Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b93c997b-272c-4568-92c7-1c23306e2891.roa
File:                     b93c997b-272c-4568-92c7-1c23306e2891.roa (raw, json)
Hash identifier:          T4pBBvG8LF9cJdKIIOGDFPl7u2ro/zL+3USBi8r5u5Q=
Subject key identifier:   89:91:3B:47:77:F6:35:3B:8E:76:F7:6B:4B:B0:1E:DB:C1:F5:BF:C2
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       79AA2D0E10BCDD4A239DD36A004D662C67B3F5AD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b93c997b-272c-4568-92c7-1c23306e2891.roa
Signing time:             Tue 10 Dec 2024 00:00:00 +0000
ROA not before:           Tue 10 Dec 2024 00:00:00 +0000
ROA not after:            Tue 14 Jan 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:aa:2d:0e:10:bc:dd:4a:23:9d:d3:6a:00:4d:66:2c:67:b3:f5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 10 00:00:00 2024 GMT
            Not After : Jan 14 23:59:59 2025 GMT
        Subject: serialNumber=a7b7b6c6db3f6bec5d25ebcd068343e1f644cb43c3ce48df06432f5971b4aa65, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f0:c9:b3:35:ea:92:74:fb:a0:97:fd:d1:1c:
                    47:b4:78:4c:6a:e7:4c:15:4f:fb:4e:fd:85:88:7c:
                    c8:3d:34:d9:40:f3:8e:ab:f5:ea:dd:ee:1a:58:17:
                    f8:bb:8d:dc:03:c7:7c:f9:31:a9:fe:c5:4d:cd:60:
                    d1:a3:7d:59:12:90:4e:14:6d:4c:e6:47:9a:f1:ef:
                    6a:eb:b1:70:be:43:bc:58:7a:49:88:0c:69:d5:31:
                    86:c4:e4:08:0a:79:ac:00:79:1b:e5:58:32:b7:3d:
                    7f:7a:95:a3:03:ad:17:58:e6:49:06:7f:4f:ce:d8:
                    02:74:c4:3a:9a:14:f7:4d:2d:8d:0e:7a:cb:58:48:
                    d5:42:ec:4a:ad:1c:58:aa:54:06:92:89:81:9c:50:
                    e4:16:97:e4:82:31:50:b6:c6:e8:fe:e2:73:b0:2b:
                    9f:3b:e3:82:8d:3d:de:62:77:d0:1a:57:fa:5b:4a:
                    60:0d:51:ae:63:ef:d0:cc:13:69:b5:b2:45:7d:f5:
                    22:13:ce:02:df:4e:18:f7:0b:b1:e2:cc:27:e0:ba:
                    f2:a1:6b:64:6d:d2:72:d5:a3:91:1f:fa:50:76:cc:
                    14:0d:94:48:94:61:5a:19:61:bb:f0:80:cf:88:51:
                    df:f5:4f:12:af:95:62:5d:57:89:ae:d8:d0:08:0d:
                    aa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:91:3B:47:77:F6:35:3B:8E:76:F7:6B:4B:B0:1E:DB:C1:F5:BF:C2
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b93c997b-272c-4568-92c7-1c23306e2891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:f1:3b:7d:d6:83:11:b2:60:a6:f4:27:63:08:0e:c0:42:19:
         df:0c:54:5a:53:61:5e:5f:09:66:3c:60:6b:b1:5e:05:73:cf:
         50:22:a4:e8:ba:bb:c7:93:14:19:60:aa:89:98:f2:2d:b8:55:
         a9:70:15:5a:bc:36:b4:95:ff:db:3d:48:59:e9:e2:29:3c:55:
         c9:80:8d:80:3e:a6:76:9d:eb:14:79:d7:cf:30:9f:00:9c:aa:
         bb:aa:4e:a5:25:c5:e1:fa:be:1b:40:20:2e:36:aa:f5:ab:e2:
         e4:e9:2e:21:a0:01:69:81:ae:27:38:cb:ba:32:7d:06:ad:f3:
         db:a3:d4:d2:39:97:cd:f0:39:2b:cf:9a:35:a2:c8:38:c1:fe:
         44:46:68:35:29:24:ff:24:bf:ff:2b:ca:a6:eb:40:80:95:e7:
         e6:94:81:18:73:97:79:ad:99:a4:0f:a8:91:84:91:c3:4a:f8:
         8d:99:7a:d9:b4:49:e6:87:63:52:37:ad:3f:28:16:bb:b4:55:
         58:ce:d6:33:f1:5f:6d:d3:64:7c:4c:06:36:7f:fb:63:fc:47:
         a9:35:17:49:7c:45:53:45:4a:0e:94:00:9b:e0:fd:df:56:4f:
         9f:2e:d6:15:d0:97:2a:13:70:3c:01:8b:a2:3e:0f:47:75:11:
         54:92:6b:a3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeaotDhC83UojndNqAE1mLGez9a0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMjEwMDAwMDAwWhcNMjUwMTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhN2I3YjZjNmRiM2Y2YmVjNWQyNWViY2QwNjgzNDNlMWY2
NDRjYjQzYzNjZTQ4ZGYwNjQzMmY1OTcxYjRhYTY1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDR8MmzNeqSdPugl/3RHEe0eExq50wVT/tO/YWIfMg9NNlA
846r9erd7hpYF/i7jdwDx3z5Man+xU3NYNGjfVkSkE4UbUzmR5rx72rrsXC+Q7xY
ekmIDGnVMYbE5AgKeawAeRvlWDK3PX96laMDrRdY5kkGf0/O2AJ0xDqaFPdNLY0O
estYSNVC7EqtHFiqVAaSiYGcUOQWl+SCMVC2xuj+4nOwK58744KNPd5id9AaV/pb
SmANUa5j79DME2m1skV99SITzgLfThj3C7HizCfguvKha2Rt0nLVo5Ef+lB2zBQN
lEiUYVoZYbvwgM+IUd/1TxKvlWJdV4mu2NAIDaphAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUiZE7R3f2NTuOdvdrS7Ae28H1v8IwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2I5M2M5OTdiLTI3MmMtNDU2OC05MmM3LTFjMjMzMDZlMjg5MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACHxO33WgxGyYKb0J2MIDsBCGd8M
VFpTYV5fCWY8YGuxXgVzz1AipOi6u8eTFBlgqomY8i24ValwFVq8NrSV/9s9SFnp
4ik8VcmAjYA+pnad6xR5188wnwCcqruqTqUlxeH6vhtAIC42qvWr4uTpLiGgAWmB
ric4y7oyfQat89uj1NI5l83wOSvPmjWiyDjB/kRGaDUpJP8kv/8ryqbrQICV5+aU
gRhzl3mtmaQPqJGEkcNK+I2Zetm0SeaHY1I3rT8oFru0VVjO1jPxX23TZHxMBjZ/
+2P8R6k1F0l8RVNFSg6UAJvg/d9WT58u1hXQlyoTcDwBi6I+D0d1EVSSa6M=
-----END CERTIFICATE-----