Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6ee30d40-0dc6-3490-9445-e7ac287bfc8e.roa
File:                     6ee30d40-0dc6-3490-9445-e7ac287bfc8e.roa (raw, json)
Hash identifier:          FgWu+fnOfL7Wh6r4PWzgDctXqiQ6ZKimxvC7rIFTtUU=
Subject key identifier:   F5:9B:0A:15:AF:6E:8E:A0:6A:39:1C:76:A8:6E:CE:2B:48:01:8C:F3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285840C1D3EFBE6E3766E85E630D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6ee30d40-0dc6-3490-9445-e7ac287bfc8e.roa
Signing time:             Mon 30 Jan 2023 12:00:00 +0000
ROA not before:           Mon 30 Jan 2023 12:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        70.25.216.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:d3:ef:be:6e:37:66:e8:5e:63:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 30 12:00:00 2023 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=08dfe8d3-08e2-4b0c-a95e-30551ead1994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:64:01:dd:c9:71:d3:46:ee:45:98:1c:03:
                    9d:86:bb:0e:72:f5:3a:96:a3:79:7a:64:62:79:7b:
                    b3:a2:69:0f:97:e5:11:24:08:35:67:1e:7c:e0:e1:
                    c7:60:20:82:57:13:e1:64:dd:46:23:2c:c9:68:c9:
                    01:38:6b:7b:dc:82:f1:8b:57:f1:e4:33:2b:37:a2:
                    61:34:ad:42:41:27:a6:d4:16:c5:0c:f3:b6:38:1e:
                    9e:97:02:12:25:7c:41:e0:34:48:1e:81:b8:32:b0:
                    8c:f1:0f:90:f4:98:7c:0f:1c:8b:07:67:01:c7:8a:
                    11:42:f5:df:11:bf:8d:e4:65:41:9c:5d:66:84:89:
                    7b:89:ad:85:8c:a0:12:83:fb:28:7c:cd:84:df:ec:
                    f5:81:e6:ab:c3:76:69:28:de:91:aa:5b:b0:cb:a0:
                    03:37:cf:cf:3a:42:48:61:4c:56:be:ba:59:b2:eb:
                    13:93:f4:a1:ff:92:ed:9e:c4:e0:c4:b4:21:2d:d4:
                    c8:bd:f4:9a:5f:8a:ad:ba:1c:93:6d:fb:1d:92:dc:
                    5c:80:1c:7c:4a:4c:b8:93:bf:ac:60:0c:55:31:9c:
                    87:59:5d:c6:10:fc:7c:d1:29:c0:d6:a2:22:b1:03:
                    aa:78:8b:53:06:57:2e:e8:fc:a0:ec:9b:28:ab:e9:
                    59:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9B:0A:15:AF:6E:8E:A0:6A:39:1C:76:A8:6E:CE:2B:48:01:8C:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6ee30d40-0dc6-3490-9445-e7ac287bfc8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.25.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f0:79:1f:1e:be:d2:ad:15:67:c5:1d:34:ce:a6:7d:ae:e7:
         04:be:42:46:32:f4:ba:e0:15:fa:1f:1b:91:6f:b3:29:3c:0c:
         e6:f2:6a:08:3b:43:25:b7:02:41:5d:da:8f:25:88:4f:66:92:
         e5:d8:9f:b4:d9:31:a9:a5:f6:2e:85:ab:c7:ad:5b:5c:68:dc:
         c8:da:cc:af:3d:94:89:b0:71:1b:83:75:9b:f5:3a:49:99:c8:
         d1:3e:69:98:6a:c6:5f:c8:60:5b:ca:1a:af:4d:1d:81:34:8a:
         06:a8:e3:27:9f:f8:8f:98:fc:54:e6:94:f5:a8:4f:7c:2d:42:
         5a:32:19:b0:aa:04:f0:3a:d6:85:f8:e9:54:fa:0f:a0:d9:5f:
         b2:22:fc:b8:2d:f3:b8:94:f6:6d:2f:b5:2d:97:30:72:27:e7:
         b4:b9:a7:86:81:d4:b0:21:72:d3:8e:29:7e:cf:83:6c:61:ef:
         a8:83:99:e0:86:d1:f2:a0:77:e9:fe:c1:06:2a:b6:95:b6:fd:
         1b:47:b2:06:71:f0:5c:7d:ee:4b:8d:5d:0c:e7:79:ee:d2:09:
         99:11:36:38:35:a9:fb:c8:3a:a6:49:f7:80:53:be:6c:2a:87:
         7f:5c:4c:62:3b:8c:de:fc:9b:98:4d:63:cc:00:c4:c0:a2:b3:
         b9:75:c9:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEDB0+++bjdm6F5jDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDEzMDEyMDAwMFoXDTIzMDUwMjA0MDAwMFowLzEtMCsGA1UEAxMk
MDhkZmU4ZDMtMDhlMi00YjBjLWE5NWUtMzA1NTFlYWQxOTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXRkAd3JcdNG7kWYHAOdhrsOcvU6lqN5emRi
eXuzomkPl+URJAg1Zx584OHHYCCCVxPhZN1GIyzJaMkBOGt73ILxi1fx5DMrN6Jh
NK1CQSem1BbFDPO2OB6elwISJXxB4DRIHoG4MrCM8Q+Q9Jh8DxyLB2cBx4oRQvXf
Eb+N5GVBnF1mhIl7ia2FjKASg/sofM2E3+z1gearw3ZpKN6Rqluwy6ADN8/POkJI
YUxWvrpZsusTk/Sh/5LtnsTgxLQhLdTIvfSaX4qtuhyTbfsdktxcgBx8Sky4k7+s
YAxVMZyHWV3GEPx80SnA1qIisQOqeItTBlcu6Pyg7Jsoq+lZTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPWbChWvbo6gajkcdqhuzitIAYzzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNmVlMzBkNDAtMGRjNi0z
NDkwLTk0NDUtZTdhYzI4N2JmYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRhnYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHweR8evtKtFWfFHTTOpn2u5wS+QkYy9LrgFfofG5Fvsyk8DObyagg7
QyW3AkFd2o8liE9mkuXYn7TZMaml9i6Fq8etW1xo3MjazK89lImwcRuDdZv1OkmZ
yNE+aZhqxl/IYFvKGq9NHYE0igao4yef+I+Y/FTmlPWoT3wtQloyGbCqBPA61oX4
6VT6D6DZX7Ii/Lgt87iU9m0vtS2XMHIn57S5p4aB1LAhctOOKX7Pg2xh76iDmeCG
0fKgd+n+wQYqtpW2/RtHsgZx8Fx97kuNXQznee7SCZkRNjg1qfvIOqZJ94BTvmwq
h39cTGI7jN78m5hNY8wAxMCis7l1yf4=
-----END CERTIFICATE-----