Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/49b173d6-1608-396a-859c-e2e5fd2b7aad.roa
File:                     49b173d6-1608-396a-859c-e2e5fd2b7aad.roa (raw, json)
Hash identifier:          +PR8yJnYmnlaGCnn/cPA3tVoVqbiw3pTHlUdh3Skaes=
Subject key identifier:   3D:71:D4:5F:F7:54:46:59:96:C4:26:82:76:32:6A:AC:72:A8:D3:D7
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328583FED26E5FD7BADFBBF65CDA500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/49b173d6-1608-396a-859c-e2e5fd2b7aad.roa
Signing time:             Tue 15 Nov 2022 12:00:00 +0000
ROA not before:           Tue 15 Nov 2022 12:00:00 +0000
ROA not after:            Wed 08 Feb 2023 05:00:00 +0000
asID:                     577
IP address blocks:        70.27.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ed:26:e5:fd:7b:ad:fb:bf:65:cd:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov 15 12:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2023 GMT
        Subject: CN=459f215b-d6bf-4a88-ace1-96853a5f3b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:c2:1a:d1:2e:1c:97:bb:35:d2:51:ec:07:
                    d3:bf:65:4c:dc:02:c4:03:ac:63:15:d3:9e:74:cd:
                    e2:4f:73:85:a0:e2:98:85:fb:7b:73:47:17:43:d9:
                    c3:cd:6b:93:c1:65:72:4e:05:f8:60:c0:8d:14:0d:
                    85:1d:b7:b4:a1:14:38:7e:ee:11:7f:ed:07:ec:85:
                    7e:1e:ca:2d:da:73:c0:77:b0:93:62:0e:90:59:2e:
                    bc:3f:a5:33:01:77:38:7b:e7:01:1e:d2:fb:31:4a:
                    ad:fc:c3:46:92:fe:de:97:ca:5d:ea:8f:70:46:06:
                    97:d7:33:bf:bd:76:1a:67:7d:8c:a9:4b:19:50:87:
                    58:ba:b9:45:69:85:83:78:62:69:c0:8f:c4:a4:5d:
                    5d:80:ac:f7:04:6a:ef:1c:7f:9f:ad:07:c2:40:76:
                    aa:6b:cf:f3:c8:59:77:c4:48:be:53:93:b5:aa:a5:
                    dd:89:a6:93:d1:0a:c4:f4:87:c0:08:49:0f:52:0d:
                    fb:ed:67:aa:03:1e:2b:5b:c9:52:02:cb:b9:1b:2e:
                    80:99:28:dc:14:18:83:84:a4:2e:a1:33:d5:15:14:
                    a6:27:39:eb:ad:4f:ad:6b:59:68:de:6f:21:e7:8c:
                    da:ab:e5:31:5f:6b:e2:d3:04:d6:d2:50:58:23:68:
                    88:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:71:D4:5F:F7:54:46:59:96:C4:26:82:76:32:6A:AC:72:A8:D3:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/49b173d6-1608-396a-859c-e2e5fd2b7aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:4a:c3:5c:c3:2d:6f:77:23:e6:96:bc:62:f1:4b:db:9c:1c:
         41:3f:25:2e:66:fd:d3:c9:04:3f:cd:17:83:ea:17:99:c6:2e:
         9c:8c:41:f9:91:d2:5e:f8:5a:c0:cc:21:e2:98:5e:fc:17:d0:
         13:4a:45:0d:28:96:81:61:ea:a9:65:c2:02:dd:52:26:61:29:
         9e:26:c7:dd:36:f9:f8:b3:6b:54:79:29:c4:dc:5e:60:f9:6b:
         d7:bd:a7:f5:09:74:be:c6:d2:1f:52:7d:72:c2:3e:3c:cf:aa:
         a8:a0:19:35:5e:47:43:79:ba:42:9e:ed:07:3d:2f:7c:f0:d0:
         e0:03:94:50:98:a9:ea:81:42:c9:a6:24:c0:d9:c6:d1:a3:e9:
         fc:91:af:19:bc:45:29:86:95:7b:a8:6e:cf:33:2e:45:58:bd:
         48:ee:64:04:af:41:c4:02:1d:5a:65:5b:e6:78:22:23:25:67:
         f5:3c:67:8d:ea:9e:ae:57:c5:3a:ed:01:ab:0f:55:be:33:d6:
         59:60:69:6e:d7:e2:e9:0a:17:30:d7:49:84:81:e9:ae:1d:08:
         72:13:aa:e6:0b:f5:6f:29:b0:0c:39:3a:0c:62:36:7c:9d:24:
         ad:df:a3:b3:cf:0c:a6:0d:bd:c0:2f:eb:0f:c0:60:5d:54:e3:
         83:91:43:4a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/tJuX9e637v2XNpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIyMTExNTEyMDAwMFoXDTIzMDIwODA1MDAwMFowLzEtMCsGA1UEAxMk
NDU5ZjIxNWItZDZiZi00YTg4LWFjZTEtOTY4NTNhNWYzYjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdrCGtEuHJe7NdJR7AfTv2VM3ALEA6xjFdOe
dM3iT3OFoOKYhft7c0cXQ9nDzWuTwWVyTgX4YMCNFA2FHbe0oRQ4fu4Rf+0H7IV+
Hsot2nPAd7CTYg6QWS68P6UzAXc4e+cBHtL7MUqt/MNGkv7el8pd6o9wRgaX1zO/
vXYaZ32MqUsZUIdYurlFaYWDeGJpwI/EpF1dgKz3BGrvHH+frQfCQHaqa8/zyFl3
xEi+U5O1qqXdiaaT0QrE9IfACEkPUg377WeqAx4rW8lSAsu5Gy6AmSjcFBiDhKQu
oTPVFRSmJznrrU+ta1lo3m8h54zaq+UxX2vi0wTW0lBYI2iIZQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD1x1F/3VEZZlsQmgnYyaqxyqNPXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDliMTczZDYtMTYwOC0z
OTZhLTg1OWMtZTJlNWZkMmI3YWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARhswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmUrDXMMtb3cj5pa8YvFL25wcQT8lLmb908kEP80Xg+oXmcYunIxB+ZHS
XvhawMwh4phe/BfQE0pFDSiWgWHqqWXCAt1SJmEpnibH3Tb5+LNrVHkpxNxeYPlr
172n9Ql0vsbSH1J9csI+PM+qqKAZNV5HQ3m6Qp7tBz0vfPDQ4AOUUJip6oFCyaYk
wNnG0aPp/JGvGbxFKYaVe6huzzMuRVi9SO5kBK9BxAIdWmVb5ngiIyVn9Txnjeqe
rlfFOu0Bqw9VvjPWWWBpbtfi6QoXMNdJhIHprh0IchOq5gv1bymwDDk6DGI2fJ0k
rd+js88Mpg29wC/rD8BgXVTjg5FDSg==
-----END CERTIFICATE-----