Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/68e062db-5b5a-4639-b49a-b146e1ab1845.roa
File:                     68e062db-5b5a-4639-b49a-b146e1ab1845.roa (raw, json)
Hash identifier:          JFmTP2AIPf8S783G6JERQyTzl/MyAXLkDiYCmjfrfNk=
Subject key identifier:   B3:0C:A0:FD:22:89:31:70:60:B7:51:9C:EA:7C:1F:93:3B:A6:FF:5D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1717B6E3FAD72AED75AA43101CD98491F3C9D44D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/68e062db-5b5a-4639-b49a-b146e1ab1845.roa
Signing time:             Sun 24 Dec 2023 00:00:00 +0000
ROA not before:           Sun 24 Dec 2023 00:00:00 +0000
ROA not after:            Sun 28 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:17:b6:e3:fa:d7:2a:ed:75:aa:43:10:1c:d9:84:91:f3:c9:d4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 24 00:00:00 2023 GMT
            Not After : Jan 28 23:59:59 2024 GMT
        Subject: serialNumber=5ea4aa7bf5d0a532e2c1b4232c076d9e5055c9ac94d206e1f2b99b4ee083257d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:98:5e:4b:94:18:03:cc:4f:10:b4:6b:48:5c:
                    9b:71:c9:ef:22:d4:36:af:bc:0a:c2:51:c2:ad:e8:
                    20:42:30:41:df:72:9c:8e:e1:b5:80:e5:1c:57:28:
                    7e:76:c1:cb:58:b3:bd:13:66:88:81:e4:a9:67:52:
                    e9:a6:16:5c:fc:5c:ae:bf:ca:8a:24:9e:49:07:b2:
                    4b:d6:56:c9:35:57:a0:83:f3:b3:57:ec:de:95:e4:
                    8c:76:f3:6e:bc:d7:74:16:a7:19:b9:bc:8f:8f:30:
                    75:27:67:2b:61:0a:7d:95:d1:50:52:cd:ec:37:52:
                    c4:bc:ed:80:7a:fe:34:21:1b:c9:94:9b:8d:98:59:
                    79:1b:b4:a5:15:41:c9:ac:3e:74:56:9b:a8:6c:25:
                    ec:19:d5:4a:9a:30:61:e7:59:46:fd:d2:db:e3:6a:
                    80:c4:7d:c4:58:01:db:27:6b:0a:df:fe:78:0e:54:
                    90:11:5f:47:cb:46:15:b5:d4:5d:d3:de:b3:4e:90:
                    a7:42:81:d0:c8:e0:84:4e:76:8f:b2:2d:02:f5:1c:
                    43:1a:22:a2:98:bf:ed:22:db:9a:46:b2:3f:df:77:
                    d4:bd:24:96:b6:60:fb:3a:d6:fa:4b:2f:68:e3:58:
                    4c:e5:ab:95:8f:d5:ae:42:bc:81:d9:f5:61:62:d0:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0C:A0:FD:22:89:31:70:60:B7:51:9C:EA:7C:1F:93:3B:A6:FF:5D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/68e062db-5b5a-4639-b49a-b146e1ab1845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:60:a8:34:56:2c:4f:c1:67:91:da:d3:62:7c:e2:85:55:ce:
         24:99:cc:e8:0b:49:97:cc:ce:24:ee:8c:2e:5c:58:0a:f1:c7:
         de:89:fa:53:1e:bd:05:1e:7a:aa:cf:9e:bf:a7:67:1b:2e:7a:
         8a:32:7c:a3:e9:a7:01:d1:48:79:2a:68:07:2a:e3:90:6d:64:
         95:d3:8f:9d:bb:48:d6:27:2e:17:4c:43:b9:18:99:0f:49:ca:
         54:0b:1f:84:9e:9d:60:b4:b1:fd:1d:1d:8c:35:77:c5:69:49:
         ee:a0:9d:4e:0b:f0:30:95:1c:50:4a:91:65:88:08:b4:4a:2b:
         83:43:1c:e3:5f:5d:87:55:47:59:99:fd:de:1f:3a:18:3a:56:
         31:a1:a8:dd:0b:63:12:b0:e7:b7:34:89:42:da:b6:e4:53:c2:
         c0:c4:07:0b:3b:b8:38:73:1e:9d:7e:59:ec:e7:30:99:1d:15:
         82:1e:4e:65:92:a4:7c:46:9f:9a:b4:47:d3:27:39:16:9a:00:
         75:9c:ea:69:7e:c1:f7:4c:87:f3:d7:2d:ec:a0:d8:38:b4:cc:
         90:30:e4:e1:86:2c:02:b7:83:e3:49:c6:a8:bb:ee:46:4a:d7:
         54:15:f1:ec:b2:3d:87:86:e5:92:e1:4b:54:2d:b7:31:1f:71:
         ea:ca:5e:35
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFxe24/rXKu11qkMQHNmEkfPJ1E0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjI0MDAwMDAwWhcNMjQwMTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZWE0YWE3YmY1ZDBhNTMyZTJjMWI0MjMyYzA3NmQ5ZTUw
NTVjOWFjOTRkMjA2ZTFmMmI5OWI0ZWUwODMyNTdkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDmmF5LlBgDzE8QtGtIXJtxye8i1DavvArCUcKt6CBCMEHf
cpyO4bWA5RxXKH52wctYs70TZoiB5KlnUummFlz8XK6/yooknkkHskvWVsk1V6CD
87NX7N6V5Ix2826813QWpxm5vI+PMHUnZythCn2V0VBSzew3UsS87YB6/jQhG8mU
m42YWXkbtKUVQcmsPnRWm6hsJewZ1UqaMGHnWUb90tvjaoDEfcRYAdsnawrf/ngO
VJARX0fLRhW11F3T3rNOkKdCgdDI4IROdo+yLQL1HEMaIqKYv+0i25pGsj/fd9S9
JJa2YPs61vpLL2jjWEzlq5WP1a5CvIHZ9WFi0H1xAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUswyg/SKJMXBgt1Gc6nwfkzum/10wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzY4ZTA2MmRiLTViNWEtNDYzOS1iNDlhLWIxNDZlMWFiMTg0NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJNgqDRWLE/BZ5Ha02J84oVVziSZ
zOgLSZfMziTujC5cWArxx96J+lMevQUeeqrPnr+nZxsueooyfKPppwHRSHkqaAcq
45BtZJXTj527SNYnLhdMQ7kYmQ9JylQLH4SenWC0sf0dHYw1d8VpSe6gnU4L8DCV
HFBKkWWICLRKK4NDHONfXYdVR1mZ/d4fOhg6VjGhqN0LYxKw57c0iULatuRTwsDE
Bws7uDhzHp1+WeznMJkdFYIeTmWSpHxGn5q0R9MnORaaAHWc6ml+wfdMh/PXLeyg
2Di0zJAw5OGGLAK3g+NJxqi77kZK11QV8eyyPYeG5ZLhS1QttzEfcerKXjU=
-----END CERTIFICATE-----