Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/20f60e6e-866d-4c93-9f2e-85de0771a3ed.roa
File:                     20f60e6e-866d-4c93-9f2e-85de0771a3ed.roa (raw, json)
Hash identifier:          6Grb0Ue98bBYjA+QBSjvW1jELP+fETHy4pfzH9lQfXM=
Subject key identifier:   30:9D:8A:EC:6F:D1:09:C9:6F:03:29:35:F0:DB:4D:85:F0:D1:6C:43
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3BA8CBE61C9E4380B0996538C30C2F7461A5A911
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/20f60e6e-866d-4c93-9f2e-85de0771a3ed.roa
Signing time:             Fri 22 Mar 2024 00:00:00 +0000
ROA not before:           Fri 22 Mar 2024 00:00:00 +0000
ROA not after:            Fri 26 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a8:cb:e6:1c:9e:43:80:b0:99:65:38:c3:0c:2f:74:61:a5:a9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 22 00:00:00 2024 GMT
            Not After : Apr 26 23:59:59 2024 GMT
        Subject: serialNumber=bba15a0a92c279df16e326b15ef018de6d6bf9324f2b5a592b0bccfd9da51d76, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:7a:ba:28:18:f0:b4:32:5b:fa:2b:a0:fa:
                    14:8f:a2:68:dd:ec:ec:73:aa:c3:29:bd:b1:a6:9f:
                    29:8a:22:32:34:48:bb:1b:de:4a:27:ec:03:b8:a8:
                    be:14:95:4b:ca:90:d3:1b:55:b8:74:52:f7:23:2a:
                    93:9f:a8:c3:a8:6a:6f:b6:58:23:ac:98:09:ab:84:
                    e5:ca:d3:93:41:04:ed:cf:ce:f3:a5:57:fc:1d:9e:
                    6c:80:02:2e:a5:a1:ec:5a:e9:a8:77:77:13:15:50:
                    0e:6c:38:36:4e:1d:49:00:48:43:0b:d6:0e:15:47:
                    1a:58:b3:f4:09:d7:ac:70:1e:52:44:ed:31:af:95:
                    f3:39:61:b8:08:fd:43:f5:e2:2e:51:a8:3c:77:64:
                    df:33:be:43:4f:7f:d3:f0:b5:be:6b:76:1b:ba:45:
                    40:db:90:3d:fa:ec:84:85:e7:39:25:22:1a:f5:dd:
                    8a:f3:3b:99:08:26:2a:b9:f5:78:bf:37:86:ae:3f:
                    56:8f:a9:b2:10:47:b7:be:28:1e:82:a0:84:8d:2f:
                    08:76:69:a5:80:87:1a:e4:fa:4a:90:84:9f:ad:62:
                    08:8a:13:9c:c3:e5:c0:13:4d:e5:6e:76:af:23:a8:
                    ea:47:67:1c:f9:51:0b:da:e9:54:7e:d1:ca:ee:7c:
                    f9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9D:8A:EC:6F:D1:09:C9:6F:03:29:35:F0:DB:4D:85:F0:D1:6C:43
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/20f60e6e-866d-4c93-9f2e-85de0771a3ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:40:d1:2c:23:23:b9:26:f2:c6:43:78:e1:5a:0d:c0:b1:72:
         47:1a:50:91:6a:33:bd:24:ca:57:49:01:e4:1b:2a:db:d2:fd:
         31:fc:9c:fa:9c:2b:3e:ba:03:76:a9:74:5c:0f:67:c6:cb:53:
         8d:ef:47:be:5c:b7:b8:58:0b:fe:1d:ad:d9:a6:ae:a9:b5:6c:
         5e:2d:17:03:f1:19:42:66:35:14:74:9a:85:c4:67:04:37:be:
         2c:aa:b1:2e:fe:75:d4:ee:80:4e:17:d2:14:d8:d5:0a:5c:d0:
         e5:2f:16:48:31:fe:72:ca:96:75:1c:91:49:e1:f8:d7:ec:89:
         b2:3f:b7:a1:54:fb:22:fa:76:c4:a2:13:12:94:bb:06:56:1c:
         bd:80:9b:e7:d7:56:68:74:02:68:f1:c8:f3:73:b9:59:0a:27:
         75:5e:25:23:a8:3c:d9:bd:06:90:ee:5e:f3:f7:73:89:12:a7:
         30:49:2b:9d:a2:b9:0a:d0:2f:bc:36:94:75:64:59:8e:b8:78:
         15:67:76:da:e8:de:15:00:e2:5c:28:69:47:ea:42:20:64:c8:
         3d:cb:05:87:71:1c:05:09:92:5a:5e:9e:60:32:ff:cc:4b:02:
         fe:eb:6e:bb:de:c8:13:5f:19:f4:d3:e4:8b:28:b7:fc:0c:f7:
         7c:66:27:14
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUO6jL5hyeQ4CwmWU4wwwvdGGlqREwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMzIyMDAwMDAwWhcNMjQwNDI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BiYmExNWEwYTkyYzI3OWRmMTZlMzI2YjE1ZWYwMThkZTZk
NmJmOTMyNGYyYjVhNTkyYjBiY2NmZDlkYTUxZDc2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4EXq6KBjwtDJb+iug+hSPomjd7OxzqsMpvbGmnymKIjI0
SLsb3kon7AO4qL4UlUvKkNMbVbh0UvcjKpOfqMOoam+2WCOsmAmrhOXK05NBBO3P
zvOlV/wdnmyAAi6loexa6ah3dxMVUA5sODZOHUkASEML1g4VRxpYs/QJ16xwHlJE
7TGvlfM5YbgI/UP14i5RqDx3ZN8zvkNPf9Pwtb5rdhu6RUDbkD367ISF5zklIhr1
3YrzO5kIJiq59Xi/N4auP1aPqbIQR7e+KB6CoISNLwh2aaWAhxrk+kqQhJ+tYgiK
E5zD5cATTeVudq8jqOpHZxz5UQva6VR+0crufPl/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUMJ2K7G/RCclvAyk18NtNhfDRbEMwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzIwZjYwZTZlLTg2NmQtNGM5My05ZjJlLTg1ZGUwNzcxYTNlZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEdA0SwjI7km8sZDeOFaDcCxckca
UJFqM70kyldJAeQbKtvS/TH8nPqcKz66A3apdFwPZ8bLU43vR75ct7hYC/4drdmm
rqm1bF4tFwPxGUJmNRR0moXEZwQ3viyqsS7+ddTugE4X0hTY1Qpc0OUvFkgx/nLK
lnUckUnh+NfsibI/t6FU+yL6dsSiExKUuwZWHL2Am+fXVmh0AmjxyPNzuVkKJ3Ve
JSOoPNm9BpDuXvP3c4kSpzBJK52iuQrQL7w2lHVkWY64eBVndtro3hUA4lwoaUfq
QiBkyD3LBYdxHAUJklpenmAy/8xLAv7rbrveyBNfGfTT5Isot/wM93xmJxQ=
-----END CERTIFICATE-----