02-4058-a810-3dcf9724e3b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:05:ae:f8:1f:10:9c:ef:8a:ee:e3:bc:a8:05:48:a1:e4:be:
         0a:0d:50:35:88:1b:6a:99:bc:13:41:2f:e7:6e:d5:d0:d7:81:
         eb:5c:1b:f2:78:e1:c9:8b:90:00:0d:82:77:85:83:0e:c1:b0:
         de:82:bc:3d:18:3e:f3:fa:18:4d:19:82:79:5c:97:8b:94:46:
         91:67:0e:a4:2b:58:ea:b5:3b:79:d0:fd:95:5c:72:76:53:cd:
         7e:e1:33:08:dc:f4:c4:06:41:fc:13:f1:2d:f0:5e:4e:6a:57:
         1b:b3:47:6e:08:bc:27:80:6b:0a:61:dc:05:82:a7:5d:f1:a4:
         ce:b1:45:39:46:a8:34:73:60:6d:cf:fd:07:4a:f9:08:b0:8f:
         6b:be:70:5a:48:b2:ab:fb:b5:be:3e:48:54:cc:10:1d:c8:ba:
         5b:95:69:90:3f:9d:bd:bd:f4:a9:4c:4b:fa:f3:23:9a:77:11:
         15:86:84:49:51:47:b6:93:f8:97:9c:43:71:5d:2d:28:42:ff:
         e7:80:0a:b2:5e:04:b7:b0:10:00:18:02:35:ed:7b:d8:c7:44:
         5f:43:76:1d:f1:35:3a:15:df:42:1c:9c:8d:f3:ad:71:37:ec:
         49:d6:26:07:37:33:7d:04:b7:02:eb:1e:53:0f:80:ad:3a:df:
         2d:c9:e0:4b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQRxs96dJzhMcPdF8BHX+Al7nxKwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMTI0MDAwMDAwWhcNMjQxMjI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZTNiNGNhYjJjZmQ5MWU1ZTBjNmZkMTc4M2FmYjJkZDU2
NGM5OWQzNGFjZWQyYjc1OGZmNmM0NWQ0OWE3ZDY4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDiKjzowUMC2lwSnVjOAeGOLy8kBvhwTM7KVfVCSwS0X4A4
or40LBcxuON91WPGIqf8nQ3Mnf96+mI9rN5Kj+Jm2VvvtrAwEsMNuNktvRRJwaxV
iuRiq7fdMLGMrfovYZyPHvKctHSOozO6+2hjxnpb404oXYRWtgXZmOn+y2x3NCL/
77Ntct21L0aGfZuozUfDhTxL0ef9UJFnD4gSvrsw3r+UIm9WowTkpCLo3eggd57e
5rqcxMPUt8w6x+A8eEMwSsJyZRTHmMYfU6llKvPFbKt1y8luc91nJEn3ctUicD2B
vUWzSmKqq86B5EVGJ3+IEo5RYf/DoTFWY0ZLE56PAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGGfY9IJNj9vgJo7AiW4vkkbKJ+QwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzM3NTg3ODcyLThjMDItNDA1OC1hODEwLTNkY2Y5NzI0ZTNiNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGUFrvgfEJzviu7jvKgFSKHkvgoN
UDWIG2qZvBNBL+du1dDXgetcG/J44cmLkAANgneFgw7BsN6CvD0YPvP6GE0Zgnlc
l4uURpFnDqQrWOq1O3nQ/ZVccnZTzX7hMwjc9MQGQfwT8S3wXk5qVxuzR24IvCeA
awph3AWCp13xpM6xRTlGqDRzYG3P/QdK+Qiwj2u+cFpIsqv7tb4+SFTMEB3IuluV
aZA/nb299KlMS/rzI5p3ERWGhElRR7aT+JecQ3FdLShC/+eACrJeBLewEAAYAjXt
e9jHRF9Ddh3xNToV30IcnI3zrXE37EnWJgc3M30EtwLrHlMPgK063y3J4Es=
-----END CERTIFICATE-----