Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a155ba7d-38ba-385e-9e29-8dfac5bfe0e2.roa
File:                     a155ba7d-38ba-385e-9e29-8dfac5bfe0e2.roa (raw, json)
Hash identifier:          cdh7wvWt+rWVQ1DsqKR18rU0kWV8zu0zC8WaW050lP0=
Subject key identifier:   E8:1C:F1:3D:8F:04:71:DC:89:B2:9E:6E:4A:3F:B8:4B:6F:7E:DA:14
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449316CF47BAB165981AA73800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a155ba7d-38ba-385e-9e29-8dfac5bfe0e2.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        2001:4958:732::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:cf:47:ba:b1:65:98:1a:a7:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=3d246cef-2153-4dbe-b842-9ffbb6fcd688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:45:c8:c9:e3:aa:c6:15:73:14:d1:90:80:3a:
                    9f:df:69:e1:30:68:9f:80:f2:1e:42:be:73:9f:b8:
                    7b:b7:ad:c7:c2:47:99:49:a2:0f:16:6d:eb:58:9a:
                    a7:5c:51:d6:a9:d1:f6:c4:7e:13:31:36:94:4e:5e:
                    c0:90:f6:1b:b7:9b:2d:1e:5a:e8:d3:38:59:11:86:
                    15:69:c8:49:34:ad:30:c5:67:44:1a:98:bd:12:de:
                    f8:c2:7f:f1:96:ad:7e:1a:af:07:30:a8:f9:a9:8b:
                    c6:55:25:1a:14:86:69:19:9d:23:ba:ab:b4:12:18:
                    52:70:11:88:92:7b:63:8c:f0:d4:0a:61:c6:94:1b:
                    9a:ce:04:95:b5:39:15:de:9d:68:b5:aa:8d:26:3b:
                    95:19:75:d4:40:3f:11:2f:7c:79:5e:76:2b:1d:bb:
                    00:ae:46:56:33:43:7c:7f:c5:c3:53:5d:94:30:0b:
                    cc:7b:9e:18:e1:10:4b:59:72:65:6d:d7:d4:29:69:
                    32:d6:fc:fb:df:9d:f4:f0:1e:f7:54:f6:a9:90:1f:
                    e8:53:ff:20:4a:74:0e:1b:8f:ad:a4:69:e8:75:93:
                    3e:98:f1:7d:0c:7b:44:61:02:16:37:bf:96:af:9b:
                    ad:fc:a3:12:a4:36:07:f0:79:d8:f0:08:c3:7d:a0:
                    c1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1C:F1:3D:8F:04:71:DC:89:B2:9E:6E:4A:3F:B8:4B:6F:7E:DA:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a155ba7d-38ba-385e-9e29-8dfac5bfe0e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:732::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:3e:23:3b:7d:a2:51:80:5b:eb:7f:de:0f:2e:62:39:33:19:
         0c:70:8d:87:d3:46:b9:a9:8f:65:1f:c9:6a:53:ea:a2:4b:ec:
         3b:2c:75:12:32:6b:e2:76:24:86:b2:d7:a2:9f:57:10:ed:57:
         3d:ab:d6:6f:f1:1e:c6:fd:2f:5d:f2:c7:81:fc:a4:b6:dd:ab:
         9a:58:12:9c:a5:75:3d:fe:ae:69:c5:91:7c:00:2d:72:32:c1:
         da:3f:4e:1d:df:d0:bd:fd:a1:31:03:4c:e1:be:5a:e4:a2:0f:
         06:ee:11:15:9f:1b:7b:1d:6d:08:12:d9:f3:29:a3:89:bd:32:
         dc:4f:2a:35:6f:ae:6a:57:9b:8a:6b:23:06:d5:06:8d:54:33:
         af:e0:af:4b:ef:70:16:ac:f1:21:5c:42:89:f6:b3:71:2f:01:
         42:8b:65:15:fb:7b:23:3f:ef:ba:bb:1e:f9:12:eb:af:66:c4:
         44:1e:3c:08:96:fd:a6:0a:cf:0f:9c:14:33:88:94:f1:b8:ad:
         52:59:2f:ae:47:b6:6d:ba:a1:e5:68:e5:c4:af:2e:65:bb:06:
         0e:95:f9:4c:a2:00:55:87:30:22:e6:95:37:28:7e:65:40:b1:
         be:71:5c:1f:27:8e:ed:f7:b6:83:d0:3d:72:51:ec:81:35:ca:
         77:ec:65:b6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWESTFs9HurFlmBqnOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
M2QyNDZjZWYtMjE1My00ZGJlLWI4NDItOWZmYmI2ZmNkNjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EXIyeOqxhVzFNGQgDqf32nhMGifgPIeQr5z
n7h7t63HwkeZSaIPFm3rWJqnXFHWqdH2xH4TMTaUTl7AkPYbt5stHlro0zhZEYYV
achJNK0wxWdEGpi9Et74wn/xlq1+Gq8HMKj5qYvGVSUaFIZpGZ0juqu0EhhScBGI
kntjjPDUCmHGlBuazgSVtTkV3p1otaqNJjuVGXXUQD8RL3x5XnYrHbsArkZWM0N8
f8XDU12UMAvMe54Y4RBLWXJlbdfUKWky1vz735308B73VPapkB/oU/8gSnQOG4+t
pGnodZM+mPF9DHtEYQIWN7+Wr5ut/KMSpDYH8HnY8AjDfaDBCQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOgc8T2PBHHcibKebko/uEtvftoUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTE1NWJhN2QtMzhiYS0z
ODVlLTllMjktOGRmYWM1YmZlMGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFJWAcy
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABM+Izt9olGAW+t/3g8uYjkzGQxwjYfTRrmpj2UfyWpT6qJL7Dss
dRIya+J2JIay16KfVxDtVz2r1m/xHsb9L13yx4H8pLbdq5pYEpyldT3+rmnFkXwA
LXIywdo/Th3f0L39oTEDTOG+WuSiDwbuERWfG3sdbQgS2fMpo4m9MtxPKjVvrmpX
m4prIwbVBo1UM6/gr0vvcBas8SFcQon2s3EvAUKLZRX7eyM/77q7HvkS669mxEQe
PAiW/aYKzw+cFDOIlPG4rVJZL65Htm26oeVo5cSvLmW7Bg6V+UyiAFWHMCLmlTco
fmVAsb5xXB8nju33toPQPXJR7IE1ynfsZbY=
-----END CERTIFICATE-----