Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a680b8b6-df86-40de-9575-a343a3ce4001.roa
File:                     a680b8b6-df86-40de-9575-a343a3ce4001.roa (raw, json)
Hash identifier:          EQLDj/5Dq98+bok3Fb40CA1+u3nbrGpPZGb2R3i79us=
Subject key identifier:   32:4D:F2:89:9A:A2:96:9E:67:4F:85:23:9A:62:DB:9F:29:8B:64:01
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       52A50AD93B78CFE25591A3C4821569E941194E96
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a680b8b6-df86-40de-9575-a343a3ce4001.roa
Signing time:             Sat 14 Dec 2024 00:00:00 +0000
ROA not before:           Sat 14 Dec 2024 00:00:00 +0000
ROA not after:            Sat 18 Jan 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a5:0a:d9:3b:78:cf:e2:55:91:a3:c4:82:15:69:e9:41:19:4e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 14 00:00:00 2024 GMT
            Not After : Jan 18 23:59:59 2025 GMT
        Subject: serialNumber=1d4a7cf97c4fdd8887524e6528803ef51c8e5305f153dd1e8a3a83e1d9bed5f2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:4f:5c:66:e6:5d:32:c5:6e:a9:23:1c:8e:
                    51:0e:1a:23:cf:8f:79:c5:6e:70:4b:fa:5c:a3:8b:
                    68:61:fc:ea:16:cd:b3:bc:46:0c:02:2f:53:85:d8:
                    7c:e7:f0:af:b8:dd:ac:80:bb:06:9d:c8:b2:e7:bd:
                    9d:7e:fc:cc:eb:ec:c7:14:e3:9c:cf:34:78:91:f3:
                    8d:a3:68:bd:34:d2:e7:3d:6e:cb:e2:aa:e2:f1:d8:
                    75:81:56:71:f4:46:fe:94:93:1c:cc:87:94:a8:38:
                    7a:c0:52:f8:f8:14:53:4e:90:d0:f2:f2:6f:41:cc:
                    5a:1f:72:57:1d:0f:a1:b7:db:f7:e8:ad:92:de:93:
                    f7:4c:82:56:a8:f6:0d:4f:5e:9b:c5:a2:da:d8:1a:
                    04:f5:31:b6:14:fb:36:e7:40:62:99:18:97:97:8b:
                    af:61:53:02:d0:38:46:13:5f:ec:67:3b:b6:b3:ea:
                    30:c2:1f:9c:6a:01:eb:f6:6e:ed:84:a5:75:0c:ca:
                    15:e6:7e:37:b3:ab:c9:7b:8a:a2:74:83:29:83:c7:
                    39:ba:c0:4d:a5:84:0f:a2:8e:eb:e5:a1:c4:ac:5b:
                    95:de:2e:5a:9c:80:b3:69:c1:e7:a4:70:f6:a4:05:
                    8e:39:21:71:04:c2:33:3d:86:95:db:fd:d1:87:bf:
                    d4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4D:F2:89:9A:A2:96:9E:67:4F:85:23:9A:62:DB:9F:29:8B:64:01
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a680b8b6-df86-40de-9575-a343a3ce4001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:05:37:e8:79:5d:e9:55:e9:e2:32:1d:6f:00:11:be:25:cf:
         99:cf:73:24:7f:be:39:65:ba:60:fd:a9:c9:86:7b:c8:5d:4a:
         94:79:cb:50:8e:ac:0b:cb:2f:49:6c:dd:7b:1e:27:7d:11:cd:
         4c:df:75:d3:ee:10:3a:0f:a1:43:f6:84:03:13:ae:d2:6b:dc:
         ec:84:b9:fd:1c:27:ab:75:e7:55:ac:30:52:e2:c8:6b:91:73:
         e3:f4:4e:c3:b4:4c:b0:12:14:b1:d9:f5:53:d9:68:7a:b5:8b:
         36:c9:bc:ab:b7:7d:38:83:16:ae:14:2a:e4:a4:6c:cb:7f:9b:
         f8:85:60:35:c3:f8:e7:0c:d1:05:35:76:e8:04:14:a3:62:ab:
         74:9b:46:41:26:01:10:e8:76:00:3f:13:67:b5:d0:f5:e0:45:
         ad:2d:7d:11:79:7d:d7:4c:51:ee:40:6d:44:a6:ff:29:2a:3a:
         ae:20:19:25:f8:c8:b8:28:17:b5:95:d6:f1:b8:b3:b3:c3:9a:
         46:ed:21:47:35:04:e6:36:63:4d:0a:07:b2:ee:eb:f2:43:a2:
         ce:60:86:2e:e0:1d:58:9b:96:64:35:25:1e:52:2e:1b:20:c6:
         50:70:9f:d7:bb:9a:0a:9c:75:08:4e:6f:da:39:c6:6c:79:54:
         ed:e1:b1:ec
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUqUK2Tt4z+JVkaPEghVp6UEZTpYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMjE0MDAwMDAwWhcNMjUwMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZDRhN2NmOTdjNGZkZDg4ODc1MjRlNjUyODgwM2VmNTFj
OGU1MzA1ZjE1M2RkMWU4YTNhODNlMWQ5YmVkNWYyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDTE9cZuZdMsVuqSMcjlEOGiPPj3nFbnBL+lyji2hh/OoW
zbO8RgwCL1OF2Hzn8K+43ayAuwadyLLnvZ1+/Mzr7McU45zPNHiR842jaL000uc9
bsviquLx2HWBVnH0Rv6UkxzMh5SoOHrAUvj4FFNOkNDy8m9BzFofclcdD6G32/fo
rZLek/dMglao9g1PXpvFotrYGgT1MbYU+zbnQGKZGJeXi69hUwLQOEYTX+xnO7az
6jDCH5xqAev2bu2EpXUMyhXmfjezq8l7iqJ0gymDxzm6wE2lhA+ijuvlocSsW5Xe
LlqcgLNpweekcPakBY45IXEEwjM9hpXb/dGHv9TNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUMk3yiZqilp5nT4UjmmLbnymLZAEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2E2ODBiOGI2LWRmODYtNDBkZS05NTc1LWEzNDNhM2NlNDAwMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADgFN+h5XelV6eIyHW8AEb4lz5nP
cyR/vjllumD9qcmGe8hdSpR5y1COrAvLL0ls3XseJ30RzUzfddPuEDoPoUP2hAMT
rtJr3OyEuf0cJ6t151WsMFLiyGuRc+P0TsO0TLASFLHZ9VPZaHq1izbJvKu3fTiD
Fq4UKuSkbMt/m/iFYDXD+OcM0QU1dugEFKNiq3SbRkEmARDodgA/E2e10PXgRa0t
fRF5fddMUe5AbUSm/ykqOq4gGSX4yLgoF7WV1vG4s7PDmkbtIUc1BOY2Y00KB7Lu
6/JDos5ghi7gHViblmQ1JR5SLhsgxlBwn9e7mgqcdQhOb9o5xmx5VO3hsew=
-----END CERTIFICATE-----