Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/586a811c-3204-4d62-90a7-53f341a96fec.roa
File:                     586a811c-3204-4d62-90a7-53f341a96fec.roa (raw, json)
Hash identifier:          8za2DeW3FxjYh+MB9Xwy/1LcOLOLdTmqefXd/FtMi/k=
Subject key identifier:   E7:5D:76:B0:6B:B9:F2:61:F0:63:0C:35:67:C2:EF:1F:70:52:43:4B
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1C336763CB4E67E37B0B527B1C9D0A269CD82161
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/586a811c-3204-4d62-90a7-53f341a96fec.roa
Signing time:             Tue 23 Apr 2024 00:00:00 +0000
ROA not before:           Tue 23 Apr 2024 00:00:00 +0000
ROA not after:            Tue 28 May 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:33:67:63:cb:4e:67:e3:7b:0b:52:7b:1c:9d:0a:26:9c:d8:21:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr 23 00:00:00 2024 GMT
            Not After : May 28 23:59:59 2024 GMT
        Subject: serialNumber=8b17e7a13424904e3ee0e95cf62a50d3c20dbb8f763ccce19f4ad3c96ebd9c40, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:ea:3c:34:9f:b0:b5:99:1e:0c:5b:0d:00:
                    2a:50:6d:ea:2b:d9:5b:b6:05:11:e1:cc:34:8f:1e:
                    5f:06:2e:8d:40:d7:b3:28:a8:c6:7c:76:11:73:93:
                    63:fe:9f:e0:f0:5f:88:bd:fa:f7:66:37:ce:1f:13:
                    6a:fa:71:5f:79:63:67:a4:e8:43:c8:2a:52:12:f1:
                    09:ad:46:56:74:da:32:d3:e3:b2:96:61:8d:7e:9f:
                    b1:5f:0f:65:91:30:e0:39:a2:61:4a:80:27:de:5c:
                    79:50:2f:6b:2b:47:38:1a:ce:49:3d:1f:1c:85:b9:
                    71:f3:7d:ca:8f:e9:18:e5:18:81:62:28:55:6f:2e:
                    2b:87:72:40:b7:a4:e3:56:92:19:c0:da:f3:c8:0a:
                    3a:d0:fc:9e:64:30:0c:a3:0f:55:eb:4c:aa:77:97:
                    c5:8a:b5:0f:cc:3e:0d:e2:ef:2d:28:42:cf:d3:cc:
                    26:f6:4d:a4:bb:82:5f:be:93:63:dc:e0:00:73:c0:
                    f1:31:cb:70:d0:cb:37:ab:fc:f9:16:5b:4a:98:b5:
                    fe:b5:1c:86:6e:87:08:77:3d:3c:10:2f:49:ad:df:
                    52:32:be:38:e8:bb:0d:a0:22:9e:00:f7:f8:af:05:
                    99:69:fe:30:af:8b:bf:93:79:e5:a9:49:82:48:d7:
                    26:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5D:76:B0:6B:B9:F2:61:F0:63:0C:35:67:C2:EF:1F:70:52:43:4B
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/586a811c-3204-4d62-90a7-53f341a96fec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:83:17:e4:28:5c:80:22:c9:27:ba:70:2c:a1:da:07:8c:71:
         71:6f:be:0e:e3:27:ea:83:85:45:38:15:ce:ad:10:e7:47:ed:
         e9:e2:75:ab:4b:13:40:88:11:c4:6a:90:12:e9:71:1f:fd:fe:
         4a:4e:73:51:5f:e6:3c:79:fb:a5:45:1b:a1:00:00:37:86:19:
         17:c8:e0:50:7d:72:0a:d1:77:14:2f:7d:fb:bb:1a:f3:41:14:
         68:6f:f3:6a:97:26:06:70:6f:9d:32:cc:9d:9b:0d:3a:e1:d0:
         c2:76:9b:7f:75:41:fb:fb:6f:4a:66:80:a9:0e:65:74:a5:6a:
         6e:ab:fc:4d:ad:d4:52:38:ee:1f:46:3c:ab:e0:8b:0f:3c:a6:
         29:aa:0b:23:20:c8:d3:17:45:b3:9e:16:8d:af:02:6e:80:6e:
         a3:00:b6:31:f4:ce:8b:13:3d:e1:74:da:8e:08:ea:ff:39:1f:
         d0:a0:42:e2:fb:ef:e5:6a:9e:dc:24:24:01:1c:ad:bf:3d:fe:
         59:26:1a:95:de:21:50:94:d1:a1:8b:96:f6:63:02:f7:67:e2:
         19:27:bd:4a:a8:43:89:f7:17:f2:d0:cd:2a:9e:cc:0e:bb:eb:
         9d:e6:e0:ab:9f:a8:d1:77:6b:cf:63:a0:a7:ef:87:6b:64:54:
         fc:7e:5a:50
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHDNnY8tOZ+N7C1J7HJ0KJpzYIWEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNDIzMDAwMDAwWhcNMjQwNTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A4YjE3ZTdhMTM0MjQ5MDRlM2VlMGU5NWNmNjJhNTBkM2My
MGRiYjhmNzYzY2NjZTE5ZjRhZDNjOTZlYmQ5YzQwMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrs+o8NJ+wtZkeDFsNACpQbeor2Vu2BRHhzDSPHl8GLo1A
17MoqMZ8dhFzk2P+n+DwX4i9+vdmN84fE2r6cV95Y2ek6EPIKlIS8QmtRlZ02jLT
47KWYY1+n7FfD2WRMOA5omFKgCfeXHlQL2srRzgazkk9HxyFuXHzfcqP6RjlGIFi
KFVvLiuHckC3pONWkhnA2vPICjrQ/J5kMAyjD1XrTKp3l8WKtQ/MPg3i7y0oQs/T
zCb2TaS7gl++k2Pc4ABzwPExy3DQyzer/PkWW0qYtf61HIZuhwh3PTwQL0mt31Iy
vjjouw2gIp4A9/ivBZlp/jCvi7+TeeWpSYJI1ya7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5112sGu58mHwYww1Z8LvH3BSQ0swHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzU4NmE4MTFjLTMyMDQtNGQ2Mi05MGE3LTUzZjM0MWE5NmZlYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALSDF+QoXIAiySe6cCyh2geMcXFv
vg7jJ+qDhUU4Fc6tEOdH7enidatLE0CIEcRqkBLpcR/9/kpOc1Ff5jx5+6VFG6EA
ADeGGRfI4FB9cgrRdxQvffu7GvNBFGhv82qXJgZwb50yzJ2bDTrh0MJ2m391Qfv7
b0pmgKkOZXSlam6r/E2t1FI47h9GPKvgiw88pimqCyMgyNMXRbOeFo2vAm6AbqMA
tjH0zosTPeF02o4I6v85H9CgQuL77+VqntwkJAEcrb89/lkmGpXeIVCU0aGLlvZj
Avdn4hknvUqoQ4n3F/LQzSqezA67653m4KufqNF3a89joKfvh2tkVPx+WlA=
-----END CERTIFICATE-----