Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f8fd0b35-3dd9-4f60-972b-d93a3f570511.roa
File:                     f8fd0b35-3dd9-4f60-972b-d93a3f570511.roa (raw, json)
Hash identifier:          LSakovCq+ZucGxBfeXRqzN6/G3LV86TlKOIb86MAhHM=
Subject key identifier:   7A:83:2D:0B:32:8A:F5:BD:DB:74:B3:10:0C:C5:9E:73:A6:58:E1:60
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       541115D5F3F7E1C44E8107147D6A31B4E34191ED
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f8fd0b35-3dd9-4f60-972b-d93a3f570511.roa
Signing time:             Sun 24 Nov 2024 00:00:00 +0000
ROA not before:           Sun 24 Nov 2024 00:00:00 +0000
ROA not after:            Sun 29 Dec 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:11:15:d5:f3:f7:e1:c4:4e:81:07:14:7d:6a:31:b4:e3:41:91:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 24 00:00:00 2024 GMT
            Not After : Dec 29 23:59:59 2024 GMT
        Subject: serialNumber=b1f95111f642dd6f144b471c1be5b86723989c9d5168bf59741611b4058fd0c4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:e8:81:ca:42:71:81:b7:65:ab:89:cb:d8:
                    cf:38:00:f0:ff:fc:e5:88:0d:f5:a1:fa:ea:c2:c0:
                    65:cf:14:27:3f:03:06:cd:54:94:9f:c8:72:03:6b:
                    0f:35:77:f3:90:c4:7c:61:f6:95:c4:be:bb:c9:cd:
                    5c:20:fb:59:7a:be:ec:6e:0d:26:96:7e:1b:25:28:
                    52:bb:1f:c8:6a:26:d4:30:3a:07:c5:93:52:27:71:
                    a1:60:6a:2d:3c:0c:0c:63:ce:43:54:c9:29:c5:5c:
                    d8:9c:49:04:19:7a:04:b3:ff:cc:0a:f5:f1:c5:b5:
                    94:4d:31:78:f0:73:5c:90:46:87:f7:38:7c:7c:b3:
                    e4:f1:6d:c5:0b:d7:ba:24:c5:26:40:2e:54:8a:3d:
                    c3:30:52:0c:23:b9:2b:9c:97:0b:1a:7f:ee:fc:94:
                    51:51:90:bd:f7:93:81:2c:74:ce:e3:7e:00:27:80:
                    f3:78:9a:15:3e:c7:a9:f8:bc:3b:8e:d8:07:35:52:
                    c3:de:a4:71:5f:73:57:59:e0:0f:46:13:84:99:5f:
                    eb:d3:cc:fe:2f:81:84:7c:aa:cb:93:24:cb:47:5e:
                    53:e2:4e:72:2d:55:1f:83:55:87:8c:64:c7:38:cb:
                    9a:4f:43:14:33:09:4b:83:2c:2a:e8:d2:d7:e0:7b:
                    32:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:83:2D:0B:32:8A:F5:BD:DB:74:B3:10:0C:C5:9E:73:A6:58:E1:60
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f8fd0b35-3dd9-4f60-972b-d93a3f570511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:3c:21:e3:15:99:40:90:3e:f4:52:c3:c8:52:a2:f1:55:f0:
         54:0a:95:78:ff:66:d6:6b:b4:81:86:67:ab:f3:65:ae:ba:be:
         78:3c:89:01:46:53:77:99:d5:a4:e9:a0:51:c2:eb:8d:03:13:
         e2:ed:29:32:35:87:fb:48:3b:1e:9a:70:38:d8:8a:c7:ad:74:
         63:0b:f6:b1:b5:7c:29:bf:3d:97:60:7e:4a:3c:16:af:3a:ca:
         6a:a4:ba:1b:5e:82:e9:88:44:de:d3:8a:86:4e:ca:3d:49:34:
         1e:c4:96:e8:d7:cc:89:29:68:ed:76:2c:95:d8:77:42:6d:d8:
         5c:1a:7a:a2:a9:35:58:cd:e4:41:b2:03:05:87:d2:3f:0d:30:
         13:7d:90:cd:3e:e2:ad:f3:be:ae:ba:0d:bd:f5:fc:86:53:4b:
         41:08:df:68:08:23:53:d0:fe:ce:7b:5a:34:79:b5:ed:00:16:
         67:ea:bb:06:fe:4c:af:35:66:c8:c1:46:e1:5c:9e:e6:c0:a2:
         25:20:d4:c6:c3:b4:04:69:e5:45:ec:3a:ed:66:76:68:60:cf:
         77:e9:82:9c:eb:b3:60:46:7b:60:67:36:af:66:bc:82:78:d4:
         d5:f5:3a:51:92:b2:9a:4b:0d:e1:ba:f3:36:61:e7:62:3c:53:
         d3:2a:bc:3a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVBEV1fP34cROgQcUfWoxtONBke0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMTI0MDAwMDAwWhcNMjQxMjI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMWY5NTExMWY2NDJkZDZmMTQ0YjQ3MWMxYmU1Yjg2NzIz
OTg5YzlkNTE2OGJmNTk3NDE2MTFiNDA1OGZkMGM0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCw0eiBykJxgbdlq4nL2M84APD//OWIDfWh+urCwGXPFCc/
AwbNVJSfyHIDaw81d/OQxHxh9pXEvrvJzVwg+1l6vuxuDSaWfhslKFK7H8hqJtQw
OgfFk1IncaFgai08DAxjzkNUySnFXNicSQQZegSz/8wK9fHFtZRNMXjwc1yQRof3
OHx8s+TxbcUL17okxSZALlSKPcMwUgwjuSuclwsaf+78lFFRkL33k4EsdM7jfgAn
gPN4mhU+x6n4vDuO2Ac1UsPepHFfc1dZ4A9GE4SZX+vTzP4vgYR8qsuTJMtHXlPi
TnItVR+DVYeMZMc4y5pPQxQzCUuDLCro0tfgezKrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUeoMtCzKK9b3bdLMQDMWec6ZY4WAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Y4ZmQwYjM1LTNkZDktNGY2MC05NzJiLWQ5M2EzZjU3MDUxMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJs8IeMVmUCQPvRSw8hSovFV8FQK
lXj/ZtZrtIGGZ6vzZa66vng8iQFGU3eZ1aTpoFHC640DE+LtKTI1h/tIOx6acDjY
isetdGML9rG1fCm/PZdgfko8Fq86ymqkuhtegumIRN7TioZOyj1JNB7ElujXzIkp
aO12LJXYd0Jt2FwaeqKpNVjN5EGyAwWH0j8NMBN9kM0+4q3zvq66Db31/IZTS0EI
32gII1PQ/s57WjR5te0AFmfquwb+TK81ZsjBRuFcnubAoiUg1MbDtARp5UXsOu1m
dmhgz3fpgpzrs2BGe2BnNq9mvIJ41NX1OlGSsppLDeG68zZh52I8U9MqvDo=
-----END CERTIFICATE-----