Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/572db2fa-5c01-47a3-a431-7bb90fc76596.roa
File:                     572db2fa-5c01-47a3-a431-7bb90fc76596.roa (raw, json)
Hash identifier:          iuxO8ppg0jRk8usRx0NC+G/DlHzMBIH0GuQPDglCt08=
Subject key identifier:   4F:39:91:F3:7F:9E:86:7A:8F:36:F8:54:E0:2D:25:78:0A:E2:31:57
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3D2BBA3A8F15F8ED33679208D72B03CD3D548C46
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/572db2fa-5c01-47a3-a431-7bb90fc76596.roa
Signing time:             Tue 17 Sep 2024 00:00:00 +0000
ROA not before:           Tue 17 Sep 2024 00:00:00 +0000
ROA not after:            Tue 22 Oct 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2b:ba:3a:8f:15:f8:ed:33:67:92:08:d7:2b:03:cd:3d:54:8c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 17 00:00:00 2024 GMT
            Not After : Oct 22 23:59:59 2024 GMT
        Subject: serialNumber=095105a901275b7ac01a3d63373869fbdf5a7f71c521a837890771827527c920, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ff:20:ff:6b:39:62:a4:26:e2:d9:ff:9c:bf:
                    3a:9f:aa:24:ba:75:b9:04:56:67:13:98:f4:b4:a0:
                    95:31:7a:a9:6e:f0:a0:01:e8:5e:0b:46:51:4b:e9:
                    e2:80:2b:c3:7f:2b:9d:52:02:6f:ff:5e:c0:71:9f:
                    26:1a:bd:db:33:f1:4c:ef:b1:d4:17:49:66:b6:d7:
                    a7:02:68:f1:2c:45:c1:cd:77:94:9b:51:77:49:48:
                    47:68:9a:44:72:bb:5a:a2:4c:e8:fd:d5:b9:77:83:
                    d5:7f:61:2c:1a:f1:79:ba:c5:6e:bd:40:e5:1c:1a:
                    56:b3:04:03:41:55:b9:4b:02:e7:27:e6:dd:cb:0b:
                    e4:d1:7b:5d:01:c1:fc:79:5d:eb:3e:e0:1d:03:fd:
                    a8:33:cc:a3:ec:3b:fd:13:4e:26:a5:e7:bd:af:63:
                    02:0e:8e:9a:ae:2d:56:b8:30:d8:7b:80:56:95:52:
                    c3:ce:74:37:df:5d:e6:13:d3:da:29:e8:e1:96:2a:
                    20:e2:c0:27:9a:5f:a8:df:6f:3b:12:e1:20:2a:de:
                    16:ad:c6:48:70:e2:11:fa:e9:71:b8:0b:2c:ad:e5:
                    a3:28:23:08:bd:5d:25:c6:37:85:9e:08:ce:2b:aa:
                    84:36:a5:2c:8d:8a:83:ad:69:ee:92:cc:e7:80:d3:
                    6a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:39:91:F3:7F:9E:86:7A:8F:36:F8:54:E0:2D:25:78:0A:E2:31:57
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/572db2fa-5c01-47a3-a431-7bb90fc76596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:bd:bc:f3:fd:01:ec:84:4e:07:7f:00:e4:10:40:dc:7b:77:
         5a:6c:77:ab:88:d5:a3:0a:9b:99:3a:e5:be:46:59:dc:5f:bb:
         d5:cf:50:f0:5d:22:6c:f2:77:45:ca:18:de:85:b8:d9:34:5f:
         fe:f5:21:99:1f:33:1d:70:d7:4a:e4:ab:d9:8f:84:53:ab:fb:
         c3:28:52:35:75:5b:fa:86:c4:42:9e:fa:93:5c:ec:3e:41:e9:
         df:ab:c0:17:f0:23:77:4f:47:31:01:b4:49:87:c9:a6:fb:ce:
         87:77:2d:95:a6:16:b9:f4:ed:06:46:9b:73:68:b4:74:52:42:
         7d:ea:36:b3:94:d7:af:61:0f:25:81:7a:30:ad:04:9a:50:3e:
         f7:7b:51:db:c5:7e:78:2a:d9:72:db:4c:a8:07:b6:e6:03:a6:
         d0:4b:31:d4:38:5b:35:ab:ff:2d:d5:ec:56:41:eb:ba:27:45:
         71:04:76:45:ce:2b:5b:e1:64:96:fe:65:0f:99:8d:cb:16:e3:
         bb:48:7e:41:3f:e2:bf:5d:d3:3f:dd:14:fc:47:ec:e0:8b:e0:
         23:ab:87:c2:e8:1d:f3:01:a8:8d:9e:25:d8:21:d6:3b:9f:21:
         10:c4:81:55:d7:3d:ed:e4:24:63:4b:0b:c8:a1:55:19:ca:fc:
         93:de:11:83
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPSu6Oo8V+O0zZ5II1ysDzT1UjEYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwOTE3MDAwMDAwWhcNMjQxMDIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AwOTUxMDVhOTAxMjc1YjdhYzAxYTNkNjMzNzM4NjlmYmRm
NWE3ZjcxYzUyMWE4Mzc4OTA3NzE4Mjc1MjdjOTIwMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCE/yD/azlipCbi2f+cvzqfqiS6dbkEVmcTmPS0oJUxeqlu
8KAB6F4LRlFL6eKAK8N/K51SAm//XsBxnyYavdsz8UzvsdQXSWa216cCaPEsRcHN
d5SbUXdJSEdomkRyu1qiTOj91bl3g9V/YSwa8Xm6xW69QOUcGlazBANBVblLAucn
5t3LC+TRe10Bwfx5Xes+4B0D/agzzKPsO/0TTial572vYwIOjpquLVa4MNh7gFaV
UsPOdDffXeYT09op6OGWKiDiwCeaX6jfbzsS4SAq3hatxkhw4hH66XG4Cyyt5aMo
Iwi9XSXGN4WeCM4rqoQ2pSyNioOtae6SzOeA02oxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUTzmR83+ehnqPNvhU4C0leAriMVcwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzU3MmRiMmZhLTVjMDEtNDdhMy1hNDMxLTdiYjkwZmM3NjU5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHO9vPP9AeyETgd/AOQQQNx7d1ps
d6uI1aMKm5k65b5GWdxfu9XPUPBdImzyd0XKGN6FuNk0X/71IZkfMx1w10rkq9mP
hFOr+8MoUjV1W/qGxEKe+pNc7D5B6d+rwBfwI3dPRzEBtEmHyab7zod3LZWmFrn0
7QZGm3NotHRSQn3qNrOU169hDyWBejCtBJpQPvd7UdvFfngq2XLbTKgHtuYDptBL
MdQ4WzWr/y3V7FZB67onRXEEdkXOK1vhZJb+ZQ+ZjcsW47tIfkE/4r9d0z/dFPxH
7OCL4COrh8LoHfMBqI2eJdgh1jufIRDEgVXXPe3kJGNLC8ihVRnK/JPeEYM=
-----END CERTIFICATE-----