Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c2bd8d4-c5fe-46c6-9adf-55d0b6db75b4.roa
File:                     7c2bd8d4-c5fe-46c6-9adf-55d0b6db75b4.roa (raw, json)
Hash identifier:          cbiORcI5Rrtgfu6CQdCswqbZDW+QYU6Sch5lnxUNbWE=
Subject key identifier:   66:86:FA:16:02:62:24:B3:0A:01:C1:39:33:24:30:04:61:83:E9:E1
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7EE8E1C2BEF054C8FDEB1C8AD52EF06FA1962903
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c2bd8d4-c5fe-46c6-9adf-55d0b6db75b4.roa
Signing time:             Sun 30 Jun 2024 00:00:00 +0000
ROA not before:           Sun 30 Jun 2024 00:00:00 +0000
ROA not after:            Sun 04 Aug 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e8:e1:c2:be:f0:54:c8:fd:eb:1c:8a:d5:2e:f0:6f:a1:96:29:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 30 00:00:00 2024 GMT
            Not After : Aug  4 23:59:59 2024 GMT
        Subject: serialNumber=e6c9368f18d776a733be0084ca0b86ac490bf2d24e40c5a671e125597f907bb6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e6:1a:9c:26:b8:4f:ff:29:55:5d:6e:8a:da:
                    57:95:45:bf:75:ca:aa:12:4c:fb:9b:a5:64:29:d6:
                    ab:ad:fc:fe:ed:da:c2:64:6a:52:cb:30:95:5f:cb:
                    44:02:5c:97:e5:37:5f:e0:0d:2c:69:9d:eb:af:1c:
                    4e:b8:10:8a:b5:2b:5d:fb:85:46:47:f8:7a:c6:9b:
                    43:97:fb:a7:49:e2:00:96:42:25:31:99:13:69:3a:
                    63:23:e0:c3:22:ac:43:6c:a3:99:d3:cd:e4:18:14:
                    de:c1:41:87:ea:45:bd:af:62:5c:c5:f4:11:72:bf:
                    dd:a0:5f:a0:51:7e:f7:0d:06:cc:4d:ff:46:e1:81:
                    98:ff:ad:60:73:ff:5b:29:60:66:de:f6:87:83:a5:
                    c2:2d:e1:0b:24:13:16:36:de:9a:27:9c:56:b4:60:
                    2f:72:98:73:7c:59:1e:22:f1:37:3e:59:14:d2:15:
                    98:24:e9:e4:ef:a5:72:32:02:48:4e:8d:b2:d7:92:
                    d7:1d:af:de:fd:7a:4a:f2:e3:41:39:cc:04:28:62:
                    79:3b:3b:ed:d6:ae:9c:a2:ea:1f:c1:42:24:7d:da:
                    3c:79:98:b1:aa:22:66:dd:31:31:01:fd:95:12:0e:
                    7b:bf:22:ea:d2:af:bc:84:89:c4:85:fb:dc:68:7c:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:86:FA:16:02:62:24:B3:0A:01:C1:39:33:24:30:04:61:83:E9:E1
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c2bd8d4-c5fe-46c6-9adf-55d0b6db75b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:ad:de:67:bf:c2:b9:3c:17:f7:75:02:9d:55:68:92:91:47:
         bc:1b:b3:25:d8:0b:49:24:dc:f3:01:88:ae:08:59:09:8a:ac:
         95:74:59:87:fa:48:95:fc:ea:9c:e8:2e:2f:e9:dc:d9:85:d6:
         70:46:33:8a:9e:d2:8c:51:8c:07:66:45:54:5e:88:6d:2b:fa:
         f4:c9:9f:be:18:9c:bc:e2:e0:2a:4b:db:97:76:0a:b0:a1:45:
         84:d9:c5:be:d5:48:aa:5b:8f:43:cc:b2:8f:8a:41:c5:44:ec:
         04:03:6b:18:8f:42:a9:fe:b8:5d:5c:cd:d8:87:4a:ac:af:33:
         78:60:0d:5b:6c:b5:4a:73:cf:99:f1:98:f9:49:48:f3:d2:25:
         02:3b:76:35:61:af:d1:0a:bf:69:62:a6:dc:44:20:19:d7:9d:
         20:d3:47:35:76:8a:e5:94:0b:f6:76:66:92:dc:c9:49:da:5d:
         61:b4:d8:4a:54:57:6a:15:48:7d:ea:4a:65:11:d5:b7:70:d2:
         98:5b:85:56:ba:72:05:61:52:f7:c4:d0:c8:f7:43:88:16:e5:
         e0:6b:38:e4:07:7e:f4:a4:40:76:88:7c:98:ab:51:f4:12:b7:
         e8:59:f1:8e:21:26:65:bd:35:fe:db:c4:88:ae:f7:a9:d5:a5:
         de:51:0c:3f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfujhwr7wVMj96xyK1S7wb6GWKQMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNjMwMDAwMDAwWhcNMjQwODA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNmM5MzY4ZjE4ZDc3NmE3MzNiZTAwODRjYTBiODZhYzQ5
MGJmMmQyNGU0MGM1YTY3MWUxMjU1OTdmOTA3YmI2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDq5hqcJrhP/ylVXW6K2leVRb91yqoSTPubpWQp1qut/P7t
2sJkalLLMJVfy0QCXJflN1/gDSxpneuvHE64EIq1K137hUZH+HrGm0OX+6dJ4gCW
QiUxmRNpOmMj4MMirENso5nTzeQYFN7BQYfqRb2vYlzF9BFyv92gX6BRfvcNBsxN
/0bhgZj/rWBz/1spYGbe9oeDpcIt4QskExY23ponnFa0YC9ymHN8WR4i8Tc+WRTS
FZgk6eTvpXIyAkhOjbLXktcdr979ekry40E5zAQoYnk7O+3Wrpyi6h/BQiR92jx5
mLGqImbdMTEB/ZUSDnu/IurSr7yEicSF+9xofPhbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZob6FgJiJLMKAcE5MyQwBGGD6eEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzdjMmJkOGQ0LWM1ZmUtNDZjNi05YWRmLTU1ZDBiNmRiNzViNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAB6t3me/wrk8F/d1Ap1VaJKRR7wb
syXYC0kk3PMBiK4IWQmKrJV0WYf6SJX86pzoLi/p3NmF1nBGM4qe0oxRjAdmRVRe
iG0r+vTJn74YnLzi4CpL25d2CrChRYTZxb7VSKpbj0PMso+KQcVE7AQDaxiPQqn+
uF1czdiHSqyvM3hgDVtstUpzz5nxmPlJSPPSJQI7djVhr9EKv2liptxEIBnXnSDT
RzV2iuWUC/Z2ZpLcyUnaXWG02EpUV2oVSH3qSmUR1bdw0phbhVa6cgVhUvfE0Mj3
Q4gW5eBrOOQHfvSkQHaIfJirUfQSt+hZ8Y4hJmW9Nf7bxIiu96nVpd5RDD8=
-----END CERTIFICATE-----