Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/498bbafa-8b48-40c2-9df9-e0be24b0ddaf.roa
File:                     498bbafa-8b48-40c2-9df9-e0be24b0ddaf.roa (raw, json)
Hash identifier:          LJucTCwFqlrNZGKQSa4zb3mrkC+/1fg0Z1poWzTrBek=
Subject key identifier:   B5:EF:41:AA:57:B2:7B:83:23:DA:55:9F:AF:03:FC:A6:C4:17:5E:28
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       34E8E4A3D383BBF26CEB260EABBC457AB672245A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/498bbafa-8b48-40c2-9df9-e0be24b0ddaf.roa
Signing time:             Sat 17 Jun 2023 00:00:00 +0000
ROA not before:           Sat 17 Jun 2023 00:00:00 +0000
ROA not after:            Sat 22 Jul 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e8:e4:a3:d3:83:bb:f2:6c:eb:26:0e:ab:bc:45:7a:b6:72:24:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 17 00:00:00 2023 GMT
            Not After : Jul 22 23:59:59 2023 GMT
        Subject: serialNumber=fc645c68e1fa11c5b13af2fc042f8e3470ee5603b343d5d36ba46a8914ce0478, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3b:fa:bc:8a:66:71:d6:a9:92:d7:10:e9:b2:
                    02:f2:8b:9f:50:5b:92:35:c2:09:42:f2:60:72:28:
                    ac:27:25:fe:68:cb:a0:d1:e3:77:28:e3:a2:ca:e5:
                    ec:5e:2b:c9:fc:34:0e:f4:67:ad:1a:08:71:58:2b:
                    86:62:9e:09:24:2f:4d:98:ee:d4:b5:6c:7e:b8:7c:
                    01:c5:0c:5c:96:ad:7c:f8:9c:f8:7d:bf:a2:fc:16:
                    6f:9f:a0:13:5e:95:b6:7a:de:93:19:b8:05:4c:12:
                    12:4f:75:fc:43:35:65:5d:58:2a:74:0d:1c:93:e7:
                    c6:13:25:ad:a9:eb:32:06:1d:a6:00:13:38:02:e6:
                    0b:fa:3a:3f:76:f6:46:fb:76:59:ff:e2:a8:88:aa:
                    fb:af:a9:52:18:2e:7b:c2:96:49:6a:81:65:5b:cb:
                    47:ab:1a:34:a9:7f:44:8d:c0:3e:a0:15:29:21:36:
                    35:17:e7:bd:c6:75:46:6b:6f:47:0c:44:98:83:c0:
                    bc:e1:69:f9:de:9e:ef:29:8c:43:0b:04:7f:bd:c6:
                    ee:5b:8e:9b:67:63:e5:2a:ba:df:51:a2:16:d5:b9:
                    2a:25:a6:cb:ef:dc:01:d8:94:df:e6:0b:c8:0d:40:
                    54:e4:7b:59:45:82:11:a4:5f:6b:2b:ad:c9:80:9a:
                    a5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EF:41:AA:57:B2:7B:83:23:DA:55:9F:AF:03:FC:A6:C4:17:5E:28
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/498bbafa-8b48-40c2-9df9-e0be24b0ddaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:4c:53:31:31:dc:56:e2:83:17:99:d4:ce:be:76:0a:45:39:
         88:f7:bd:14:e9:7a:68:60:26:5a:52:75:1f:33:ab:92:bb:22:
         4c:c1:ba:48:6e:9c:c6:df:5b:16:f8:05:24:a2:c9:cc:c1:fe:
         c3:6e:95:19:db:04:f1:4b:58:23:63:1e:5d:ae:aa:ca:26:56:
         a6:5d:3c:6e:ed:28:76:3c:fb:95:41:45:74:c6:b0:25:4a:09:
         89:a6:3b:1c:4c:31:6b:ca:b9:54:89:66:7c:24:40:1c:1c:70:
         14:2e:10:03:4a:8c:65:97:b0:df:5c:db:08:09:e3:cc:01:4f:
         71:4b:2e:2e:49:38:83:61:54:dc:c4:00:69:72:70:df:d8:d5:
         8d:17:69:18:39:3b:2a:3e:e0:40:8d:4e:ca:ce:83:ad:43:6f:
         da:e1:ca:96:f6:d4:bc:ca:59:d1:db:13:d4:3a:57:17:91:13:
         8f:04:92:aa:cc:e1:8e:69:b7:07:63:16:fe:91:66:ea:52:81:
         4a:38:f9:ea:a9:84:8b:ca:89:57:b9:dc:77:67:f3:2f:0a:05:
         91:c9:cd:2f:91:d9:fe:92:bb:07:89:4c:69:7c:73:00:f3:5f:
         80:e7:a8:cc:df:31:c4:06:99:8a:10:f6:20:0e:ae:ac:f4:ba:
         2c:d2:75:b6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNOjko9ODu/Js6yYOq7xFerZyJFowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjE3MDAwMDAwWhcNMjMwNzIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BmYzY0NWM2OGUxZmExMWM1YjEzYWYyZmMwNDJmOGUzNDcw
ZWU1NjAzYjM0M2Q1ZDM2YmE0NmE4OTE0Y2UwNDc4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDpO/q8imZx1qmS1xDpsgLyi59QW5I1wglC8mByKKwnJf5o
y6DR43co46LK5exeK8n8NA70Z60aCHFYK4ZingkkL02Y7tS1bH64fAHFDFyWrXz4
nPh9v6L8Fm+foBNelbZ63pMZuAVMEhJPdfxDNWVdWCp0DRyT58YTJa2p6zIGHaYA
EzgC5gv6Oj929kb7dln/4qiIqvuvqVIYLnvClklqgWVby0erGjSpf0SNwD6gFSkh
NjUX573GdUZrb0cMRJiDwLzhafnenu8pjEMLBH+9xu5bjptnY+Uqut9RohbVuSol
psvv3AHYlN/mC8gNQFTke1lFghGkX2srrcmAmqWPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUte9Bqleye4Mj2lWfrwP8psQXXigwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzQ5OGJiYWZhLThiNDgtNDBjMi05ZGY5LWUwYmUyNGIwZGRhZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEtMUzEx3FbigxeZ1M6+dgpFOYj3
vRTpemhgJlpSdR8zq5K7IkzBukhunMbfWxb4BSSiyczB/sNulRnbBPFLWCNjHl2u
qsomVqZdPG7tKHY8+5VBRXTGsCVKCYmmOxxMMWvKuVSJZnwkQBwccBQuEANKjGWX
sN9c2wgJ48wBT3FLLi5JOINhVNzEAGlycN/Y1Y0XaRg5Oyo+4ECNTsrOg61Db9rh
ypb21LzKWdHbE9Q6VxeRE48EkqrM4Y5ptwdjFv6RZupSgUo4+eqphIvKiVe53Hdn
8y8KBZHJzS+R2f6SuweJTGl8cwDzX4DnqMzfMcQGmYoQ9iAOrqz0uizSdbY=
-----END CERTIFICATE-----