Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e1fddf7-d54d-43e0-9fdc-cd731b82ba49.roa
File:                     5e1fddf7-d54d-43e0-9fdc-cd731b82ba49.roa (raw, json)
Hash identifier:          QPSvNqrE9dxnowE9FPcB1UQam5OGHyQbnVD1BVcSYvY=
Subject key identifier:   E0:77:5B:F4:51:AF:F1:E6:3A:3B:0D:FC:74:AF:5C:10:53:D2:54:2D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7FF18884B3AFE805FB879660B208D521E9B24610
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e1fddf7-d54d-43e0-9fdc-cd731b82ba49.roa
Signing time:             Mon 27 Jan 2025 00:00:00 +0000
ROA not before:           Mon 27 Jan 2025 00:00:00 +0000
ROA not after:            Mon 03 Mar 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f1:88:84:b3:af:e8:05:fb:87:96:60:b2:08:d5:21:e9:b2:46:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan 27 00:00:00 2025 GMT
            Not After : Mar  3 23:59:59 2025 GMT
        Subject: serialNumber=1b4c85a556308ffa6d94bedd5b58822e4603802ef7a81e51ad3c0c87db9bbad8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:4f:e9:a3:91:98:8a:d7:0d:67:7d:73:64:
                    17:18:6c:d0:36:2d:c3:08:82:3d:29:ae:c3:55:0d:
                    15:f7:4d:32:ce:d5:53:aa:c1:10:c7:79:9b:cd:22:
                    f6:2a:73:d5:3b:f6:8d:d6:fa:1d:fc:79:d1:bd:0d:
                    ae:a1:54:6e:84:74:84:fc:78:e9:f9:ee:72:0b:23:
                    7d:d1:0b:33:8e:a2:74:3e:38:d1:0e:6d:40:f6:a6:
                    f2:fc:aa:61:ce:51:a7:8b:ed:eb:97:0b:d5:79:12:
                    85:70:b3:33:2b:0b:58:62:de:56:fa:64:fe:77:ae:
                    f9:fb:28:5e:09:bc:2a:e1:3c:94:80:59:8e:dd:4b:
                    d1:6b:b4:ba:85:e1:de:84:9c:6e:39:c1:e7:73:ed:
                    1a:49:dd:64:78:14:0e:55:08:ff:99:cb:aa:e1:ef:
                    fc:51:8d:ab:38:e6:5b:d5:af:8c:39:2f:d9:77:4e:
                    07:50:df:f8:51:98:1d:f3:c3:bb:85:4f:43:e2:48:
                    bd:aa:2f:d5:28:41:79:6d:1b:54:3b:12:7d:5d:84:
                    cd:d7:69:77:be:98:a4:0f:ba:d0:79:ef:a6:43:ef:
                    2f:c7:6d:dd:65:62:bd:74:c0:47:9a:eb:6e:81:e8:
                    3d:02:35:08:20:cf:a6:02:90:ea:b4:92:61:81:05:
                    ab:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:77:5B:F4:51:AF:F1:E6:3A:3B:0D:FC:74:AF:5C:10:53:D2:54:2D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e1fddf7-d54d-43e0-9fdc-cd731b82ba49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:8e:24:d6:93:c6:29:e6:fe:a2:c3:02:03:21:de:45:98:8d:
         0d:55:64:bc:97:16:fe:a8:6b:6d:5a:72:9e:ac:91:23:e9:30:
         d7:bd:d5:68:63:b2:80:f3:a3:19:1c:8a:f6:57:34:67:2c:92:
         58:c2:85:68:8b:5d:6f:5f:e3:58:bb:4a:eb:77:98:68:86:36:
         53:6f:41:30:33:00:b9:de:70:cc:a4:b4:9c:d5:d1:f4:55:47:
         54:af:a3:a8:e4:2a:da:27:a4:39:87:94:f0:7c:db:12:e1:32:
         cb:b9:54:8f:a0:62:e4:1f:a6:b6:55:26:87:67:14:5e:5a:28:
         f0:f1:1d:3c:7b:63:49:e8:e7:86:2e:06:18:d5:df:df:f7:07:
         31:54:38:38:66:13:bb:4a:42:c0:1e:3a:12:7a:2b:76:0e:2d:
         1f:75:5a:fa:17:2f:38:59:f9:5f:dd:4f:78:11:96:71:42:c1:
         30:49:2f:c1:bf:7a:84:5a:14:ee:4e:9d:b3:b5:09:6d:3e:61:
         61:c3:5c:8c:18:3c:b2:e5:f8:6b:bb:84:d6:9a:d3:14:b9:0c:
         0d:ac:5b:d2:d1:a1:f2:e7:f7:f4:68:fa:76:98:06:39:1f:33:
         6f:a4:61:0c:d0:6f:df:f4:b4:1d:d0:7a:28:7b:cd:23:e4:dd:
         bc:a8:b3:aa
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUf/GIhLOv6AX7h5ZgsgjVIemyRhAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxYjRjODVhNTU2MzA4ZmZhNmQ5NGJlZGQ1YjU4ODIyZTQ2
MDM4MDJlZjdhODFlNTFhZDNjMGM4N2RiOWJiYWQ4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC19k/po5GYitcNZ31zZBcYbNA2LcMIgj0prsNVDRX3TTLO
1VOqwRDHeZvNIvYqc9U79o3W+h38edG9Da6hVG6EdIT8eOn57nILI33RCzOOonQ+
ONEObUD2pvL8qmHOUaeL7euXC9V5EoVwszMrC1hi3lb6ZP53rvn7KF4JvCrhPJSA
WY7dS9FrtLqF4d6EnG45wedz7RpJ3WR4FA5VCP+Zy6rh7/xRjas45lvVr4w5L9l3
TgdQ3/hRmB3zw7uFT0PiSL2qL9UoQXltG1Q7En1dhM3XaXe+mKQPutB576ZD7y/H
bd1lYr10wEea626B6D0CNQggz6YCkOq0kmGBBaurAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU4Hdb9FGv8eY6Ow38dK9cEFPSVC0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzVlMWZkZGY3LWQ1NGQtNDNlMC05ZmRjLWNkNzMxYjgyYmE0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEKOJNaTxinm/qLDAgMh3kWYjQ1V
ZLyXFv6oa21acp6skSPpMNe91WhjsoDzoxkcivZXNGcskljChWiLXW9f41i7Sut3
mGiGNlNvQTAzALnecMyktJzV0fRVR1Svo6jkKtonpDmHlPB82xLhMsu5VI+gYuQf
prZVJodnFF5aKPDxHTx7Y0no54YuBhjV39/3BzFUODhmE7tKQsAeOhJ6K3YOLR91
WvoXLzhZ+V/dT3gRlnFCwTBJL8G/eoRaFO5OnbO1CW0+YWHDXIwYPLLl+Gu7hNaa
0xS5DA2sW9LRofLn9/Ro+naYBjkfM2+kYQzQb9/0tB3Qeih7zSPk3byos6o=
-----END CERTIFICATE-----