Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a134fa30-5026-4fcc-b033-e510288320af.roa
File:                     a134fa30-5026-4fcc-b033-e510288320af.roa (raw, json)
Hash identifier:          eHukkx36qgWgKB1w/PqH8ZU2FMPxn0H3UdRXLVF1cqA=
Subject key identifier:   1C:9C:8C:6B:31:05:B4:48:FE:DB:00:4D:B0:D9:82:EC:5C:B7:54:7D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       24500587391AA1BE7AC16F034A2F2BAF3A4747
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a134fa30-5026-4fcc-b033-e510288320af.roa
Signing time:             Sun 16 Jun 2024 00:00:00 +0000
ROA not before:           Sun 16 Jun 2024 00:00:00 +0000
ROA not after:            Sun 21 Jul 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:50:05:87:39:1a:a1:be:7a:c1:6f:03:4a:2f:2b:af:3a:47:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 16 00:00:00 2024 GMT
            Not After : Jul 21 23:59:59 2024 GMT
        Subject: serialNumber=f2fd99bc7fcb6135ff883393b014efefea8a6f193f5e939214718769fec22348, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:78:cb:68:25:0f:b0:ff:4f:90:27:53:d6:
                    22:4a:87:a0:61:61:8f:7c:44:c9:ab:48:34:a5:9d:
                    03:2a:bd:d8:7d:dd:8d:1a:8c:92:fa:86:56:4a:b8:
                    31:d8:8f:8f:d6:2c:68:ae:32:63:2e:92:bb:e6:58:
                    c2:a3:12:8f:ce:39:af:c2:1f:ff:fa:d6:e9:9e:39:
                    6f:03:d5:21:d6:1e:04:b8:78:27:9b:1b:ce:7a:bd:
                    8b:a2:9c:9e:4f:7c:cd:52:e1:4e:75:56:5f:92:5d:
                    54:ce:e7:f4:88:85:9c:f8:fd:48:a6:5b:68:8b:54:
                    89:08:86:80:44:cb:5d:f2:3b:cf:5b:ba:cf:b4:75:
                    74:a4:1b:8d:48:2e:f5:10:36:58:ad:4d:3e:44:0f:
                    a7:2e:83:9e:78:6a:b8:aa:a8:d4:cf:d2:bc:9e:93:
                    82:f6:51:19:bc:fe:5d:92:3a:39:70:3c:92:27:18:
                    0c:7c:ef:ff:4c:3f:b8:89:a3:fc:6a:ff:7f:af:57:
                    a9:79:19:1a:92:4d:02:88:13:58:4e:cf:6b:ab:c6:
                    26:f8:6f:8f:ac:97:4a:76:fb:f3:da:5c:d7:96:96:
                    c2:92:4e:73:25:af:0c:c1:44:d0:5c:6e:9f:cb:48:
                    93:0b:9b:ed:53:1d:20:c6:7f:f2:2f:f2:4b:1f:86:
                    ef:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9C:8C:6B:31:05:B4:48:FE:DB:00:4D:B0:D9:82:EC:5C:B7:54:7D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a134fa30-5026-4fcc-b033-e510288320af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:66:d9:96:70:3d:1c:7a:e8:48:8b:94:36:5d:b1:05:8a:bf:
         39:27:e3:56:db:f3:54:e7:d0:44:6f:d2:1f:b6:8f:08:62:e9:
         51:72:79:a4:ca:cb:7f:3a:5e:6d:51:c1:92:d4:97:88:a7:e2:
