Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b2b6e843-8e8c-47ff-ac67-6ba97bd9e322.roa
File:                     b2b6e843-8e8c-47ff-ac67-6ba97bd9e322.roa (raw, json)
Hash identifier:          podz3S6iaMGeCH4KgtEnnHIJF63RRY/XYYlCdetrfVs=
Subject key identifier:   2E:93:D7:BF:48:CE:55:F8:F3:28:34:7B:FE:FB:1D:A5:D0:3E:88:55
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       21EC951D05ACABEF990729081A176921ECC651AB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b2b6e843-8e8c-47ff-ac67-6ba97bd9e322.roa
Signing time:             Fri 16 Aug 2024 00:00:00 +0000
ROA not before:           Fri 16 Aug 2024 00:00:00 +0000
ROA not after:            Fri 20 Sep 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ec:95:1d:05:ac:ab:ef:99:07:29:08:1a:17:69:21:ec:c6:51:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 16 00:00:00 2024 GMT
            Not After : Sep 20 23:59:59 2024 GMT
        Subject: serialNumber=0f64c4777fcd19782ecc582388283183a037c6b5c69371a3d6cb559804d9832f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:08:df:e3:bc:51:81:ff:02:39:f3:22:8c:fd:
                    4e:35:4e:80:ec:3f:46:f9:d3:0f:c3:6e:da:c5:49:
                    1e:f9:a7:52:88:e8:64:73:bc:3c:89:f7:cb:39:e0:
                    d9:94:7d:f7:78:a2:6c:95:2a:34:e0:71:9e:94:3f:
                    5b:2d:5a:43:e6:0f:88:23:d4:e6:c2:2a:7b:d4:1c:
                    2a:e2:71:ba:26:7c:40:78:0c:ab:11:09:73:3d:64:
                    22:ca:2c:98:2a:91:ce:78:45:9a:d3:77:03:ce:a3:
                    ab:d3:5a:6c:ed:e2:9e:ae:5f:cb:39:ef:b4:0c:5a:
                    c3:28:f9:2e:e3:10:e7:5d:5e:25:4f:61:00:13:9f:
                    3a:14:31:35:fc:71:19:a3:22:65:90:3d:6c:1f:2d:
                    0e:11:a4:fa:30:cf:25:5b:21:33:18:a5:c3:c1:8d:
                    8b:01:bb:c4:02:66:cd:d3:45:85:e9:a5:85:9d:3f:
                    f0:ae:8e:d6:48:22:ca:bb:f0:24:f6:37:ed:13:26:
                    5c:91:fd:65:9a:ee:16:fd:5d:57:09:c5:f3:d3:a3:
                    81:e9:d6:44:1f:49:cb:6c:00:1c:90:43:8f:f2:9e:
                    a3:48:88:2a:e9:cf:b7:ef:3e:20:5d:73:01:29:db:
                    dd:3b:de:e9:d3:24:b4:bf:e8:cd:6b:95:23:fc:cc:
                    68:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:93:D7:BF:48:CE:55:F8:F3:28:34:7B:FE:FB:1D:A5:D0:3E:88:55
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b2b6e843-8e8c-47ff-ac67-6ba97bd9e322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:4c:ea:ba:c4:6d:92:0a:53:74:e1:11:ba:02:d8:9f:21:5c:
         57:87:0e:0b:4a:f1:71:11:32:d3:a0:f8:c9:7e:3c:80:39:52:
         d5:40:85:3a:ea:6c:9f:fb:d5:a1:db:61:ed:f2:ce:01:1d:c8:
         75:3e:88:52:39:b9:83:fe:5c:65:f5:7b:81:c2:73:ce:0f:e0:
         cb:01:fc:c3:d5:7d:ec:dd:d6:53:61:08:b2:3f:d9:68:5a:2a:
         8b:d6:79:9e:32:4d:e2:10:58:d4:10:75:ba:b2:b1:49:cb:b0:
         13:c4:a2:72:84:80:f9:ae:d0:0d:67:bc:fd:6c:b8:79:e3:2a:
         01:ea:fa:6e:a4:86:75:92:4b:b0:2a:ae:a8:7f:64:e3:85:57:
         8b:7c:90:53:20:64:6b:01:e2:fd:47:27:8e:2f:a7:05:a2:9a:
         6e:b0:92:7c:c2:62:fe:f5:e6:2a:da:c1:b8:24:82:1f:d1:16:
         ef:ae:ab:24:f9:4d:aa:10:d1:50:67:03:84:53:a6:8b:e9:ea:
         10:fa:f8:80:b9:d8:af:45:8d:35:fd:2d:30:c8:4f:a3:06:6f:
         a4:2f:d6:7f:49:61:df:56:af:03:3d:c0:52:1b:41:08:e9:cb:
         49:d9:d9:be:14:e6:28:35:43:a2:15:14:95:9e:cb:99:06:56:
         dc:2b:b6:dd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIeyVHQWsq++ZBykIGhdpIezGUaswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwODE2MDAwMDAwWhcNMjQwOTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AwZjY0YzQ3NzdmY2QxOTc4MmVjYzU4MjM4ODI4MzE4M2Ew
MzdjNmI1YzY5MzcxYTNkNmNiNTU5ODA0ZDk4MzJmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDdCN/jvFGB/wI58yKM/U41ToDsP0b50w/DbtrFSR75p1KI
6GRzvDyJ98s54NmUffd4omyVKjTgcZ6UP1stWkPmD4gj1ObCKnvUHCricbomfEB4
DKsRCXM9ZCLKLJgqkc54RZrTdwPOo6vTWmzt4p6uX8s577QMWsMo+S7jEOddXiVP
YQATnzoUMTX8cRmjImWQPWwfLQ4RpPowzyVbITMYpcPBjYsBu8QCZs3TRYXppYWd
P/CujtZIIsq78CT2N+0TJlyR/WWa7hb9XVcJxfPTo4Hp1kQfSctsAByQQ4/ynqNI
iCrpz7fvPiBdcwEp29073unTJLS/6M1rlSP8zGhFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQULpPXv0jOVfjzKDR7/vsdpdA+iFUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2IyYjZlODQzLThlOGMtNDdmZi1hYzY3LTZiYTk3YmQ5ZTMyMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACJM6rrEbZIKU3ThEboC2J8hXFeH
DgtK8XERMtOg+Ml+PIA5UtVAhTrqbJ/71aHbYe3yzgEdyHU+iFI5uYP+XGX1e4HC
c84P4MsB/MPVfezd1lNhCLI/2WhaKovWeZ4yTeIQWNQQdbqysUnLsBPEonKEgPmu
0A1nvP1suHnjKgHq+m6khnWSS7Aqrqh/ZOOFV4t8kFMgZGsB4v1HJ44vpwWimm6w
knzCYv715irawbgkgh/RFu+uqyT5TaoQ0VBnA4RTpovp6hD6+IC52K9FjTX9LTDI
T6MGb6Qv1n9JYd9WrwM9wFIbQQjpy0nZ2b4U5ig1Q6IVFJWey5kGVtwrtt0=
-----END CERTIFICATE-----