Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ecfd5c52-337b-40ae-80a0-d9a5a7e62dd1.roa
File:                     ecfd5c52-337b-40ae-80a0-d9a5a7e62dd1.roa (raw, json)
Hash identifier:          Q84ET5pfgO612UlKuYTrxPT61pDvD0iP5yvQhn58zA4=
Subject key identifier:   70:64:6F:46:DB:23:DF:4E:AE:AC:8A:33:FB:2C:92:97:FB:CA:CD:9F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3794B7EA97E86B8D1B03F10128B1C20E0B4E3243
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ecfd5c52-337b-40ae-80a0-d9a5a7e62dd1.roa
Signing time:             Tue 24 Dec 2024 00:00:00 +0000
ROA not before:           Tue 24 Dec 2024 00:00:00 +0000
ROA not after:            Tue 28 Jan 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:94:b7:ea:97:e8:6b:8d:1b:03:f1:01:28:b1:c2:0e:0b:4e:32:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 24 00:00:00 2024 GMT
            Not After : Jan 28 23:59:59 2025 GMT
        Subject: serialNumber=a5ce9f124c728aff689a0fc5adc5c93a6eecc09059f898f1593c8785533d4e1b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6f:8a:87:cc:32:8d:c1:2b:79:87:34:cf:19:
                    04:ed:fd:0c:71:3f:af:e1:dd:08:58:c0:f0:3e:8e:
                    ad:90:f2:62:25:ba:cb:9d:ba:32:b7:ca:3a:cd:e7:
                    70:17:ed:97:8e:10:cc:63:9f:9c:49:0b:9a:3f:bc:
                    d5:a0:21:03:e5:78:12:55:0b:0e:67:89:a8:7f:a4:
                    ba:f8:dc:9d:5b:b3:82:e2:6f:9a:cd:d7:48:f2:b2:
                    2a:2c:fe:51:bc:6b:c5:f0:5a:85:81:17:0e:5a:73:
                    90:3e:74:4b:c7:c7:3a:65:5e:95:ef:8c:fa:9d:6e:
                    bf:e9:99:57:de:91:ad:84:52:67:5a:41:2f:f1:10:
                    6d:86:fb:d6:7f:99:2b:ee:ef:56:2b:28:f1:13:c0:
                    b2:dd:95:81:39:03:76:08:b9:2b:97:7d:79:2f:63:
                    c6:e6:b7:3e:2c:d2:10:15:b4:05:22:58:66:c3:38:
                    0b:b6:9c:ad:c9:8c:5f:bd:28:8c:8d:fd:69:53:4a:
                    6c:4f:2d:d4:16:25:cb:86:5b:b0:80:8b:b9:ef:d4:
                    fe:fa:10:0e:1a:94:7b:0c:68:0f:f6:48:a2:04:6d:
                    34:b0:75:38:0d:44:7d:7a:d5:da:11:44:44:3b:00:
                    b7:ae:b2:76:5e:07:d4:ce:ad:8c:b1:86:a9:62:94:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:64:6F:46:DB:23:DF:4E:AE:AC:8A:33:FB:2C:92:97:FB:CA:CD:9F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ecfd5c52-337b-40ae-80a0-d9a5a7e62dd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:1b:d4:4b:a8:d6:e7:e5:c3:f5:11:bb:06:50:02:8b:d7:2b:
         ac:e8:a1:8f:dc:b9:78:1a:00:ec:93:ff:7d:5a:7e:e7:6f:5b:
         7a:fe:3d:60:e7:da:1d:9e:c4:bc:b2:65:52:24:66:97:fd:10:
         b5:96:24:44:fe:52:c2:36:98:e6:55:04:22:db:b5:36:9e:c2:
         30:b4:40:a7:63:cc:f8:4d:b5:4e:1b:83:90:9d:89:f3:96:7a:
         61:79:2b:84:ab:77:46:cd:d8:6b:76:27:1a:f3:62:e5:f9:3c:
         9d:31:00:9e:cc:b7:cc:cc:68:e5:dc:96:4d:37:95:01:40:3d:
         ab:20:91:23:8d:e0:52:fa:94:30:4c:53:b9:6b:9e:a3:fc:3b:
         1f:0b:05:ae:2d:36:1b:03:4c:c7:aa:fb:24:06:50:c4:c2:b8:
         d3:3e:aa:cc:91:2c:c5:7d:a5:a9:1f:56:eb:63:c6:7e:ec:fc:
         0f:fb:3d:dc:22:49:16:5b:65:3b:70:77:56:15:f5:7c:98:79:
         b0:8a:a8:2c:ad:1b:88:69:19:9e:e8:20:57:3d:59:60:87:16:
         da:7c:f0:f1:f2:f4:b9:6c:1a:c0:27:b7:4a:ad:3a:82:bc:fe:
         3b:f6:e9:78:71:1c:91:a7:23:81:ac:ae:ee:ac:60:13:e7:47:
         ab:b3:d5:1a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUN5S36pfoa40bA/EBKLHCDgtOMkMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMjI0MDAwMDAwWhcNMjUwMTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNWNlOWYxMjRjNzI4YWZmNjg5YTBmYzVhZGM1YzkzYTZl
ZWNjMDkwNTlmODk4ZjE1OTNjODc4NTUzM2Q0ZTFiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgb4qHzDKNwSt5hzTPGQTt/QxxP6/h3QhYwPA+jq2Q8mIl
usudujK3yjrN53AX7ZeOEMxjn5xJC5o/vNWgIQPleBJVCw5niah/pLr43J1bs4Li
b5rN10jysios/lG8a8XwWoWBFw5ac5A+dEvHxzplXpXvjPqdbr/pmVfeka2EUmda
QS/xEG2G+9Z/mSvu71YrKPETwLLdlYE5A3YIuSuXfXkvY8bmtz4s0hAVtAUiWGbD
OAu2nK3JjF+9KIyN/WlTSmxPLdQWJcuGW7CAi7nv1P76EA4alHsMaA/2SKIEbTSw
dTgNRH161doRREQ7ALeusnZeB9TOrYyxhqlilD0pAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcGRvRtsj306urIoz+yySl/vKzZ8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2VjZmQ1YzUyLTMzN2ItNDBhZS04MGEwLWQ5YTVhN2U2MmRkMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJgb1Euo1uflw/URuwZQAovXK6zo
oY/cuXgaAOyT/31afudvW3r+PWDn2h2exLyyZVIkZpf9ELWWJET+UsI2mOZVBCLb
tTaewjC0QKdjzPhNtU4bg5CdifOWemF5K4Srd0bN2Gt2JxrzYuX5PJ0xAJ7Mt8zM
aOXclk03lQFAPasgkSON4FL6lDBMU7lrnqP8Ox8LBa4tNhsDTMeq+yQGUMTCuNM+
qsyRLMV9pakfVutjxn7s/A/7PdwiSRZbZTtwd1YV9XyYebCKqCytG4hpGZ7oIFc9
WWCHFtp88PHy9LlsGsAnt0qtOoK8/jv26XhxHJGnI4Gsru6sYBPnR6uz1Ro=
-----END CERTIFICATE-----