Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b55a4397-55a8-44da-8134-5a439d2611bc.roa
File:                     b55a4397-55a8-44da-8134-5a439d2611bc.roa (raw, json)
Hash identifier:          jXBEFRKiGF/BUIN5B+2KsnGKvJTLrw2moap9ZnydnA8=
Subject key identifier:   95:6C:90:AA:C3:54:38:1C:8D:E2:09:7A:83:3F:95:10:FA:AC:0D:70
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1B3081BDA2798FB5CCCCF44BE2A639CE5B0E6CFB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b55a4397-55a8-44da-8134-5a439d2611bc.roa
Signing time:             Wed 24 Jan 2024 00:00:00 +0000
ROA not before:           Wed 24 Jan 2024 00:00:00 +0000
ROA not after:            Wed 28 Feb 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:30:81:bd:a2:79:8f:b5:cc:cc:f4:4b:e2:a6:39:ce:5b:0e:6c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan 24 00:00:00 2024 GMT
            Not After : Feb 28 23:59:59 2024 GMT
        Subject: serialNumber=63bd805af5b01c23224d55123e5f79fd4a183cc822dfeb0010853fdaa2de24f7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:63:65:9a:37:23:41:d8:ba:46:10:bb:2c:
                    ce:5e:91:54:fc:bd:fb:c5:97:6e:17:a6:85:dd:f1:
                    6f:9d:03:7b:a9:bf:04:cf:a3:b3:72:bb:a2:d1:a3:
                    a6:1a:79:85:31:84:66:c1:91:d7:48:0b:8e:22:b1:
                    a9:4a:01:fb:c7:30:9e:5e:a8:e7:6d:94:54:6c:bd:
                    03:5d:2c:d1:13:78:cf:c2:a7:8b:73:44:cd:a4:44:
                    f1:a3:66:e8:77:4c:df:88:f2:75:b2:90:16:ad:8d:
                    69:af:04:bd:c7:59:ef:83:d4:6a:91:5e:60:0f:09:
                    3b:51:69:13:88:bc:ab:ff:68:cb:fe:0a:e1:b4:b1:
                    34:94:76:e8:d6:38:32:f2:f9:f3:15:a5:ba:ef:31:
                    a3:c1:e3:ee:9d:27:0f:94:02:d3:59:e6:8a:f7:40:
                    fa:ad:ef:96:d5:b3:b4:89:44:9a:97:71:a4:45:f2:
                    73:ad:ce:d7:8b:9e:33:80:f3:b8:6e:6e:f8:19:08:
                    10:f2:2e:ed:6d:31:eb:29:da:4c:20:29:45:94:47:
                    76:4d:db:48:00:67:9a:7c:de:5a:21:96:11:9b:e9:
                    16:28:59:56:d1:c0:7c:0b:65:4d:f6:fb:cc:37:4d:
                    42:52:b8:be:4f:b4:2e:57:9f:e7:6a:2b:11:f4:57:
                    6f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6C:90:AA:C3:54:38:1C:8D:E2:09:7A:83:3F:95:10:FA:AC:0D:70
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b55a4397-55a8-44da-8134-5a439d2611bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:df:a9:0d:b2:b2:21:ae:87:d7:39:e0:fd:74:55:f2:33:28:
         94:e4:05:1f:d0:fc:18:7b:f2:59:ec:1f:54:87:b7:15:48:0d:
         50:65:6a:c9:7e:d8:3a:65:d2:47:66:98:05:7c:81:eb:3a:6b:
         38:8b:07:25:a1:ef:98:fc:6f:43:f3:8c:2e:a9:2f:d3:4d:76:
         2e:7f:bd:90:f6:18:af:82:61:aa:76:66:0c:df:05:37:f2:f8:
         66:5a:4f:46:ad:90:b7:c7:16:56:31:f1:32:88:24:25:25:36:
         96:86:40:86:83:f9:a9:fd:c0:0b:74:f8:a9:91:21:07:9b:5c:
         76:f6:9c:0a:ba:2c:c1:3f:11:8f:7e:34:ad:a2:7d:62:d8:3a:
         1d:2f:73:66:4a:1c:8d:9b:00:95:c8:5b:58:46:9c:b5:0e:8a:
         23:a6:58:ad:c6:31:ef:22:7c:3a:97:86:e7:07:53:c4:70:26:
         cf:a7:64:e7:c2:70:74:d8:41:5a:70:43:8d:d7:fc:ca:be:0a:
         ae:35:d5:7a:8b:d0:25:d2:8d:a1:a6:79:d5:86:bd:e2:1c:60:
         80:8e:0a:b0:05:1b:c1:00:df:4d:53:40:b3:81:84:de:01:db:
         96:f0:dd:e8:fe:18:e3:bc:63:8f:30:78:e0:e9:8e:bd:54:fd:
         57:64:31:f6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGzCBvaJ5j7XMzPRL4qY5zlsObPswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMTI0MDAwMDAwWhcNMjQwMjI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A2M2JkODA1YWY1YjAxYzIzMjI0ZDU1MTIzZTVmNzlmZDRh
MTgzY2M4MjJkZmViMDAxMDg1M2ZkYWEyZGUyNGY3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuumNlmjcjQdi6RhC7LM5ekVT8vfvFl24XpoXd8W+dA3up
vwTPo7Nyu6LRo6YaeYUxhGbBkddIC44isalKAfvHMJ5eqOdtlFRsvQNdLNETeM/C
p4tzRM2kRPGjZuh3TN+I8nWykBatjWmvBL3HWe+D1GqRXmAPCTtRaROIvKv/aMv+
CuG0sTSUdujWODLy+fMVpbrvMaPB4+6dJw+UAtNZ5or3QPqt75bVs7SJRJqXcaRF
8nOtzteLnjOA87hubvgZCBDyLu1tMesp2kwgKUWUR3ZN20gAZ5p83lohlhGb6RYo
WVbRwHwLZU32+8w3TUJSuL5PtC5Xn+dqKxH0V291AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUlWyQqsNUOByN4gl6gz+VEPqsDXAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2I1NWE0Mzk3LTU1YTgtNDRkYS04MTM0LTVhNDM5ZDI2MTFiYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAD7fqQ2ysiGuh9c54P10VfIzKJTk
BR/Q/Bh78lnsH1SHtxVIDVBlasl+2Dpl0kdmmAV8ges6aziLByWh75j8b0PzjC6p
L9NNdi5/vZD2GK+CYap2ZgzfBTfy+GZaT0atkLfHFlYx8TKIJCUlNpaGQIaD+an9
wAt0+KmRIQebXHb2nAq6LME/EY9+NK2ifWLYOh0vc2ZKHI2bAJXIW1hGnLUOiiOm
WK3GMe8ifDqXhucHU8RwJs+nZOfCcHTYQVpwQ43X/Mq+Cq411XqL0CXSjaGmedWG
veIcYICOCrAFG8EA301TQLOBhN4B25bw3ej+GOO8Y48weODpjr1U/VdkMfY=
-----END CERTIFICATE-----