Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9ee6d78e-b993-445a-b9d1-15ee11a1cadd.roa
File:                     9ee6d78e-b993-445a-b9d1-15ee11a1cadd.roa (raw, json)
Hash identifier:          pnYloWKHV7K6ZMw/9mDiWI39sBJW9F1tf827Lz6IJ8M=
Subject key identifier:   0D:D8:1A:31:FD:B1:4D:40:92:86:61:9F:CD:5D:D8:63:04:FA:03:0D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0A25219765EDFD86F6345285F1AC8C104FA2F693
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9ee6d78e-b993-445a-b9d1-15ee11a1cadd.roa
Signing time:             Fri 16 Jun 2023 00:00:00 +0000
ROA not before:           Fri 16 Jun 2023 00:00:00 +0000
ROA not after:            Fri 21 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:25:21:97:65:ed:fd:86:f6:34:52:85:f1:ac:8c:10:4f:a2:f6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 16 00:00:00 2023 GMT
            Not After : Jul 21 23:59:59 2023 GMT
        Subject: serialNumber=f58fc71552688eeb59aac9731cd67edb3155fccb942c657920aa5e0148f5f699, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:75:b4:8b:6a:c4:50:bf:63:2d:a2:d9:d6:c7:
                    9e:08:73:1f:9f:f0:4c:85:b3:37:bb:cb:b9:17:e0:
                    0a:7b:6a:eb:9a:36:a8:15:57:28:43:75:f3:5c:5d:
                    5c:e1:f8:cf:4d:c9:e7:4a:d5:3b:9b:e4:1d:22:12:
                    eb:eb:00:93:e1:27:01:41:89:2a:9b:d1:7d:66:59:
                    6b:3c:2e:1e:ba:da:69:05:12:99:59:51:97:85:27:
                    58:a6:bb:b0:b3:f0:5f:2d:de:e5:78:0f:fb:4f:92:
                    ca:79:c8:ee:8e:a1:67:57:28:49:81:9d:09:18:92:
                    fb:9d:eb:34:a3:c1:5e:8a:1e:ca:93:d6:d2:fb:9b:
                    c4:ac:fe:df:c0:4c:4f:a6:49:9f:5c:52:ce:0f:5d:
                    a4:2f:a8:e1:13:b1:98:e8:10:24:5b:59:89:63:bc:
                    46:ed:de:8f:5a:df:08:c0:ac:cb:f9:46:1f:8b:39:
                    9e:67:2d:1a:47:63:7a:54:d5:6f:7f:66:06:a2:6e:
                    d0:1a:9e:12:ba:08:41:8f:79:6c:f0:21:0c:44:70:
                    78:27:d3:06:01:0f:66:84:02:b4:3d:b8:18:51:1a:
                    36:77:68:c7:8b:1d:ff:12:82:a1:d5:9e:cf:45:ff:
                    91:a6:2d:7e:46:7f:54:23:bc:38:aa:a6:77:16:8b:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D8:1A:31:FD:B1:4D:40:92:86:61:9F:CD:5D:D8:63:04:FA:03:0D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9ee6d78e-b993-445a-b9d1-15ee11a1cadd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:a4:bb:ee:33:20:6c:58:89:9c:51:31:59:6c:f6:4a:bb:26:
         fd:08:c7:51:7d:76:ad:75:0f:19:cf:51:7e:2f:2b:28:22:b9:
         d4:67:58:c8:5a:90:4d:90:f8:3b:e4:4c:1f:89:f2:25:be:8a:
         ce:0d:e5:04:35:4e:7d:5d:2a:53:c1:6b:35:f1:fa:5c:3c:46:
         4e:ad:a4:3e:6e:c0:62:f1:db:ee:62:b6:95:fd:d6:c9:1c:5b:
         75:57:40:a8:c3:2e:4c:19:7a:b3:24:2b:b3:f5:0a:54:c7:bb:
         c8:41:e6:c3:57:f7:2e:f3:ef:37:a1:de:e3:fa:37:9e:7c:33:
         48:31:47:ba:f4:a4:58:5f:00:a1:08:d6:68:72:6a:58:a3:f3:
         af:8f:5a:0b:ed:71:16:16:de:5c:48:8d:0f:9d:5b:68:e5:3c:
         64:af:fd:33:e5:73:50:b3:77:25:63:2f:27:a0:d7:c1:84:ad:
         f2:ec:80:d7:b4:60:63:c3:ce:e1:5c:19:ae:cd:3e:53:9b:dd:
         bb:95:fe:2b:05:4b:9b:85:b8:8d:bb:a8:31:c1:bd:13:36:a6:
         59:b6:da:45:6f:d5:7f:c0:fc:95:c2:58:6b:de:87:e1:c9:f4:
         81:d4:4e:5a:cd:de:16:7e:d9:7c:79:0f:16:21:50:97:3a:e9:
         45:a5:65:8e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCiUhl2Xt/Yb2NFKF8ayMEE+i9pMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjE2MDAwMDAwWhcNMjMwNzIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNThmYzcxNTUyNjg4ZWViNTlhYWM5NzMxY2Q2N2VkYjMx
NTVmY2NiOTQyYzY1NzkyMGFhNWUwMTQ4ZjVmNjk5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDhdbSLasRQv2MtotnWx54Icx+f8EyFsze7y7kX4Ap7auua
NqgVVyhDdfNcXVzh+M9NyedK1Tub5B0iEuvrAJPhJwFBiSqb0X1mWWs8Lh662mkF
EplZUZeFJ1imu7Cz8F8t3uV4D/tPksp5yO6OoWdXKEmBnQkYkvud6zSjwV6KHsqT
1tL7m8Ss/t/ATE+mSZ9cUs4PXaQvqOETsZjoECRbWYljvEbt3o9a3wjArMv5Rh+L
OZ5nLRpHY3pU1W9/ZgaibtAanhK6CEGPeWzwIQxEcHgn0wYBD2aEArQ9uBhRGjZ3
aMeLHf8SgqHVns9F/5GmLX5Gf1QjvDiqpncWiz73AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDdgaMf2xTUCShmGfzV3YYwT6Aw0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzllZTZkNzhlLWI5OTMtNDQ1YS1iOWQxLTE1ZWUxMWExY2FkZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIiku+4zIGxYiZxRMVls9kq7Jv0I
x1F9dq11DxnPUX4vKygiudRnWMhakE2Q+DvkTB+J8iW+is4N5QQ1Tn1dKlPBazXx
+lw8Rk6tpD5uwGLx2+5itpX91skcW3VXQKjDLkwZerMkK7P1ClTHu8hB5sNX9y7z
7zeh3uP6N558M0gxR7r0pFhfAKEI1mhyalij86+PWgvtcRYW3lxIjQ+dW2jlPGSv
/TPlc1CzdyVjLyeg18GErfLsgNe0YGPDzuFcGa7NPlOb3buV/isFS5uFuI27qDHB
vRM2plm22kVv1X/A/JXCWGveh+HJ9IHUTlrN3hZ+2Xx5DxYhUJc66UWlZY4=
-----END CERTIFICATE-----