Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/15abea81-031c-3b47-9f0c-eef7c84b0a17.roa
File:                     15abea81-031c-3b47-9f0c-eef7c84b0a17.roa (raw, json)
Hash identifier:          V65NHgB1Hzhfqd+/Wf2oqAS3jRA/dDV6qKT+dpBJDGY=
Subject key identifier:   DB:39:EF:AD:BE:D0:BA:DB:9D:9C:4F:87:44:CB:46:68:7C:E0:BF:80
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF74D636A3B527DC07B26E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/15abea81-031c-3b47-9f0c-eef7c84b0a17.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     14112
IP address blocks:        66.38.236.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:74:d6:36:a3:b5:27:dc:07:b2:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=050c64f7-2dda-4c5f-a07d-e77b8e3c3728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:38:69:08:b4:71:16:d4:85:c7:5c:e0:0e:19:
                    82:da:be:29:56:5b:d2:a6:8f:8c:49:6a:98:85:fa:
                    5e:0e:4e:55:2b:e8:43:b3:71:11:e4:04:50:26:21:
                    97:82:1a:5c:be:f2:83:2e:75:4d:e3:6e:1b:34:ab:
                    99:c1:d5:fd:dc:21:62:74:db:5a:de:4b:bd:a3:55:
                    16:dd:d5:bd:7e:2d:21:4a:ea:15:c8:73:6d:d8:6e:
                    53:df:fb:d3:d5:65:8b:d4:da:78:5f:fe:14:d4:21:
                    f5:db:51:b5:ae:ee:27:71:c3:1e:fb:77:bc:52:26:
                    23:29:9b:f9:50:18:0c:3a:fe:a1:28:e7:a4:09:90:
                    ea:ac:7d:6a:a5:4f:fc:b8:02:7c:3e:16:86:79:a7:
                    3e:38:36:f9:f2:c5:ad:ac:1e:77:ce:14:98:46:e3:
                    cc:d3:85:63:f6:be:9e:57:93:d8:17:98:70:3e:44:
                    36:b4:c8:df:6a:e3:83:2f:7c:21:72:7d:13:d7:a3:
                    1d:4f:43:3c:45:7c:2d:39:c3:a5:9c:73:c4:89:1b:
                    01:8b:15:b7:a2:ba:b6:53:13:62:a1:56:20:46:4f:
                    b4:5c:a2:44:f4:c0:61:d9:53:e3:98:8d:ee:75:87:
                    c6:a5:82:a7:db:99:ae:e2:5a:c9:e2:00:90:54:4d:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:39:EF:AD:BE:D0:BA:DB:9D:9C:4F:87:44:CB:46:68:7C:E0:BF:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/15abea81-031c-3b47-9f0c-eef7c84b0a17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.38.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b0:d0:68:12:b4:74:18:70:25:f1:af:5e:47:9f:6d:35:ac:
         1b:c7:ea:6a:bc:70:b0:f5:82:4c:4a:f2:d5:58:e7:53:87:d3:
         7a:74:f7:6b:57:36:55:d6:62:27:88:07:8d:3c:5f:38:1d:e0:
         10:25:61:88:4c:8d:4a:8f:e2:b9:3c:63:05:8d:25:3b:13:e8:
         47:11:99:53:22:cb:54:dc:95:0c:fc:9b:2f:7b:d7:e3:28:1a:
         c6:41:7c:67:df:32:c8:04:75:d9:c4:7a:a7:85:55:a4:93:4f:
         4d:5d:dc:6f:ee:52:fa:36:8b:85:71:55:89:d5:8f:64:3b:4b:
         ac:a2:6f:3f:95:85:06:b9:de:e3:47:ae:fd:86:9d:f8:9f:77:
         7b:98:6c:37:28:82:3f:25:b7:31:31:75:3a:43:e1:2d:38:7e:
         98:0a:e5:5c:dd:a0:31:6e:17:37:0e:ba:78:a9:c2:a7:c5:66:
         d2:04:1c:88:d8:0d:31:8c:f8:2d:5e:e0:4e:95:9f:bc:92:ff:
         42:bb:9d:62:c8:79:a8:46:f9:7f:4e:56:d2:92:12:bf:63:d8:
         12:3c:0d:84:5e:e4:cc:68:94:19:4d:fa:a5:0a:86:7e:44:6f:
         d2:c8:99:58:2d:4c:7a:b1:7b:be:67:45:ac:5d:39:8d:84:f2:
         03:8f:99:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGvdNY2o7Un3AeyboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDQyNTEyMDAwMFoXDTIzMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
MDUwYzY0ZjctMmRkYS00YzVmLWEwN2QtZTc3YjhlM2MzNzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzhpCLRxFtSFx1zgDhmC2r4pVlvSpo+MSWqY
hfpeDk5VK+hDs3ER5ARQJiGXghpcvvKDLnVN424bNKuZwdX93CFidNta3ku9o1UW
3dW9fi0hSuoVyHNt2G5T3/vT1WWL1Np4X/4U1CH121G1ru4nccMe+3e8UiYjKZv5
UBgMOv6hKOekCZDqrH1qpU/8uAJ8PhaGeac+ODb58sWtrB53zhSYRuPM04Vj9r6e
V5PYF5hwPkQ2tMjfauODL3whcn0T16MdT0M8RXwtOcOlnHPEiRsBixW3orq2UxNi
oVYgRk+0XKJE9MBh2VPjmI3udYfGpYKn25mu4lrJ4gCQVE0TWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNs5762+0LrbnZxPh0TLRmh84L+AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMTVhYmVhODEtMDMxYy0z
YjQ3LTlmMGMtZWVmN2M4NGIwYTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQibsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIew0GgStHQYcCXxr15Hn201rBvH6mq8cLD1gkxK8tVY51OH03p092tX
NlXWYieIB408Xzgd4BAlYYhMjUqP4rk8YwWNJTsT6EcRmVMiy1TclQz8my971+Mo
GsZBfGffMsgEddnEeqeFVaSTT01d3G/uUvo2i4VxVYnVj2Q7S6yibz+VhQa53uNH
rv2Gnfifd3uYbDcogj8ltzExdTpD4S04fpgK5VzdoDFuFzcOunipwqfFZtIEHIjY
DTGM+C1e4E6Vn7yS/0K7nWLIeahG+X9OVtKSEr9j2BI8DYRe5MxolBlN+qUKhn5E
b9LImVgtTHqxe75nRaxdOY2E8gOPmQU=
-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:58 2023 by rpki-client on console-fra.rpki-client.org