Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2b1ea43e-73a3-3d70-8ab2-e4be40693ed1.roa
File:                     2b1ea43e-73a3-3d70-8ab2-e4be40693ed1.roa (raw, json)
Hash identifier:          xbbp8bEsa2rGhsNWgDRCbBeyusEo55F1e+NDt8jqj6s=
Subject key identifier:   AB:62:FD:41:E4:D4:3F:07:D7:84:42:F5:40:9F:BB:63:C7:63:CD:60
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328583FED26E429A8565BC75E746300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2b1ea43e-73a3-3d70-8ab2-e4be40693ed1.roa
Signing time:             Tue 15 Nov 2022 12:00:00 +0000
ROA not before:           Tue 15 Nov 2022 12:00:00 +0000
ROA not after:            Wed 08 Feb 2023 05:00:00 +0000
asID:                     577
IP address blocks:        69.157.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ed:26:e4:29:a8:56:5b:c7:5e:74:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov 15 12:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2023 GMT
        Subject: CN=f26b0e4e-6350-4c96-8459-db3f2764508c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:84:4a:a4:3e:0c:df:33:73:6a:fe:9b:29:b0:
                    4b:e3:8c:9a:c6:64:1b:99:be:c1:69:c2:e5:f8:b7:
                    20:90:34:49:f8:fb:30:59:3e:5d:ff:c1:c4:da:31:
                    3e:de:80:9a:02:5a:91:d8:fe:1a:10:94:16:86:b4:
                    46:c2:11:9b:0d:53:0d:2a:f4:c8:50:6e:d2:4e:f5:
                    30:09:e8:69:77:27:c9:ec:46:c4:94:14:f8:ec:13:
                    c8:ab:71:87:35:9e:fe:46:04:35:e7:7f:12:92:07:
                    32:34:43:f5:ac:01:b4:7c:67:e9:39:38:b7:60:ad:
                    01:3b:4d:57:03:38:ab:69:d1:e1:c3:93:80:d9:93:
                    24:df:84:72:f7:fc:0b:07:ad:2f:c2:a8:72:ae:e5:
                    64:6b:90:66:9c:a7:70:0f:15:be:44:5b:af:59:78:
                    a6:e5:01:80:1b:60:87:58:23:f9:a0:9b:6d:d7:a6:
                    59:11:df:b3:02:d2:22:00:2a:8d:b9:68:c4:31:76:
                    b6:73:b9:1e:f7:b2:c5:84:89:3e:ff:69:fe:49:03:
                    0d:a8:c2:38:af:ec:b5:cc:65:f5:51:61:2b:56:a7:
                    64:ba:04:7b:4b:62:ef:e1:47:d2:2f:f2:de:fe:52:
                    82:94:b3:7a:af:4e:5a:69:e6:f2:df:eb:a2:a2:09:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:62:FD:41:E4:D4:3F:07:D7:84:42:F5:40:9F:BB:63:C7:63:CD:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2b1ea43e-73a3-3d70-8ab2-e4be40693ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b0:ca:c2:cc:61:34:d4:b1:e7:23:15:ee:4b:f8:76:b5:4d:
         f2:d0:45:f0:cd:bb:23:aa:af:ad:05:2e:0f:5a:51:3d:45:ed:
         f3:73:50:71:db:4f:14:1f:af:09:fe:ef:dc:d5:40:b2:69:bd:
         09:52:ed:31:bb:26:dc:67:eb:8d:cb:60:90:e9:ae:d4:d0:48:
         db:b5:a9:80:ad:e5:b3:05:f1:ae:32:29:b0:95:76:cc:14:c6:
         41:1d:ea:b0:e3:21:65:ff:d2:ac:c7:3c:7c:e3:dc:44:6f:79:
         35:42:ee:32:67:41:4e:c6:bc:75:41:fe:52:9e:27:85:7a:55:
         12:31:2c:af:82:c0:fd:56:8d:aa:27:2f:ef:f9:60:17:da:d5:
         73:fc:01:55:cc:6f:39:e5:fa:da:2f:23:3f:6c:76:2d:03:a2:
         cf:d9:a8:3d:82:7e:2f:29:0d:83:ed:91:23:94:1a:93:1c:70:
         ff:42:22:c3:db:2f:bb:7c:75:83:8f:41:68:29:55:82:ff:05:
         0a:fc:f5:a4:0f:bc:99:fb:0b:14:c8:92:cd:08:b8:b7:67:88:
         c4:97:7f:53:7a:4b:77:a7:35:d6:e3:86:6f:48:5c:d2:32:bd:
         91:a5:c4:2a:06:7b:60:bc:cc:51:87:34:69:5f:f2:7f:41:17:
         87:0a:69:f3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/tJuQpqFZbx150YwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIyMTExNTEyMDAwMFoXDTIzMDIwODA1MDAwMFowLzEtMCsGA1UEAxMk
ZjI2YjBlNGUtNjM1MC00Yzk2LTg0NTktZGIzZjI3NjQ1MDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYRKpD4M3zNzav6bKbBL44yaxmQbmb7BacLl
+LcgkDRJ+PswWT5d/8HE2jE+3oCaAlqR2P4aEJQWhrRGwhGbDVMNKvTIUG7STvUw
CehpdyfJ7EbElBT47BPIq3GHNZ7+RgQ1538SkgcyNEP1rAG0fGfpOTi3YK0BO01X
AziradHhw5OA2ZMk34Ry9/wLB60vwqhyruVka5BmnKdwDxW+RFuvWXim5QGAG2CH
WCP5oJtt16ZZEd+zAtIiACqNuWjEMXa2c7ke97LFhIk+/2n+SQMNqMI4r+y1zGX1
UWErVqdkugR7S2Lv4UfSL/Le/lKClLN6r05aaeby3+uioglqIwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKti/UHk1D8H14RC9UCfu2PHY81gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMmIxZWE0M2UtNzNhMy0z
ZDcwLThhYjItZTRiZTQwNjkzZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARZ0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANbDKwsxhNNSx5yMV7kv4drVN8tBF8M27I6qvrQUuD1pRPUXt83NQcdtP
FB+vCf7v3NVAsmm9CVLtMbsm3GfrjctgkOmu1NBI27WpgK3lswXxrjIpsJV2zBTG
QR3qsOMhZf/SrMc8fOPcRG95NULuMmdBTsa8dUH+Up4nhXpVEjEsr4LA/VaNqicv
7/lgF9rVc/wBVcxvOeX62i8jP2x2LQOiz9moPYJ+LykNg+2RI5Qakxxw/0Iiw9sv
u3x1g49BaClVgv8FCvz1pA+8mfsLFMiSzQi4t2eIxJd/U3pLd6c11uOGb0hc0jK9
kaXEKgZ7YLzMUYc0aV/yf0EXhwpp8w==
-----END CERTIFICATE-----