Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/df2df791-e943-4b4c-b11f-53529d8c40e6.roa
File:                     df2df791-e943-4b4c-b11f-53529d8c40e6.roa (raw, json)
Hash identifier:          Uu2M2cXB6l87BfjQVGdodoHBm+hqUye3pGNyTZ9iIH0=
Subject key identifier:   AE:C4:68:B7:37:12:C0:F8:08:83:62:BD:31:23:BC:8E:E8:4E:B3:CF
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4A7257902F4164D3368C6C907572B6B63B1AFC91
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/df2df791-e943-4b4c-b11f-53529d8c40e6.roa
Signing time:             Wed 20 Dec 2023 00:00:00 +0000
ROA not before:           Wed 20 Dec 2023 00:00:00 +0000
ROA not after:            Wed 24 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:72:57:90:2f:41:64:d3:36:8c:6c:90:75:72:b6:b6:3b:1a:fc:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 20 00:00:00 2023 GMT
            Not After : Jan 24 23:59:59 2024 GMT
        Subject: serialNumber=548184b42f03bdab7e9ddf720ba57c420a27a2f50a3108f9e34e5def4bdb2a91, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:4a:85:74:80:7b:97:de:58:aa:30:7b:74:
                    d5:20:df:af:a1:52:09:06:a2:04:89:0a:0c:82:58:
                    ec:30:1f:f9:31:c5:7f:93:f3:e7:13:4f:25:f0:ba:
                    d9:14:2b:4b:c8:a9:50:80:01:14:01:7c:cf:3c:92:
                    17:af:3c:c5:d9:3f:aa:29:76:24:b7:ff:11:87:8f:
                    58:42:7c:a5:71:96:a8:5e:cb:85:cc:fd:75:4a:e9:
                    00:24:fd:4e:cf:b4:71:d6:81:7a:de:dc:33:99:e2:
                    47:59:85:b3:06:60:ce:7b:9d:18:af:9a:99:bc:d6:
                    22:aa:9f:b2:5f:b6:64:2b:61:6f:0d:f5:5f:9b:54:
                    d9:a2:4c:44:f8:ff:01:11:4e:3e:b0:64:df:9a:25:
                    f9:d8:7a:50:d0:a7:21:a9:53:d9:1d:2a:28:b2:cf:
                    d0:41:e3:97:2f:ef:30:5f:b6:b7:a4:c4:97:98:1c:
                    cb:d9:2f:ed:53:e0:5a:8f:b1:50:6b:a3:e9:35:52:
                    1a:9c:aa:bb:00:bb:4c:8f:5d:8d:6a:4d:db:3a:05:
                    ed:b3:fc:ad:3a:51:9b:ef:a7:60:42:e9:c9:0d:c5:
                    3d:86:93:c6:d7:c3:16:53:dc:f4:76:f6:3e:97:74:
                    62:29:b0:b0:3f:1f:ca:00:c3:13:f6:54:b9:f2:03:
                    d0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C4:68:B7:37:12:C0:F8:08:83:62:BD:31:23:BC:8E:E8:4E:B3:CF
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/df2df791-e943-4b4c-b11f-53529d8c40e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:2d:ef:95:74:55:35:f4:0a:d5:c6:b5:44:b5:4d:11:3f:90:
         dd:b3:5d:54:4a:ea:e2:69:40:17:b6:87:8e:61:1f:03:f2:c9:
         50:16:cb:69:23:93:c1:10:04:87:a1:b9:33:3b:13:e1:1c:94:
         a4:d6:d4:06:76:3f:33:f0:bb:63:4a:5b:7b:61:b7:07:32:c7:
         0f:ba:3c:71:e4:5f:b0:f0:7c:d1:f3:1c:18:39:89:8d:37:c9:
         08:fc:b8:52:92:40:2c:0a:6b:9b:b5:36:82:72:e4:38:05:06:
         ab:26:02:91:53:7e:c2:11:a4:a0:68:be:19:d7:0c:e4:c7:e2:
         14:07:a6:98:6d:d6:2f:53:28:81:84:1f:86:b0:20:fd:6b:7d:
         9c:79:4d:f6:3a:a4:3e:70:3c:1c:95:fd:d7:4d:66:2f:a5:f4:
         e2:5f:70:c4:56:3d:bb:d6:60:79:29:3d:00:f4:1c:4a:a7:4a:
         6b:95:fd:48:87:89:ba:a1:3c:53:6e:7e:7d:9b:97:4e:9c:2e:
         88:e0:17:36:a8:b6:f4:6b:dc:83:36:88:61:72:fa:35:b0:9f:
         ab:84:a8:53:56:0a:7c:31:d4:5b:ce:12:75:3c:ee:c4:03:f6:
         75:74:20:2b:28:dd:1d:c5:01:14:96:74:0f:62:1c:fa:b9:01:
         88:d1:87:ff
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSnJXkC9BZNM2jGyQdXK2tjsa/JEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjIwMDAwMDAwWhcNMjQwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NDgxODRiNDJmMDNiZGFiN2U5ZGRmNzIwYmE1N2M0MjBh
MjdhMmY1MGEzMTA4ZjllMzRlNWRlZjRiZGIyYTkxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9BEqFdIB7l95YqjB7dNUg36+hUgkGogSJCgyCWOwwH/kx
xX+T8+cTTyXwutkUK0vIqVCAARQBfM88khevPMXZP6opdiS3/xGHj1hCfKVxlqhe
y4XM/XVK6QAk/U7PtHHWgXre3DOZ4kdZhbMGYM57nRivmpm81iKqn7JftmQrYW8N
9V+bVNmiTET4/wERTj6wZN+aJfnYelDQpyGpU9kdKiiyz9BB45cv7zBftrekxJeY
HMvZL+1T4FqPsVBro+k1UhqcqrsAu0yPXY1qTds6Be2z/K06UZvvp2BC6ckNxT2G
k8bXwxZT3PR29j6XdGIpsLA/H8oAwxP2VLnyA9BTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrsRotzcSwPgIg2K9MSO8juhOs88wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2RmMmRmNzkxLWU5NDMtNGI0Yy1iMTFmLTUzNTI5ZDhjNDBlNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACIt75V0VTX0CtXGtUS1TRE/kN2z
XVRK6uJpQBe2h45hHwPyyVAWy2kjk8EQBIehuTM7E+EclKTW1AZ2PzPwu2NKW3th
twcyxw+6PHHkX7DwfNHzHBg5iY03yQj8uFKSQCwKa5u1NoJy5DgFBqsmApFTfsIR
pKBovhnXDOTH4hQHppht1i9TKIGEH4awIP1rfZx5TfY6pD5wPByV/ddNZi+l9OJf
cMRWPbvWYHkpPQD0HEqnSmuV/UiHibqhPFNufn2bl06cLojgFzaotvRr3IM2iGFy
+jWwn6uEqFNWCnwx1FvOEnU87sQD9nV0ICso3R3FARSWdA9iHPq5AYjRh/8=
-----END CERTIFICATE-----