Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/482bd1f3-40cb-4399-8f8f-e828bb2138e0.roa
File:                     482bd1f3-40cb-4399-8f8f-e828bb2138e0.roa (raw, json)
Hash identifier:          Zxzy2/Wp2fpsru6MCrFQuZz5EZhh6hzTrbboSASTUdM=
Subject key identifier:   D1:B5:F2:A2:F5:A5:C6:7A:EA:60:79:F0:43:0B:02:7B:C2:DE:35:62
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       41D11CF3F166E96C2A52A1E7EB72A5C31639610B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/482bd1f3-40cb-4399-8f8f-e828bb2138e0.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d1:1c:f3:f1:66:e9:6c:2a:52:a1:e7:eb:72:a5:c3:16:39:61:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=c749669ecce1aabb56c268735c662f65e990fa5c04630d6e23267b2b6b3ddff5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:91:70:f6:26:d4:ca:d2:39:c8:61:93:23:75:
                    37:2e:43:0c:4c:4e:cd:28:e9:2c:05:0c:74:f7:96:
                    43:05:e5:e9:e6:20:8d:27:ad:45:9b:39:04:1e:41:
                    5d:63:59:dd:15:bf:e5:0a:d8:48:1a:4a:60:93:94:
                    bf:f0:5d:5c:bf:45:cf:52:b4:20:9b:01:ef:e0:80:
                    ac:3f:2e:0d:06:23:71:bb:e4:02:e7:dc:31:9a:ef:
                    ae:e9:2c:af:ac:99:b3:43:b5:0a:57:8e:fe:0a:b0:
                    71:e5:d5:13:ea:e3:a6:77:68:f0:c5:d0:e0:a7:18:
                    ce:71:2f:d8:36:65:ee:a7:96:08:f9:43:ee:a8:9f:
                    06:c2:4c:23:6b:35:c6:f4:e1:6b:77:62:89:e5:49:
                    d7:85:84:c0:7a:49:dc:61:73:94:f7:02:90:d2:a7:
                    e5:50:cb:5f:0a:77:14:58:5f:93:41:be:47:d5:3d:
                    cd:ca:ab:1c:89:92:a5:5b:55:15:46:5e:f3:4c:98:
                    67:fb:6b:c2:b4:8d:d5:f6:b2:78:cb:da:f1:9b:3f:
                    61:0d:9a:11:a7:7a:75:29:46:b2:e3:23:aa:c6:e8:
                    5c:b0:82:e6:4e:60:82:b8:63:8f:48:20:52:99:64:
                    8a:11:bf:f4:67:fa:16:cc:61:0f:53:9d:a8:1d:99:
                    d7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B5:F2:A2:F5:A5:C6:7A:EA:60:79:F0:43:0B:02:7B:C2:DE:35:62
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/482bd1f3-40cb-4399-8f8f-e828bb2138e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:5a:66:6b:6c:e9:ab:94:50:8a:45:98:33:59:91:4a:7c:88:
         16:bb:50:9c:25:40:bf:da:f8:e9:34:8c:59:50:63:f2:8f:55:
         22:81:b3:b4:24:0c:de:b4:82:29:6a:ac:5e:40:62:de:82:5c:
         71:5a:43:41:5b:36:da:1d:e9:7c:71:e5:a7:5e:e1:65:67:86:
         08:ee:f9:68:ef:0f:98:14:9c:86:80:b9:07:71:c8:71:66:9b:
         bc:77:bd:2b:24:49:aa:20:19:96:12:4d:78:23:3b:de:14:ee:
         4b:d5:9f:fd:16:ea:39:57:bd:72:eb:c9:61:12:5d:1a:f9:4a:
         4f:f6:25:9e:fb:26:86:46:4a:13:5b:58:c6:c8:e9:10:5d:a8:
         dd:20:73:9f:81:e6:ef:55:99:df:f4:ff:3d:c2:cb:32:b0:8e:
         37:aa:d7:f2:eb:f8:3d:1a:4d:71:cd:a9:f0:fe:e6:25:4f:31:
         73:df:ed:0d:22:34:e2:27:9a:93:2e:a7:14:3b:d9:a9:46:1f:
         9e:67:ef:04:c8:c5:19:65:06:a6:6c:31:29:f0:9d:37:c9:35:
         64:ce:c6:c1:31:d2:45:45:fb:04:6e:bc:9b:bc:84:c9:e8:2c:
         d1:8b:21:61:ce:1b:20:9d:74:05:5a:e6:9b:91:8f:ba:56:0f:
         35:b1:e9:6a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQdEc8/Fm6WwqUqHn63KlwxY5YQswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjNzQ5NjY5ZWNjZTFhYWJiNTZjMjY4NzM1YzY2MmY2NWU5
OTBmYTVjMDQ2MzBkNmUyMzI2N2IyYjZiM2RkZmY1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgkXD2JtTK0jnIYZMjdTcuQwxMTs0o6SwFDHT3lkMF5enm
II0nrUWbOQQeQV1jWd0Vv+UK2EgaSmCTlL/wXVy/Rc9StCCbAe/ggKw/Lg0GI3G7
5ALn3DGa767pLK+smbNDtQpXjv4KsHHl1RPq46Z3aPDF0OCnGM5xL9g2Ze6nlgj5
Q+6onwbCTCNrNcb04Wt3YonlSdeFhMB6Sdxhc5T3ApDSp+VQy18KdxRYX5NBvkfV
Pc3KqxyJkqVbVRVGXvNMmGf7a8K0jdX2snjL2vGbP2ENmhGnenUpRrLjI6rG6Fyw
guZOYIK4Y49IIFKZZIoRv/Rn+hbMYQ9TnagdmddZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0bXyovWlxnrqYHnwQwsCe8LeNWIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzQ4MmJkMWYzLTQwY2ItNDM5OS04ZjhmLWU4MjhiYjIxMzhlMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALRaZmts6auUUIpFmDNZkUp8iBa7
UJwlQL/a+Ok0jFlQY/KPVSKBs7QkDN60gilqrF5AYt6CXHFaQ0FbNtod6Xxx5ade
4WVnhgju+WjvD5gUnIaAuQdxyHFmm7x3vSskSaogGZYSTXgjO94U7kvVn/0W6jlX
vXLryWESXRr5Sk/2JZ77JoZGShNbWMbI6RBdqN0gc5+B5u9Vmd/0/z3CyzKwjjeq
1/Lr+D0aTXHNqfD+5iVPMXPf7Q0iNOInmpMupxQ72alGH55n7wTIxRllBqZsMSnw
nTfJNWTOxsEx0kVF+wRuvJu8hMnoLNGLIWHOGyCddAVa5puRj7pWDzWx6Wo=
-----END CERTIFICATE-----