         c9:af:e8:b2:e9:25:00:dd:c3:06:bc:de:58:6f:11:99:85:62:
         ef:ab:86:3c:d9:2c:bb:a7:5a:64:4f:c0:d9:f4:87:6b:2a:61:
         63:0b:29:15:93:17:86:8f:95:0e:2f:79:98:19:65:9c:0a:36:
         93:13:b3:80:b8:45:71:1b:01:04:f3:a3:37:cf:a7:7e:f8:ee:
         e5:4f:6c:51:b3:8c:f3:97:23:1b:7d:41:a2:a2:0c:46:6f:6f:
         d4:d0:ba:13:e4:6f:37:74:9a:ca:35:17:29:95:55:f1:31:aa:
         37:9a:17:b3:9a:15:26:25:15:52:3b:9b:82:cc:5b:a9:89:fd:
         5d:d1:af:6f:98:7d:e6:e2:36:5a:55:42:0a:da:ec:07:3f:7c:
         70:e0:90:cb:3d:0a:69:c7:94:90:38:66:f5:f0:c8:df:75:2b:
         27:12:65:51:30:5e:b7:01:e7:6e:e7:e0:30:ee:85:5b:1b:b7:
         82:57:4c:5b:bb:d8:cd:d6:5d:20:29:70:36:15:80:b9:43:e3:
         70:81:9a:f6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITJFAFhzkaob56wW8DSi8rrzpHRzANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzIyNzhhYWI4NzhmMjY2MmNlMTRlOTA1ZTE4ZWJjYjc1MjJm
OTJiMzY4NGJjNDg2NWI0ZDAeFw0yNDA2MTYwMDAwMDBaFw0yNDA3MjEyMzU5NTla
MHoxSTBHBgNVBAUTQGYyZmQ5OWJjN2ZjYjYxMzVmZjg4MzM5M2IwMTRlZmVmZWE4
YTZmMTkzZjVlOTM5MjE0NzE4NzY5ZmVjMjIzNDgxLTArBgNVBAMTJGMwY2UyM2Vh
LTQzZmMtNGJlNC1iZWVlLWMwMTQ3ODEyMmEwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALsLeMtoJQ+w/0+QJ1PWIkqHoGFhj3xEyatINKWdAyq92H3d
jRqMkvqGVkq4MdiPj9YsaK4yYy6Su+ZYwqMSj845r8If//rW6Z45bwPVIdYeBLh4
J5sbznq9i6Kcnk98zVLhTnVWX5JdVM7n9IiFnPj9SKZbaItUiQiGgETLXfI7z1u6
z7R1dKQbjUgu9RA2WK1NPkQPpy6DnnhquKqo1M/SvJ6TgvZRGbz+XZI6OXA8kicY
DHzv/0w/uImj/Gr/f69XqXkZGpJNAogTWE7Pa6vGJvhvj6yXSnb789pc15aWwpJO
cyWvDMFE0Fxun8tIkwub7VMdIMZ/8i/ySx+G79cCAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBQcnIxrMQW0SP7bAE2w2YLsXLdUfTAfBgNVHSMEGDAWgBRVqN1F2UQT+dGS
9Sxjzoz7xhSWuDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzE0MzNlYmZmLWRm
ZDYtNGM1Yy1iN2ZmLTk5Yzg1MTM5ZDRhOC8yNzhhYWI4NzhmMjY2MmNlMTRlOTA1
ZTE4ZWJjYjc1MjJmOTJiMzY4NGJjNDg2NWI0ZC5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8xNmYxZmZlZS03NDYxLTQ2NzQtYmIwNS1mZGRl
ZmE5YTAyYzYvYTEzNGZhMzAtNTAyNi00ZmNjLWIwMzMtZTUxMDI4ODMyMGFmLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUt
ZmRkZWZhOWEwMmM2L0ptTE9GT2tGNFk2OHQxSXZrck5vUzhTR1cwMC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMckeDANBgkqhkiG9w0BAQsFAAOCAQEAJGbZlnA9HHroSIuUNl2xBYq/OSfj
VtvzVOfQRG/SH7aPCGLpUXJ5pMrLfzpebVHBktSXiKfiya/osuklAN3DBrzeWG8R
mYVi76uGPNksu6daZE/A2fSHayphYwspFZMXho+VDi95mBllnAo2kxOzgLhFcRsB
BPOjN8+nfvju5U9sUbOM85cjG31BoqIMRm9v1NC6E+RvN3SayjUXKZVV8TGqN5oX
s5oVJiUVUjubgsxbqYn9XdGvb5h95uI2WlVCCtrsBz98cOCQyz0KaceUkDhm9fDI
33UrJxJlUTBetwHnbufgMO6FWxu3gldMW7vYzdZdIClwNhWAuUPjcIGa9g==
-----END CERTIFICATE-----