Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8a0256d5-9054-4d7c-b2ed-19cd8c1a7a4a.roa
File:                     8a0256d5-9054-4d7c-b2ed-19cd8c1a7a4a.roa (raw, json)
Hash identifier:          OEmiiV0kBGrSF+hf17Et6coX9uhPdOoq2CeduQQQBT8=
Subject key identifier:   9F:F6:70:F1:5B:FA:5C:A7:83:53:C5:28:C0:F9:84:FB:80:55:52:55
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2563D57322E657417C6BC68CA7AED8F782E2FB20
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8a0256d5-9054-4d7c-b2ed-19cd8c1a7a4a.roa
Signing time:             Sat 23 Nov 2024 00:00:00 +0000
ROA not before:           Sat 23 Nov 2024 00:00:00 +0000
ROA not after:            Sat 28 Dec 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:63:d5:73:22:e6:57:41:7c:6b:c6:8c:a7:ae:d8:f7:82:e2:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 23 00:00:00 2024 GMT
            Not After : Dec 28 23:59:59 2024 GMT
        Subject: serialNumber=d72f3bb016f62dc7d4be26600d36fbf356712a3c4d39625e076342d48573a28e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:99:4b:02:2e:6a:9e:69:69:00:f2:5d:fd:c2:
                    5d:5e:27:b3:3c:eb:b1:72:df:f0:8b:0a:1b:2c:78:
                    a3:74:bd:45:79:d2:dc:92:fe:71:c0:0b:9c:23:f7:
                    46:40:3e:83:85:70:ec:b9:b1:c3:5a:2c:40:13:96:
                    d9:df:54:ae:bb:d1:53:66:54:8b:60:d0:b4:6a:89:
                    2f:db:9d:9e:0f:36:ff:4b:6f:94:8e:64:6a:17:c6:
                    78:b5:18:63:5b:82:6e:29:91:89:8c:ca:d5:50:ae:
                    21:f3:36:f4:1e:89:76:a5:3a:49:35:3d:c5:5a:77:
                    2d:53:ca:28:7c:19:32:17:ad:6a:db:d6:c4:54:20:
                    62:25:74:b4:2b:47:b0:f4:42:b7:10:a5:22:37:1f:
                    67:99:d9:1b:ff:b8:07:7b:a5:d5:0f:d2:12:0e:3a:
                    9d:95:32:9a:02:56:42:57:43:6f:2a:9f:67:00:ab:
                    a2:30:e9:da:c4:e3:c2:e8:6c:8a:11:fb:1b:c4:4e:
                    48:9b:b2:01:98:77:48:cc:fa:1b:af:a1:ca:33:10:
                    56:a2:22:ec:a9:3d:8a:b9:cc:fa:c6:13:1d:8e:7c:
                    4d:1b:46:d9:78:3d:28:4b:db:9b:bd:83:01:cc:c7:
                    5b:4d:cd:ab:21:f6:f6:a9:ae:96:6d:7d:c9:7e:55:
                    38:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F6:70:F1:5B:FA:5C:A7:83:53:C5:28:C0:F9:84:FB:80:55:52:55
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8a0256d5-9054-4d7c-b2ed-19cd8c1a7a4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:14:d1:10:48:1c:80:34:a2:98:14:16:b6:a0:89:a0:fc:12:
         12:ee:db:f9:e9:89:0e:8a:45:c2:55:d3:fa:de:f5:0c:07:9d:
         c8:1a:44:52:c2:ab:3f:87:8b:0a:a6:81:f8:d1:e3:6e:2e:4c:
         3e:af:e5:82:68:70:be:9e:6c:2f:9c:df:65:db:e0:97:3c:1c:
         58:fe:da:dd:5b:65:c6:1b:ef:15:e6:ac:84:55:7c:c6:16:15:
         15:f5:fb:13:ad:c6:c6:1c:f4:8b:18:cf:61:f0:f3:cc:a1:16:
         b0:48:49:75:13:b1:56:54:88:32:2e:be:26:8d:33:19:7e:b4:
         54:14:bc:c3:a3:3e:1a:23:5f:c8:15:22:df:fc:f2:d1:42:86:
         f1:36:92:03:3f:e0:07:45:ed:49:d9:3a:63:a4:ef:ee:f3:4e:
         f4:69:02:98:54:42:b0:fe:b6:3b:cc:f3:dd:37:26:88:a0:49:
         31:49:bd:34:0b:e3:a2:dc:94:85:82:79:88:fa:5e:8b:1b:54:
         d6:0f:77:9d:2e:b0:4c:46:8e:f7:42:34:64:a4:31:56:46:60:
         61:4b:7a:36:8a:91:2a:e4:61:18:6d:d7:c1:4a:4a:cb:ef:10:
         8d:8e:8c:41:d6:d9:86:73:4d:42:6a:c4:c9:b2:64:5d:3a:c8:
         4f:68:ec:3d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJWPVcyLmV0F8a8aMp67Y94Li+yAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMTIzMDAwMDAwWhcNMjQxMjI4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNzJmM2JiMDE2ZjYyZGM3ZDRiZTI2NjAwZDM2ZmJmMzU2
NzEyYTNjNGQzOTYyNWUwNzYzNDJkNDg1NzNhMjhlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRmUsCLmqeaWkA8l39wl1eJ7M867Fy3/CLChsseKN0vUV5
0tyS/nHAC5wj90ZAPoOFcOy5scNaLEATltnfVK670VNmVItg0LRqiS/bnZ4PNv9L
b5SOZGoXxni1GGNbgm4pkYmMytVQriHzNvQeiXalOkk1PcVady1Tyih8GTIXrWrb
1sRUIGIldLQrR7D0QrcQpSI3H2eZ2Rv/uAd7pdUP0hIOOp2VMpoCVkJXQ28qn2cA
q6Iw6drE48LobIoR+xvETkibsgGYd0jM+huvocozEFaiIuypPYq5zPrGEx2OfE0b
Rtl4PShL25u9gwHMx1tNzash9vaprpZtfcl+VTgtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUn/Zw8Vv6XKeDU8UowPmE+4BVUlUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzhhMDI1NmQ1LTkwNTQtNGQ3Yy1iMmVkLTE5Y2Q4YzFhN2E0YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADAU0RBIHIA0opgUFragiaD8EhLu
2/npiQ6KRcJV0/re9QwHncgaRFLCqz+HiwqmgfjR424uTD6v5YJocL6ebC+c32Xb
4Jc8HFj+2t1bZcYb7xXmrIRVfMYWFRX1+xOtxsYc9IsYz2Hw88yhFrBISXUTsVZU
iDIuviaNMxl+tFQUvMOjPhojX8gVIt/88tFChvE2kgM/4AdF7UnZOmOk7+7zTvRp
AphUQrD+tjvM8903JoigSTFJvTQL46LclIWCeYj6XosbVNYPd50usExGjvdCNGSk
MVZGYGFLejaKkSrkYRht18FKSsvvEI2OjEHW2YZzTUJqxMmyZF06yE9o7D0=
-----END CERTIFICATE-----