Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9c2f7866-d318-4dee-9ce5-dfd051f2e065.roa
File:                     9c2f7866-d318-4dee-9ce5-dfd051f2e065.roa (raw, json)
Hash identifier:          Z4TYD0xpxVnZlg5GYmI8/A4DemO4PMbNVnJS5d/q+ss=
Subject key identifier:   C2:02:0D:DD:0A:03:89:34:22:D8:3E:35:E8:86:E4:7E:E9:93:91:87
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       22E88C26942E137E9D7861167CBB44DF9440D839
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9c2f7866-d318-4dee-9ce5-dfd051f2e065.roa
Signing time:             Tue 22 Oct 2024 00:00:00 +0000
ROA not before:           Tue 22 Oct 2024 00:00:00 +0000
ROA not after:            Tue 26 Nov 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e8:8c:26:94:2e:13:7e:9d:78:61:16:7c:bb:44:df:94:40:d8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 22 00:00:00 2024 GMT
            Not After : Nov 26 23:59:59 2024 GMT
        Subject: serialNumber=bdb53400edc37ef83451303c208dbfc6a98f6cae1857102e0b59146d7d533c6c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:f7:07:5f:e9:5c:15:e7:e9:a6:90:75:df:
                    ba:4d:12:71:fe:0b:c4:04:e9:e3:e4:b0:a2:4f:cd:
                    78:b6:a4:39:08:c4:a9:ef:53:f5:59:6b:39:63:ae:
                    11:23:d6:93:c5:45:c1:b3:07:8b:67:3d:2f:6e:91:
                    b1:d6:8e:ec:e9:83:02:2c:7b:10:9d:cc:49:35:07:
                    27:4c:62:dd:30:c5:61:2f:a5:57:cc:61:68:5a:16:
                    bc:20:aa:d6:e0:82:75:eb:9b:f3:ca:66:cb:9f:24:
                    07:9c:53:1d:ad:6d:a0:84:51:40:d2:55:10:45:ca:
                    fd:ed:e7:dd:55:1f:ee:ab:ba:26:25:f1:1c:09:d8:
                    b1:5a:e1:ca:e2:19:3c:fa:65:26:bf:df:8c:cc:db:
                    2a:77:56:d9:34:11:84:48:65:99:17:9f:63:79:2e:
                    3c:b3:fd:f5:e0:71:de:ed:51:e6:63:59:fd:57:1d:
                    e3:1e:ab:1b:8c:2d:e9:bf:f1:df:9f:92:83:a7:eb:
                    1a:ca:04:ed:b3:84:f7:7e:3c:ca:6e:3e:6b:2d:7d:
                    14:1a:6b:05:18:56:b5:4a:23:2f:29:b5:34:6a:ae:
                    ff:46:be:06:5f:5a:b1:e9:27:44:e4:43:b2:14:54:
                    2b:61:65:ea:29:f7:c6:9b:21:92:15:44:99:d8:b2:
                    35:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:02:0D:DD:0A:03:89:34:22:D8:3E:35:E8:86:E4:7E:E9:93:91:87
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9c2f7866-d318-4dee-9ce5-dfd051f2e065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:41:e8:2b:28:c6:35:9c:18:66:e4:91:0e:4c:e2:ed:4b:f2:
         27:fb:ba:59:ec:00:b9:1e:c8:98:56:68:25:e7:b5:7c:57:d3:
         57:3d:76:e0:6c:af:dd:ac:92:b1:13:df:1e:f4:7d:84:1f:a0:
         9c:91:ac:72:a5:20:a7:1a:c7:f0:04:b9:6e:73:f2:5f:5e:e9:
         6d:1f:e5:0b:9b:a1:0b:e5:da:59:b8:ec:a0:07:4a:21:6b:dc:
         0b:df:84:f5:eb:30:96:8e:cc:95:de:fd:62:29:b3:38:56:4f:
         82:1b:99:cb:15:fc:d5:20:54:f4:32:a6:da:f1:aa:b9:a2:37:
         0a:f3:7c:6d:5c:ac:e6:67:28:e2:3f:2b:34:b1:a5:ce:a9:b8:
         14:ef:19:cc:10:a9:ac:3d:2b:00:cf:86:b6:a5:3d:55:98:82:
         e1:17:f0:9c:f6:dc:d0:59:87:d2:be:16:6c:8d:f9:9e:04:c4:
         9f:ca:34:cf:02:dd:ee:29:ba:30:43:0b:e1:67:18:47:5c:3e:
         b2:9d:14:c7:5f:10:5f:8a:52:ea:b9:2b:e3:80:d9:aa:c5:4c:
         69:57:6b:47:b3:83:cc:67:65:0e:f8:27:74:fc:d6:ef:00:10:
         69:98:23:e6:85:f7:ab:7c:8d:57:24:97:98:32:c1:b0:18:58:
         a2:bd:aa:32
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIuiMJpQuE36deGEWfLtE35RA2DkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDIyMDAwMDAwWhcNMjQxMTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BiZGI1MzQwMGVkYzM3ZWY4MzQ1MTMwM2MyMDhkYmZjNmE5
OGY2Y2FlMTg1NzEwMmUwYjU5MTQ2ZDdkNTMzYzZjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdKvcHX+lcFefpppB137pNEnH+C8QE6ePksKJPzXi2pDkI
xKnvU/VZazljrhEj1pPFRcGzB4tnPS9ukbHWjuzpgwIsexCdzEk1BydMYt0wxWEv
pVfMYWhaFrwgqtbggnXrm/PKZsufJAecUx2tbaCEUUDSVRBFyv3t591VH+6ruiYl
8RwJ2LFa4criGTz6ZSa/34zM2yp3Vtk0EYRIZZkXn2N5Ljyz/fXgcd7tUeZjWf1X
HeMeqxuMLem/8d+fkoOn6xrKBO2zhPd+PMpuPmstfRQaawUYVrVKIy8ptTRqrv9G
vgZfWrHpJ0TkQ7IUVCthZeop98abIZIVRJnYsjUnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwgIN3QoDiTQi2D416IbkfumTkYcwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzljMmY3ODY2LWQzMTgtNGRlZS05Y2U1LWRmZDA1MWYyZTA2NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAARB6CsoxjWcGGbkkQ5M4u1L8if7
ulnsALkeyJhWaCXntXxX01c9duBsr92skrET3x70fYQfoJyRrHKlIKcax/AEuW5z
8l9e6W0f5QuboQvl2lm47KAHSiFr3AvfhPXrMJaOzJXe/WIpszhWT4IbmcsV/NUg
VPQyptrxqrmiNwrzfG1crOZnKOI/KzSxpc6puBTvGcwQqaw9KwDPhralPVWYguEX
8Jz23NBZh9K+FmyN+Z4ExJ/KNM8C3e4pujBDC+FnGEdcPrKdFMdfEF+KUuq5K+OA
2arFTGlXa0ezg8xnZQ74J3T81u8AEGmYI+aF96t8jVckl5gywbAYWKK9qjI=
-----END CERTIFICATE-----