Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5a83de7c-f662-4c98-a82f-25c47f6df82d.roa
File:                     5a83de7c-f662-4c98-a82f-25c47f6df82d.roa (raw, json)
Hash identifier:          NC2c9i0TpCDN7Ekz5xhuWWaakuFuzJ2TlAl/s277AY8=
Subject key identifier:   76:9D:97:3E:7A:D9:12:56:58:59:C6:4B:6E:DC:61:FD:62:B0:E3:46
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       31CB0C2ACE158C367B23C6A2279EADA2ECE2D57E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5a83de7c-f662-4c98-a82f-25c47f6df82d.roa
Signing time:             Sat 14 Sep 2024 00:00:00 +0000
ROA not before:           Sat 14 Sep 2024 00:00:00 +0000
ROA not after:            Sat 19 Oct 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cb:0c:2a:ce:15:8c:36:7b:23:c6:a2:27:9e:ad:a2:ec:e2:d5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 14 00:00:00 2024 GMT
            Not After : Oct 19 23:59:59 2024 GMT
        Subject: serialNumber=774d897b3771cb0aacf6a13f39ac0ee8ccddff714018531056a85a80067bf1da, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e1:9f:1b:4c:7a:42:88:3f:06:09:84:75:f0:
                    5d:08:2b:19:67:a1:44:17:f7:24:01:51:c3:40:ba:
                    b6:72:ca:1b:54:db:71:d6:e5:01:dc:9d:94:17:78:
                    5c:eb:22:1c:3d:08:80:14:b4:b5:c2:aa:28:4d:9c:
                    fd:51:9b:0f:6c:e1:07:df:15:51:70:e8:cd:72:0f:
                    de:81:66:ee:4f:af:86:98:2d:d9:c4:29:f6:f2:d3:
                    75:c5:bd:95:59:68:cd:8b:0a:b8:1b:c7:e2:40:37:
                    5c:5f:61:7c:81:b8:23:53:26:97:67:dc:af:c8:2b:
                    e3:4d:af:6b:63:f9:dd:0b:b8:7b:30:65:3d:6c:bd:
                    0a:9c:ce:de:e8:66:2c:fe:8b:e2:fd:ed:31:40:10:
                    a9:d1:15:04:c2:11:93:bc:ae:63:dd:c6:2a:1f:8d:
                    11:0b:3e:4e:b7:73:15:bb:06:51:f7:a6:68:48:1c:
                    a6:e4:f0:ff:2d:41:45:64:84:f3:e8:ad:83:ca:90:
                    d7:72:de:76:b4:4d:87:23:c3:e7:87:88:e4:4a:5c:
                    1d:61:65:cf:7e:c2:07:e5:bf:6f:f8:ec:58:f3:b9:
                    dd:ed:c6:04:1b:3e:6e:97:92:81:66:22:97:c5:09:
                    30:c7:96:b3:24:14:dc:fd:a7:5d:43:41:ab:42:30:
                    22:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9D:97:3E:7A:D9:12:56:58:59:C6:4B:6E:DC:61:FD:62:B0:E3:46
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5a83de7c-f662-4c98-a82f-25c47f6df82d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:32:26:88:1d:27:87:ff:27:6d:c2:e1:e2:b0:9b:92:4b:16:
         26:3a:62:71:4c:d7:79:78:93:1a:ea:13:83:72:1d:57:83:23:
         af:65:72:2d:05:36:b5:83:c4:63:d0:03:b5:dc:3a:42:6b:1d:
         b5:18:8d:9c:81:09:17:88:8a:a1:1e:ce:08:11:02:51:3d:97:
         8c:ef:30:17:50:24:c4:b8:db:59:e3:17:0c:e1:a1:85:b1:7b:
         8d:bc:11:50:7c:1d:e5:93:e5:8e:9a:f4:77:24:25:3b:8a:ba:
         2d:9a:bb:b2:b8:15:5e:31:4e:c5:d9:13:47:b2:6c:66:94:3d:
         52:e0:ad:72:49:63:90:65:d3:72:5f:72:7a:bf:12:80:4c:2c:
         1f:e3:ec:a6:f9:32:0c:64:6d:6d:f8:1c:02:48:51:64:76:8c:
         30:90:ef:97:1c:67:c8:57:a7:ab:f9:67:99:c5:51:18:0c:e1:
         a5:99:d8:04:21:95:ed:ae:f8:c1:de:37:19:64:bf:41:a0:a7:
         c9:d3:01:93:35:a1:b5:f6:5c:ea:f7:58:42:32:c4:61:09:ae:
         7b:5f:ec:62:ec:13:02:1f:cf:e1:74:3c:81:62:29:e5:a2:f3:
         44:72:17:62:2a:35:f6:96:c3:14:67:87:d2:6f:be:85:51:93:
         1e:b8:e7:76
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMcsMKs4VjDZ7I8aiJ56touzi1X4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwOTE0MDAwMDAwWhcNMjQxMDE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NzRkODk3YjM3NzFjYjBhYWNmNmExM2YzOWFjMGVlOGNj
ZGRmZjcxNDAxODUzMTA1NmE4NWE4MDA2N2JmMWRhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDz4Z8bTHpCiD8GCYR18F0IKxlnoUQX9yQBUcNAurZyyhtU
23HW5QHcnZQXeFzrIhw9CIAUtLXCqihNnP1Rmw9s4QffFVFw6M1yD96BZu5Pr4aY
LdnEKfby03XFvZVZaM2LCrgbx+JAN1xfYXyBuCNTJpdn3K/IK+NNr2tj+d0LuHsw
ZT1svQqczt7oZiz+i+L97TFAEKnRFQTCEZO8rmPdxiofjRELPk63cxW7BlH3pmhI
HKbk8P8tQUVkhPPorYPKkNdy3na0TYcjw+eHiORKXB1hZc9+wgflv2/47Fjzud3t
xgQbPm6XkoFmIpfFCTDHlrMkFNz9p11DQatCMCJrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdp2XPnrZElZYWcZLbtxh/WKw40YwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzVhODNkZTdjLWY2NjItNGM5OC1hODJmLTI1YzQ3ZjZkZjgyZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAF4yJogdJ4f/J23C4eKwm5JLFiY6
YnFM13l4kxrqE4NyHVeDI69lci0FNrWDxGPQA7XcOkJrHbUYjZyBCReIiqEezggR
AlE9l4zvMBdQJMS421njFwzhoYWxe428EVB8HeWT5Y6a9HckJTuKui2au7K4FV4x
TsXZE0eybGaUPVLgrXJJY5Bl03Jfcnq/EoBMLB/j7Kb5MgxkbW34HAJIUWR2jDCQ
75ccZ8hXp6v5Z5nFURgM4aWZ2AQhle2u+MHeNxlkv0Ggp8nTAZM1obX2XOr3WEIy
xGEJrntf7GLsEwIfz+F0PIFiKeWi80RyF2IqNfaWwxRnh9JvvoVRkx6453Y=
-----END CERTIFICATE-----