Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b1b97596-a5db-352c-bd91-5e4f2912f465.roa
File:                     b1b97596-a5db-352c-bd91-5e4f2912f465.roa (raw, json)
Hash identifier:          g5d92PnCU1G1G6GODBaS1V8zsdVWAlNWDddsNAPD4vw=
Subject key identifier:   94:10:69:F1:29:14:04:85:5A:76:50:20:4D:A3:41:D6:7C:9C:49:48
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF74C959E36C4E578B220660
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b1b97596-a5db-352c-bd91-5e4f2912f465.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     10965
IP address blocks:        64.4.90.96/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:74:c9:59:e3:6c:4e:57:8b:22:06:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=f77a3a63-69a1-4ec4-b86a-afe01cd82ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:af:7d:15:22:8c:0c:c7:9d:b8:be:41:0f:
                    bc:cc:e9:77:9b:bf:3a:da:34:51:6b:0a:b9:62:cb:
                    33:71:05:bb:7f:c8:12:43:f9:a3:32:fa:76:c9:d0:
                    a6:82:4d:5d:0e:c7:14:70:2c:b3:22:9b:82:21:b6:
                    62:c5:34:a5:2f:7f:3f:c6:cb:34:34:96:72:c7:92:
                    01:e0:9f:4c:a3:bd:e6:c0:fd:39:b3:06:4c:87:11:
                    76:b4:f5:a2:42:1c:27:91:07:ba:af:4f:73:d3:e1:
                    a5:b2:0a:8d:78:c6:cc:c1:fb:16:c5:93:09:df:11:
                    27:dd:af:be:33:ce:76:b0:cf:d1:a7:84:9b:5c:74:
                    f4:54:a3:89:6b:1a:be:39:f3:09:d3:c7:50:10:82:
                    35:2e:1d:c0:15:ed:0f:6b:fa:32:b7:c8:ad:d3:cd:
                    4d:c5:ab:67:76:f1:82:e1:20:a4:91:30:36:ce:26:
                    47:72:53:ad:e2:37:67:37:4f:51:2c:61:5a:73:bd:
                    62:92:d6:6f:05:39:73:92:80:af:7b:1a:ce:8a:02:
                    f0:b8:f4:e4:46:b3:cd:c6:d3:eb:c4:aa:70:89:7a:
                    af:f2:d4:3f:19:10:5f:4b:e2:f6:40:44:28:b0:14:
                    84:3d:80:25:4a:da:6e:03:c2:44:5d:53:42:a3:cf:
                    5c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:10:69:F1:29:14:04:85:5A:76:50:20:4D:A3:41:D6:7C:9C:49:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b1b97596-a5db-352c-bd91-5e4f2912f465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.90.96/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:3d:6a:0b:7e:f2:71:68:3f:97:5f:c0:13:60:6b:5a:6d:58:
         a7:a6:5b:e3:29:a1:07:df:6c:54:47:90:20:f8:84:d0:45:3d:
         4b:70:4b:10:31:b5:a5:2f:3f:2e:27:c5:35:15:b3:ae:24:1f:
         a6:d6:7c:d3:0d:cf:17:39:8b:7c:bd:4f:5e:7a:30:30:2b:bf:
         6b:5d:ac:b3:50:34:9e:11:71:e1:75:f1:bb:56:6f:aa:fa:ea:
         c5:ce:ab:03:fe:0c:32:60:dc:93:96:d7:7e:7a:8e:a4:23:01:
         a0:fb:96:88:6a:ef:a8:d4:98:c5:d8:66:2b:46:e7:e2:6d:42:
         e7:42:be:7a:67:5e:32:a3:43:d5:e7:d0:e2:01:45:43:ad:20:
         ae:43:8b:6f:c9:84:88:2b:f9:63:27:cf:4a:57:06:a8:0f:40:
         0a:b8:7d:8c:34:f7:04:58:a0:c5:da:f9:a2:cf:4e:c1:69:aa:
         ed:3d:44:f6:01:93:25:b9:cc:1b:b7:be:cc:f2:03:bb:2b:ae:
         c5:fc:27:1b:a7:e3:a2:91:bd:8e:13:37:51:18:b8:08:f2:88:
         18:d7:74:a1:d3:e7:c2:95:a5:b8:34:95:28:97:5c:27:bb:2a:
         c6:9d:94:0d:b1:0e:77:b0:a5:8d:29:db:f6:eb:b3:24:8e:9f:
         4c:da:c5:ac
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEGvdMlZ42xOV4siBmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDQyNTEyMDAwMFoXDTIzMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
Zjc3YTNhNjMtNjlhMS00ZWM0LWI4NmEtYWZlMDFjZDgyYWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDGvfRUijAzHnbi+QQ+8zOl3m7862jRRawq5
YsszcQW7f8gSQ/mjMvp2ydCmgk1dDscUcCyzIpuCIbZixTSlL38/xss0NJZyx5IB
4J9Mo73mwP05swZMhxF2tPWiQhwnkQe6r09z0+GlsgqNeMbMwfsWxZMJ3xEn3a++
M852sM/Rp4SbXHT0VKOJaxq+OfMJ08dQEII1Lh3AFe0Pa/oyt8it081NxatndvGC
4SCkkTA2ziZHclOt4jdnN09RLGFac71iktZvBTlzkoCvexrOigLwuPTkRrPNxtPr
xKpwiXqv8tQ/GRBfS+L2QEQosBSEPYAlStpuA8JEXVNCo89cswIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJQQafEpFASFWnZQIE2jQdZ8nElIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjFiOTc1OTYtYTVkYi0z
NTJjLWJkOTEtNWU0ZjI5MTJmNDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEQARaYDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBZPWoLfvJxaD+XX8ATYGtabVinplvjKaEH32xUR5Ag+ITQRT1LcEsQ
MbWlLz8uJ8U1FbOuJB+m1nzTDc8XOYt8vU9eejAwK79rXayzUDSeEXHhdfG7Vm+q
+urFzqsD/gwyYNyTltd+eo6kIwGg+5aIau+o1JjF2GYrRufibULnQr56Z14yo0PV
59DiAUVDrSCuQ4tvyYSIK/ljJ89KVwaoD0AKuH2MNPcEWKDF2vmiz07BaartPUT2
AZMlucwbt77M8gO7K67F/Ccbp+Oikb2OEzdRGLgI8ogY13Sh0+fClaW4NJUol1wn
uyrGnZQNsQ53sKWNKdv267Mkjp9M2sWs
-----END CERTIFICATE-----