Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8dd2cb47-df4d-3478-9158-8c4906bb6092.roa
File:                     8dd2cb47-df4d-3478-9158-8c4906bb6092.roa (raw, json)
Hash identifier:          k/I8yUNR8Ftfv7J9fFIdGNd8c0XsfwghAQG38UI9dmk=
Subject key identifier:   B5:04:5B:CE:42:CD:F8:56:E6:33:5C:72:76:BA:49:1E:98:E5:73:E5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75423CD9E58CDC964BE900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8dd2cb47-df4d-3478-9158-8c4906bb6092.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     855
IP address blocks:        142.162.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:42:3c:d9:e5:8c:dc:96:4b:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=7edee179-50ca-4337-be5a-d8166b527959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2c:03:5d:36:79:12:be:10:2a:3f:7b:5c:29:
                    20:7d:74:5d:a5:04:c6:4b:af:be:7c:2b:a9:0a:87:
                    89:c3:7a:85:0a:7a:a3:1b:b9:1e:8e:0d:50:85:61:
                    d7:0b:99:79:d0:97:26:45:ad:b1:40:d0:04:de:3c:
                    d1:d6:ae:ab:37:86:a3:79:75:b9:1e:df:99:e4:f1:
                    93:2b:17:9e:d8:b9:f8:5a:1a:5b:b3:e7:9c:9f:c3:
                    26:b5:30:21:92:e0:c2:ef:c5:92:81:43:3d:f1:a8:
                    e8:d8:d0:5a:37:b9:77:98:e8:d4:97:9a:cd:1e:82:
                    42:ca:12:fe:3d:cc:31:b2:f7:d0:25:e4:14:5b:b1:
                    a6:57:76:8b:04:ae:9b:ea:58:4a:99:8b:50:9c:df:
                    b0:e4:dc:56:35:32:b7:16:68:89:ae:b1:bb:02:a8:
                    0f:97:74:bd:d1:e9:47:c8:80:9f:a5:c8:a7:4a:98:
                    26:2e:45:1f:ef:28:dd:36:9b:4c:21:68:3a:3e:6b:
                    e5:d6:9f:80:8b:20:cb:5f:cc:91:da:86:f4:7e:d7:
                    0e:de:1b:e4:4e:02:1d:46:fc:d4:14:11:e2:88:8a:
                    e5:d8:46:62:a5:5c:51:2a:89:eb:22:a0:49:21:d8:
                    ab:45:15:3f:58:98:a5:e4:39:96:69:c2:a3:9d:e0:
                    ce:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:04:5B:CE:42:CD:F8:56:E6:33:5C:72:76:BA:49:1E:98:E5:73:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8dd2cb47-df4d-3478-9158-8c4906bb6092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.162.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:89:33:4f:e6:ff:e0:90:53:d4:0a:33:ef:f0:0d:d9:25:0a:
         9f:cb:35:14:bd:a3:f8:24:47:66:0e:4a:b5:02:24:7a:b0:54:
         6a:c8:76:24:28:fb:44:e5:a4:88:ba:97:b0:d9:62:21:4b:e5:
         0a:9e:b8:cb:33:fd:51:b6:77:70:bb:5d:d8:76:f2:f2:9a:b2:
         b4:1a:1c:f4:18:a8:a5:52:a0:ed:04:ca:d0:bb:d0:7b:01:74:
         0b:68:a0:c3:e9:29:bd:10:2e:a7:f0:7b:54:7b:1b:bb:cc:eb:
         7d:10:e8:dd:94:a3:03:8f:d4:49:dd:d3:7d:66:19:8a:77:bc:
         97:2c:b7:93:f8:23:f3:f5:08:f4:4d:25:29:66:7d:c5:91:78:
         f1:a8:ee:ec:13:c9:85:ce:3b:e2:8f:42:4a:1b:4a:b2:f3:ba:
         13:91:5f:6e:57:58:52:ae:13:42:84:32:5f:2a:2e:7d:6b:b3:
         40:34:4c:6c:96:16:f3:04:35:16:82:1e:94:fc:e3:06:1d:de:
         c0:eb:ee:22:82:36:1d:27:13:48:bc:cc:b6:11:75:c9:e7:e5:
         b0:0b:44:02:89:8d:56:df:3b:e2:6f:a7:98:d1:ca:5f:87:2a:
         35:9e:27:0b:ba:86:5d:84:d6:f7:79:80:14:8a:bd:1c:3b:78:
         22:2d:3e:1b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEGvdUI82eWM3JZL6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDQyNTEyMDAwMFoXDTIzMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
N2VkZWUxNzktNTBjYS00MzM3LWJlNWEtZDgxNjZiNTI3OTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSwDXTZ5Er4QKj97XCkgfXRdpQTGS6++fCup
CoeJw3qFCnqjG7kejg1QhWHXC5l50JcmRa2xQNAE3jzR1q6rN4ajeXW5Ht+Z5PGT
Kxee2Ln4Whpbs+ecn8MmtTAhkuDC78WSgUM98ajo2NBaN7l3mOjUl5rNHoJCyhL+
PcwxsvfQJeQUW7GmV3aLBK6b6lhKmYtQnN+w5NxWNTK3FmiJrrG7AqgPl3S90elH
yICfpcinSpgmLkUf7yjdNptMIWg6Pmvl1p+AiyDLX8yR2ob0ftcO3hvkTgIdRvzU
FBHiiIrl2EZipVxRKonrIqBJIdirRRU/WJil5DmWacKjneDOnwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLUEW85CzfhW5jNccna6SR6Y5XPlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOGRkMmNiNDctZGY0ZC0z
NDc4LTkxNTgtOGM0OTA2YmI2MDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjqIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAA4kzT+b/4JBT1Aoz7/AN2SUKn8s1FL2j+CRHZg5KtQIkerBUash2JCj7
ROWkiLqXsNliIUvlCp64yzP9UbZ3cLtd2Hby8pqytBoc9BiopVKg7QTK0LvQewF0
C2igw+kpvRAup/B7VHsbu8zrfRDo3ZSjA4/USd3TfWYZine8lyy3k/gj8/UI9E0l
KWZ9xZF48aju7BPJhc474o9CShtKsvO6E5FfbldYUq4TQoQyXyoufWuzQDRMbJYW
8wQ1FoIelPzjBh3ewOvuIoI2HScTSLzMthF1yeflsAtEAomNVt874m+nmNHKX4cq
NZ4nC7qGXYTW93mAFIq9HDt4Ii0+Gw==
-----END CERTIFICATE-----