Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9006984e-9cd7-3b37-8e29-97f8109fff6a.roa
File:                     9006984e-9cd7-3b37-8e29-97f8109fff6a.roa (raw, json)
Hash identifier:          Ign/4w9HTsTa15AtSV7OCJpH910oDc9jqoDsz7sx/pk=
Subject key identifier:   E7:DE:75:AB:83:91:39:90:AF:D4:8B:4B:83:28:02:E1:A7:B1:0B:A2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE5567A07C3D8574B135280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9006984e-9cd7-3b37-8e29-97f8109fff6a.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        184.151.236.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:56:7a:07:c3:d8:57:4b:13:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=a4ad4d93-baf0-485d-9173-0e2bb75f7335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:da:e4:07:eb:30:85:2e:ee:bd:bf:79:ad:df:
                    c5:01:bb:e5:81:b3:f2:5a:cd:56:98:c9:e2:84:de:
                    f9:97:7d:f1:8c:ee:ed:a3:2b:37:7d:59:b4:ee:35:
                    e9:0f:d7:df:6a:f3:fa:2e:53:c4:19:7c:cd:eb:dc:
                    c2:85:20:94:20:be:11:7e:ef:55:83:b9:48:c6:8f:
                    57:0f:1a:f2:77:2a:84:7d:04:5f:ab:09:f3:93:91:
                    e5:fa:76:bb:56:ad:fa:0d:8a:9a:cc:ef:a4:a2:ba:
                    c0:c5:70:a0:a8:0c:3a:43:14:d0:db:f8:5f:e2:bb:
                    bb:7c:9f:55:a7:9a:84:16:d7:81:41:87:5a:1f:5f:
                    62:7a:7e:e3:c5:33:92:3f:56:d5:83:72:8c:24:62:
                    81:d0:2c:91:68:f9:ff:3e:2b:d0:e0:0b:a7:5b:6c:
                    17:31:7f:f3:42:e9:d9:bc:c8:77:44:0b:85:71:2d:
                    db:30:8e:b4:9c:1d:98:c9:ec:7b:46:bf:e5:5d:3c:
                    8c:64:61:9b:03:6a:a8:89:c4:9c:c2:0d:45:4b:42:
                    4f:d3:46:fc:30:df:e7:2e:bf:6c:2d:af:41:f8:49:
                    3a:2d:21:de:44:7a:93:75:89:79:b1:c5:da:88:e2:
                    32:a1:24:b4:af:3a:22:43:f2:5a:ce:7d:6b:10:87:
                    c3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DE:75:AB:83:91:39:90:AF:D4:8B:4B:83:28:02:E1:A7:B1:0B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9006984e-9cd7-3b37-8e29-97f8109fff6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:43:86:6c:8a:4b:b2:91:33:27:41:e1:12:42:35:78:cc:d0:
         96:5f:21:4e:85:3f:e4:ae:60:28:07:bf:56:36:24:48:f5:fc:
         02:10:24:b6:f0:8f:4a:4b:27:0e:00:37:b5:4d:4a:ba:18:65:
         cd:17:ea:38:ae:bb:75:4c:a4:9c:2b:1b:22:cc:06:18:b7:e2:
         b9:c1:15:f2:4b:96:7b:42:c2:09:3c:81:5f:84:51:8d:70:c0:
         d0:a0:f2:cf:bb:57:eb:e1:4b:bb:62:52:49:39:d6:62:0f:b2:
         e3:b6:23:52:b5:98:6e:bd:aa:19:42:c5:30:39:9c:e9:33:27:
         e1:f0:50:c8:bb:58:41:75:e4:50:f4:14:b7:98:a8:21:e8:fc:
         80:fd:25:1c:bc:d0:dd:a1:54:66:38:6a:0d:3a:fc:32:85:11:
         93:47:0d:0f:f7:97:ae:68:74:d9:3e:86:7a:9e:d5:a3:65:39:
         8c:ab:50:48:ff:c8:fb:18:b1:91:b5:f0:f2:6c:48:36:d1:cd:
         1f:a6:80:f1:25:43:3b:a7:c7:95:17:32:6e:e7:6a:d0:0b:e1:
         38:65:26:32:30:8a:16:c9:41:87:8d:79:9e:a5:f4:43:9a:90:
         28:e6:8a:56:c9:0c:b5:69:de:51:99:c6:68:6f:6d:c3:f6:13:
         ec:c5:ff:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5VZ6B8PYV0sTUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
YTRhZDRkOTMtYmFmMC00ODVkLTkxNzMtMGUyYmI3NWY3MzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0drkB+swhS7uvb95rd/FAbvlgbPyWs1WmMni
hN75l33xjO7toys3fVm07jXpD9ffavP6LlPEGXzN69zChSCUIL4Rfu9Vg7lIxo9X
DxrydyqEfQRfqwnzk5Hl+na7Vq36DYqazO+korrAxXCgqAw6QxTQ2/hf4ru7fJ9V
p5qEFteBQYdaH19ien7jxTOSP1bVg3KMJGKB0CyRaPn/PivQ4AunW2wXMX/zQunZ
vMh3RAuFcS3bMI60nB2Yyex7Rr/lXTyMZGGbA2qoicScwg1FS0JP00b8MN/nLr9s
La9B+Ek6LSHeRHqTdYl5scXaiOIyoSS0rzoiQ/Jazn1rEIfDAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOfedauDkTmQr9SLS4MoAuGnsQuiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOTAwNjk4NGUtOWNkNy0z
YjM3LThlMjktOTdmODEwOWZmZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuJfsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABpDhmyKS7KRMydB4RJCNXjM0JZfIU6FP+SuYCgHv1Y2JEj1/AIQJLbw
j0pLJw4AN7VNSroYZc0X6jiuu3VMpJwrGyLMBhi34rnBFfJLlntCwgk8gV+EUY1w
wNCg8s+7V+vhS7tiUkk51mIPsuO2I1K1mG69qhlCxTA5nOkzJ+HwUMi7WEF15FD0
FLeYqCHo/ID9JRy80N2hVGY4ag06/DKFEZNHDQ/3l65odNk+hnqe1aNlOYyrUEj/
yPsYsZG18PJsSDbRzR+mgPElQzunx5UXMm7natAL4ThlJjIwihbJQYeNeZ6l9EOa
kCjmilbJDLVp3lGZxmhvbcP2E+zF/yY=
-----END CERTIFICATE-----