Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42a77f6e-5253-37a0-8ef3-fa33a25a1b7b.roa
File:                     42a77f6e-5253-37a0-8ef3-fa33a25a1b7b.roa (raw, json)
Hash identifier:          dsNprqEDobzpd2MGFg5UDGCU60UJcgG4UGw9VqtDOFI=
Subject key identifier:   B3:C0:AA:81:E5:CA:17:85:2A:16:14:75:45:4B:24:39:9A:DE:8E:13
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285844931379777E1CBD91A88C2540
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42a77f6e-5253-37a0-8ef3-fa33a25a1b7b.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        64.230.230.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:13:79:77:7e:1c:bd:91:a8:8c:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=27dcc7dc-62d8-4ed7-837b-3697f56412ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3c:d5:cc:ba:65:23:df:8d:1a:8b:1a:96:87:
                    ec:07:45:34:46:1f:d3:e0:db:8c:ff:40:58:cb:4c:
                    3d:07:47:20:03:76:0b:bf:58:02:79:0e:c4:1a:2f:
                    74:c9:09:8d:29:42:36:76:fe:38:a0:94:29:8e:b5:
                    0f:e1:34:78:9d:c0:de:ff:ff:07:46:e1:35:f8:d0:
                    1a:44:3f:24:35:37:97:76:3f:f0:fa:9d:48:3b:df:
                    9f:42:3a:9e:8c:d4:4f:b2:f9:32:87:85:bc:33:25:
                    ce:51:34:bc:e4:f1:8e:5f:b3:39:d8:d6:d6:08:e1:
                    b3:8e:de:8d:5a:05:79:59:8c:e6:db:69:96:24:3e:
                    0c:4f:55:b5:07:83:d8:e1:95:f0:c9:7c:f5:13:73:
                    1f:a2:2c:0a:f0:2d:6f:4e:7d:02:a9:17:ba:f9:43:
                    e2:42:e2:78:c5:29:c2:97:e6:d6:02:74:46:6b:14:
                    e8:d3:4a:15:f7:d1:da:8b:79:73:90:7b:6c:d5:50:
                    53:bb:72:b4:59:f1:67:6d:25:33:e5:4b:1a:73:69:
                    ee:87:6d:d3:e6:10:26:5e:10:16:d0:78:7c:d5:54:
                    8c:ba:81:5d:b9:6f:f3:b5:67:83:7e:59:65:5a:68:
                    e2:de:92:c1:15:e9:70:67:e6:5c:d5:39:51:c9:6d:
                    f9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C0:AA:81:E5:CA:17:85:2A:16:14:75:45:4B:24:39:9A:DE:8E:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42a77f6e-5253-37a0-8ef3-fa33a25a1b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.230.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:dd:b9:36:41:96:73:fc:a3:ca:bb:5a:8b:29:5f:1c:51:db:
         e2:90:ac:46:0a:69:86:47:79:71:c6:8b:05:00:25:4e:d3:a2:
         7c:e3:58:e2:68:fb:a8:37:a5:0b:2d:12:3f:14:ee:c5:32:6e:
         b0:1d:e0:3b:a3:50:43:74:92:63:e4:fe:e2:34:3e:41:c8:a2:
         16:74:2e:c4:2e:07:ff:9c:46:d7:35:61:a5:79:c3:fc:99:1f:
         b1:5f:fe:00:ea:e6:3b:96:2e:03:b6:8f:d3:61:00:22:33:21:
         84:d8:72:23:bf:28:f9:88:ec:89:ed:91:0a:eb:43:9f:a0:63:
         a4:55:2e:09:c4:a1:16:c8:90:97:6f:ee:1e:1e:ed:5c:e2:81:
         b5:6f:20:88:55:ec:1e:43:e6:5e:dc:b6:bd:e5:3e:6a:3e:7e:
         6f:02:bb:5e:9d:96:5a:35:7c:92:91:16:fb:bb:53:c2:9f:e4:
         0b:5d:03:cd:82:34:5c:08:41:d1:f9:b1:d6:cf:77:4d:b8:93:
         83:b7:95:75:19:c4:67:bd:06:84:f8:de:45:a3:aa:bd:35:9a:
         03:ac:b8:3d:fa:2d:3b:76:5f:e3:39:65:d9:a7:42:70:a1:38:
         7a:30:ad:40:45:68:7a:ce:01:ad:55:ae:53:0c:5c:ce:e4:42:
         49:d7:1d:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTE3l3fhy9kaiMJUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MjdkY2M3ZGMtNjJkOC00ZWQ3LTgzN2ItMzY5N2Y1NjQxMmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zzVzLplI9+NGosalofsB0U0Rh/T4NuM/0BY
y0w9B0cgA3YLv1gCeQ7EGi90yQmNKUI2dv44oJQpjrUP4TR4ncDe//8HRuE1+NAa
RD8kNTeXdj/w+p1IO9+fQjqejNRPsvkyh4W8MyXOUTS85PGOX7M52NbWCOGzjt6N
WgV5WYzm22mWJD4MT1W1B4PY4ZXwyXz1E3MfoiwK8C1vTn0CqRe6+UPiQuJ4xSnC
l+bWAnRGaxTo00oV99Hai3lzkHts1VBTu3K0WfFnbSUz5Usac2nuh23T5hAmXhAW
0Hh81VSMuoFduW/ztWeDflllWmji3pLBFelwZ+Zc1TlRyW35MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLPAqoHlyheFKhYUdUVLJDma3o4TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDJhNzdmNmUtNTI1My0z
N2EwLThlZjMtZmEzM2EyNWExYjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQObmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIfduTZBlnP8o8q7WospXxxR2+KQrEYKaYZHeXHGiwUAJU7TonzjWOJo
+6g3pQstEj8U7sUybrAd4DujUEN0kmPk/uI0PkHIohZ0LsQuB/+cRtc1YaV5w/yZ
H7Ff/gDq5juWLgO2j9NhACIzIYTYciO/KPmI7IntkQrrQ5+gY6RVLgnEoRbIkJdv
7h4e7VzigbVvIIhV7B5D5l7ctr3lPmo+fm8Cu16dllo1fJKRFvu7U8Kf5AtdA82C
NFwIQdH5sdbPd024k4O3lXUZxGe9BoT43kWjqr01mgOsuD36LTt2X+M5ZdmnQnCh
OHowrUBFaHrOAa1VrlMMXM7kQknXHS4=
-----END CERTIFICATE-----