Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e49547a-5578-30a8-b28c-28b08ef4e285.roa
File:                     2e49547a-5578-30a8-b28c-28b08ef4e285.roa (raw, json)
Hash identifier:          znm5t2OSadY4o5RJrWRU3XL9z7sszXml9zjFTsovE1k=
Subject key identifier:   34:AB:66:35:6B:20:AA:C9:1A:15:00:62:0F:91:D7:F4:EA:60:D8:90
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF764DB7413E14B0144C5D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e49547a-5578-30a8-b28c-28b08ef4e285.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     15290
IP address blocks:        2607:ca00::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:76:4d:b7:41:3e:14:b0:14:4c:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=9c3a0858-6763-473b-a3c8-734e2c5e4b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:db:ba:1b:a8:2c:8c:87:5f:ac:00:12:f0:
                    f0:e8:50:fd:84:78:c8:95:bb:c8:3d:31:e1:4c:13:
                    89:db:09:8f:8e:5a:12:fd:25:c4:ee:b9:49:57:13:
                    a4:b6:52:84:ab:41:9b:fb:59:74:3a:64:2d:b7:ed:
                    0d:c0:41:06:00:d8:43:af:53:43:69:72:02:0d:d9:
                    b6:bf:82:2a:0b:92:46:69:53:06:10:bf:b3:90:ca:
                    18:4c:1f:d4:b7:17:2a:cc:b3:39:de:15:35:bf:4e:
                    92:da:61:5b:10:c8:df:32:21:fa:03:7d:11:8f:e6:
                    33:45:b8:cd:03:46:5f:d6:60:fe:84:de:9d:1a:42:
                    15:1f:21:f3:70:82:f3:2c:b3:f0:54:9e:13:00:c7:
                    86:14:0a:ca:a1:62:6c:63:24:24:fd:9c:94:3b:0c:
                    8d:e0:4b:f6:84:b9:1a:2e:76:06:f5:7e:8a:58:3b:
                    88:24:b5:89:79:bc:87:95:0f:a0:d1:aa:92:a7:c7:
                    91:97:3a:b0:68:c7:9c:84:e4:09:11:7a:61:e3:5d:
                    90:96:92:75:ca:f1:2f:e8:2b:96:aa:5e:9a:e1:ef:
                    86:4d:4a:ac:f6:2a:ca:33:17:19:06:17:04:48:3a:
                    99:8c:b9:5d:c4:3c:26:6b:b3:3b:a4:f9:dc:f8:27:
                    39:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AB:66:35:6B:20:AA:C9:1A:15:00:62:0F:91:D7:F4:EA:60:D8:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e49547a-5578-30a8-b28c-28b08ef4e285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ca00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:81:d7:62:8f:58:f1:37:da:e9:b9:95:71:c5:eb:4f:3a:f3:
         cd:23:41:0e:fc:3d:bd:5b:f1:91:9f:31:b5:9c:4d:95:e4:86:
         35:2b:17:a8:d9:20:27:84:64:7b:6c:67:92:3b:a0:72:2c:97:
         ee:a1:20:8e:5a:2e:bc:83:06:86:4e:07:fe:21:3b:2d:bf:50:
         b7:8a:b4:ef:a0:03:c7:f0:23:44:2f:b8:e6:e7:7a:7b:52:53:
         2b:70:b8:fc:49:c2:c1:8c:e1:8e:8e:f6:46:93:24:c7:3b:0b:
         d8:9e:ae:2a:7c:73:65:24:2c:a7:bc:e3:30:71:29:c9:aa:e7:
         89:c6:38:0e:56:9e:6e:28:e9:ad:5a:54:42:71:66:7c:cd:9e:
         bf:44:e6:46:9b:b0:71:bc:1e:9f:8c:4e:34:43:b6:66:a3:e8:
         40:48:a8:9b:8c:1d:6b:74:33:70:ae:a0:75:8b:87:06:f3:15:
         f1:d2:cf:7b:f4:79:c1:9c:ad:ed:32:df:77:52:ac:d8:bd:56:
         7b:b4:fb:0f:39:9c:74:d9:29:57:5a:82:70:7f:4a:14:27:69:
         43:53:52:b5:91:b5:3e:96:d1:ec:33:46:fb:83:25:35:70:e6:
         c4:5d:c9:98:36:3d:e1:b6:29:cd:42:d1:ef:59:5d:85:ee:cc:
         06:7c:04:4c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEGvdk23QT4UsBRMXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDQyNTEyMDAwMFoXDTIzMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
OWMzYTA4NTgtNjc2My00NzNiLWEzYzgtNzM0ZTJjNWU0Yjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb7buhuoLIyHX6wAEvDw6FD9hHjIlbvIPTHh
TBOJ2wmPjloS/SXE7rlJVxOktlKEq0Gb+1l0OmQtt+0NwEEGANhDr1NDaXICDdm2
v4IqC5JGaVMGEL+zkMoYTB/UtxcqzLM53hU1v06S2mFbEMjfMiH6A30Rj+YzRbjN
A0Zf1mD+hN6dGkIVHyHzcILzLLPwVJ4TAMeGFArKoWJsYyQk/ZyUOwyN4Ev2hLka
LnYG9X6KWDuIJLWJebyHlQ+g0aqSp8eRlzqwaMechOQJEXph412QlpJ1yvEv6CuW
ql6a4e+GTUqs9irKMxcZBhcESDqZjLldxDwma7M7pPnc+Cc5cwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDSrZjVrIKrJGhUAYg+R1/TqYNiQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMmU0OTU0N2EtNTU3OC0z
MGE4LWIyOGMtMjhiMDhlZjRlMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfKADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBdgddij1jxN9rpuZVxxetPOvPNI0EO/D29W/GRnzG1nE2V5IY1Kxeo
2SAnhGR7bGeSO6ByLJfuoSCOWi68gwaGTgf+ITstv1C3irTvoAPH8CNEL7jm53p7
UlMrcLj8ScLBjOGOjvZGkyTHOwvYnq4qfHNlJCynvOMwcSnJqueJxjgOVp5uKOmt
WlRCcWZ8zZ6/ROZGm7BxvB6fjE40Q7Zmo+hASKibjB1rdDNwrqB1i4cG8xXx0s97
9HnBnK3tMt93UqzYvVZ7tPsPOZx02SlXWoJwf0oUJ2lDU1K1kbU+ltHsM0b7gyU1
cObEXcmYNj3htinNQtHvWV2F7swGfARM
-----END CERTIFICATE-----