Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6dd8a084-9c3a-4415-91e8-28a1f7eff54e.roa
File:                     6dd8a084-9c3a-4415-91e8-28a1f7eff54e.roa (raw, json)
Hash identifier:          8ewEtLLGg3Ib6KghRLRF3fzP3D0wdcF4LFilTkVF/pg=
Subject key identifier:   00:D9:1F:4D:F5:4D:5C:F7:4B:86:CD:DF:47:27:14:D0:F2:41:47:6D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       624D3378272BCED25AEE0E6F98EFAF3C36607828
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6dd8a084-9c3a-4415-91e8-28a1f7eff54e.roa
Signing time:             Mon 21 Oct 2024 00:00:00 +0000
ROA not before:           Mon 21 Oct 2024 00:00:00 +0000
ROA not after:            Mon 25 Nov 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4d:33:78:27:2b:ce:d2:5a:ee:0e:6f:98:ef:af:3c:36:60:78:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 21 00:00:00 2024 GMT
            Not After : Nov 25 23:59:59 2024 GMT
        Subject: serialNumber=1924107d2b98d92644e3e5868854d1849bdf4189c7f30e60b9caf52fddaa24fb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:46:f7:52:e1:ee:d4:a4:fd:10:82:c9:d2:
                    75:ce:f0:34:6b:e8:6e:b0:27:e4:66:e0:c9:2a:62:
                    6b:1f:9a:2f:ff:e6:0d:9b:7b:62:13:e7:b6:c6:4d:
                    14:75:2b:ed:c5:7b:6e:9f:7c:51:7f:c8:f5:b1:2e:
                    e8:04:a0:80:04:6b:2e:5b:72:a9:4c:ee:79:40:e9:
                    8d:76:4f:d7:2a:97:9d:d2:d0:6c:f3:ba:07:3f:2d:
                    b4:49:55:54:8f:8a:3d:5c:08:2f:09:b1:8f:64:72:
                    54:e8:27:c7:c1:86:a1:7f:c9:57:39:0c:f6:81:d5:
                    d0:5b:84:62:d8:1d:b8:97:b6:4c:13:97:5a:52:0b:
                    03:9a:9e:93:0c:2d:01:20:0d:ae:b7:d2:32:da:51:
                    27:8b:1b:e7:98:89:bf:4c:72:56:31:88:03:95:6e:
                    09:49:8a:dc:7d:b7:72:8f:5f:49:30:7c:ef:c8:d0:
                    54:af:a6:2a:6a:f4:3d:10:39:ee:56:ed:56:a9:7f:
                    6b:cc:a2:3a:9c:3e:71:1f:cb:3c:c8:3a:7a:99:4b:
                    65:cf:a3:50:87:7c:a7:a9:fc:91:56:43:d1:08:0d:
                    3c:53:37:cb:d7:1f:ac:d9:4e:8c:9d:c9:d0:63:63:
                    32:60:73:23:a3:7e:9a:c0:14:59:0d:e4:9a:ab:b1:
                    b9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D9:1F:4D:F5:4D:5C:F7:4B:86:CD:DF:47:27:14:D0:F2:41:47:6D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6dd8a084-9c3a-4415-91e8-28a1f7eff54e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:50:8e:c7:9d:e0:83:14:3f:af:de:9a:db:02:88:fe:5f:28:
         11:e1:55:6b:8b:13:a9:68:dd:d4:38:2c:00:8a:a9:1e:70:e5:
         38:b5:40:2c:e8:86:36:a7:c6:5b:c8:f3:9d:93:e6:46:2a:2b:
         85:71:05:e7:28:06:e5:f1:55:59:d4:fc:11:fb:5d:7d:09:c6:
         70:57:ef:99:66:ff:e4:df:97:39:64:c8:c8:c4:b9:a1:ea:ad:
         6e:8a:e9:b4:70:25:5f:76:fd:08:20:37:e8:83:51:5f:27:99:
         b2:ed:83:03:59:88:0c:72:dc:14:8d:f1:b7:77:72:97:b0:11:
         6f:77:03:57:cb:55:82:f3:49:ae:1f:2d:b2:ad:c3:a2:9c:1e:
         04:c2:1f:59:9e:2b:b4:bf:2c:71:49:05:fe:fc:77:8f:0e:91:
         94:e6:77:3c:5b:7e:bf:01:ed:a7:b5:85:df:8d:73:eb:b4:63:
         e4:ee:d9:15:94:a4:50:fb:e9:4b:eb:35:95:1e:24:cc:a2:3f:
         a5:d2:c3:6d:46:eb:cc:da:be:3e:06:38:a5:20:51:38:6b:40:
         de:c1:6a:2d:85:7b:e3:91:f9:4b:77:b3:44:b3:05:ac:f8:50:
         ba:4d:ad:60:9f:3a:18:ed:0c:e3:db:05:1b:9e:24:30:ba:9a:
         5f:33:0a:fa
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYk0zeCcrztJa7g5vmO+vPDZgeCgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDIxMDAwMDAwWhcNMjQxMTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxOTI0MTA3ZDJiOThkOTI2NDRlM2U1ODY4ODU0ZDE4NDli
ZGY0MTg5YzdmMzBlNjBiOWNhZjUyZmRkYWEyNGZiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+vUb3UuHu1KT9EILJ0nXO8DRr6G6wJ+Rm4MkqYmsfmi//
5g2be2IT57bGTRR1K+3Fe26ffFF/yPWxLugEoIAEay5bcqlM7nlA6Y12T9cql53S
0Gzzugc/LbRJVVSPij1cCC8JsY9kclToJ8fBhqF/yVc5DPaB1dBbhGLYHbiXtkwT
l1pSCwOanpMMLQEgDa630jLaUSeLG+eYib9MclYxiAOVbglJitx9t3KPX0kwfO/I
0FSvpipq9D0QOe5W7Vapf2vMojqcPnEfyzzIOnqZS2XPo1CHfKep/JFWQ9EIDTxT
N8vXH6zZToydydBjYzJgcyOjfprAFFkN5JqrsbnNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUANkfTfVNXPdLhs3fRycU0PJBR20wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzZkZDhhMDg0LTljM2EtNDQxNS05MWU4LTI4YTFmN2VmZjU0ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAClQjsed4IMUP6/emtsCiP5fKBHh
VWuLE6lo3dQ4LACKqR5w5Ti1QCzohjanxlvI852T5kYqK4VxBecoBuXxVVnU/BH7
XX0JxnBX75lm/+TflzlkyMjEuaHqrW6K6bRwJV92/QggN+iDUV8nmbLtgwNZiAxy
3BSN8bd3cpewEW93A1fLVYLzSa4fLbKtw6KcHgTCH1meK7S/LHFJBf78d48OkZTm
dzxbfr8B7ae1hd+Nc+u0Y+Tu2RWUpFD76UvrNZUeJMyiP6XSw21G68zavj4GOKUg
UThrQN7Bai2Fe+OR+Ut3s0SzBaz4ULpNrWCfOhjtDOPbBRueJDC6ml8zCvo=
-----END CERTIFICATE-----