Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01765293-5e8d-499f-b647-0a4781465c10.roa
File:                     01765293-5e8d-499f-b647-0a4781465c10.roa (raw, json)
Hash identifier:          QG9aqIi005eomlDSeodkoLNuafVV5umfcoawX8373cc=
Subject key identifier:   46:1A:E4:4A:4F:31:6F:EA:7C:B4:38:DA:B8:4C:59:B4:59:D0:66:76
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       72A9BC65300649DAB262AB5F3CAF273693EB409A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01765293-5e8d-499f-b647-0a4781465c10.roa
Signing time:             Sat 16 Nov 2024 00:00:00 +0000
ROA not before:           Sat 16 Nov 2024 00:00:00 +0000
ROA not after:            Sat 21 Dec 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a9:bc:65:30:06:49:da:b2:62:ab:5f:3c:af:27:36:93:eb:40:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 16 00:00:00 2024 GMT
            Not After : Dec 21 23:59:59 2024 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:c7:a2:cb:1b:2c:6f:2c:db:6e:fc:c3:a0:
                    64:a3:a2:e7:02:b9:d5:b0:26:81:a0:e1:04:ed:a7:
                    11:ac:fe:d0:57:10:71:cb:49:78:f0:29:83:f8:9d:
                    27:b8:82:dc:65:65:da:bf:f6:69:8c:7c:37:fe:ca:
                    e5:cf:89:c1:bd:ec:a8:5e:cb:d5:44:32:93:50:ea:
                    45:46:77:ce:20:0f:d0:df:42:bc:58:0a:95:81:cd:
                    8d:9b:bf:4a:37:39:8e:ca:25:8e:f7:f0:d4:1f:95:
                    aa:2f:98:1b:9d:2f:c3:0f:40:2d:4e:2f:75:36:7f:
                    d4:fb:d6:37:af:20:73:cc:37:d1:e3:4c:92:cd:a2:
                    00:17:a5:c8:be:9c:61:c2:c0:f9:76:a7:fb:6c:c6:
                    6e:e5:7d:b9:cd:08:0a:f9:2e:59:c5:99:ad:17:fd:
                    25:00:8d:81:98:22:fc:a8:e8:cd:a7:21:e2:7d:1e:
                    f7:9a:24:33:8e:a1:27:3e:aa:1a:e9:c9:f9:89:f7:
                    2a:28:66:18:6b:d8:df:7d:00:80:ae:56:34:3d:3f:
                    e3:d2:94:07:7d:5b:e7:ca:b4:ee:a8:a5:8f:af:bc:
                    85:a5:5d:07:7f:38:4b:ba:9b:bc:f8:be:f4:46:f2:
                    b4:8a:d2:bb:03:16:17:23:23:d4:75:79:f9:c8:53:
                    bb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1A:E4:4A:4F:31:6F:EA:7C:B4:38:DA:B8:4C:59:B4:59:D0:66:76
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01765293-5e8d-499f-b647-0a4781465c10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:b2:a4:67:b2:37:c2:17:92:b3:0d:44:7f:6e:63:95:de:c8:
         20:67:ce:44:00:2a:fa:2b:b8:99:6a:6b:4e:f5:54:13:a5:f0:
         c2:ab:87:0b:ae:ca:f8:ad:e9:74:5e:31:24:6e:25:bb:49:cc:
         22:58:63:56:86:11:52:46:64:3f:f2:1b:6e:95:f6:41:5a:04:
         a6:af:0b:02:7d:d0:a2:2f:d1:e2:66:a7:76:81:72:31:f3:b3:
         9b:b8:25:da:53:15:05:4e:3b:77:7a:48:8a:f9:73:fb:f9:98:
         c9:10:4f:65:bc:2d:1b:ae:fa:b0:4e:50:c6:f7:45:45:9a:c9:
         a8:f6:e8:09:48:d6:e2:84:61:d8:c4:f3:05:15:8d:17:a4:87:
         b1:5a:50:55:a0:ac:62:65:97:33:5f:4b:ab:51:93:9c:2f:4b:
         1d:8e:1e:17:71:0f:f0:3c:a5:50:4e:1b:d5:88:4e:07:e3:e2:
         80:13:8c:78:bf:06:48:d9:60:0b:c6:75:6e:25:31:e9:c6:fc:
         ae:37:da:4b:a2:df:03:00:d1:32:b4:02:b3:d1:fc:c0:76:10:
         67:e9:c7:b6:07:53:d3:8d:6f:68:ae:a8:e1:5a:f4:b3:bc:df:
         ff:43:cf:04:ec:f5:87:2a:16:af:03:61:c5:93:65:34:ae:45:
         50:54:09:9f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcqm8ZTAGSdqyYqtfPK8nNpPrQJowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMTE2MDAwMDAwWhcNMjQxMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMjFjZTYxOGQ1MTU2NTFkN2RhOTgxNWQxNjliNGFhNTEw
Zjg4YmE5OGMyOGM4NGQ3ODAyMmYxNDFhOWY5OTc0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDLOceiyxssbyzbbvzDoGSjoucCudWwJoGg4QTtpxGs/tBX
EHHLSXjwKYP4nSe4gtxlZdq/9mmMfDf+yuXPicG97Khey9VEMpNQ6kVGd84gD9Df
QrxYCpWBzY2bv0o3OY7KJY738NQflaovmBudL8MPQC1OL3U2f9T71jevIHPMN9Hj
TJLNogAXpci+nGHCwPl2p/tsxm7lfbnNCAr5LlnFma0X/SUAjYGYIvyo6M2nIeJ9
HveaJDOOoSc+qhrpyfmJ9yooZhhr2N99AICuVjQ9P+PSlAd9W+fKtO6opY+vvIWl
XQd/OEu6m7z4vvRG8rSK0rsDFhcjI9R1efnIU7thAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURhrkSk8xb+p8tDjauExZtFnQZnYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzAxNzY1MjkzLTVlOGQtNDk5Zi1iNjQ3LTBhNDc4MTQ2NWMxMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAD6ypGeyN8IXkrMNRH9uY5XeyCBn
zkQAKvoruJlqa071VBOl8MKrhwuuyvit6XReMSRuJbtJzCJYY1aGEVJGZD/yG26V
9kFaBKavCwJ90KIv0eJmp3aBcjHzs5u4JdpTFQVOO3d6SIr5c/v5mMkQT2W8LRuu
+rBOUMb3RUWayaj26AlI1uKEYdjE8wUVjRekh7FaUFWgrGJllzNfS6tRk5wvSx2O
HhdxD/A8pVBOG9WITgfj4oATjHi/BkjZYAvGdW4lMenG/K432kui3wMA0TK0ArPR
/MB2EGfpx7YHU9ONb2iuqOFa9LO83/9DzwTs9YcqFq8DYcWTZTSuRVBUCZ8=
-----END CERTIFICATE-----