Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6fe08d7-5c61-35b6-baf5-bf3feaa1bac4.roa
File:                     b6fe08d7-5c61-35b6-baf5-bf3feaa1bac4.roa (raw, json)
Hash identifier:          mMHQglcPj7J0yOtBPO8OWWd1zioKUVUelCG4ORiv+iY=
Subject key identifier:   AD:D0:F4:F2:64:5E:B4:E7:C2:AE:97:8C:AD:B5:B8:94:CE:5E:CF:F0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449316973AE1A17ED348EE5C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6fe08d7-5c61-35b6-baf5-bf3feaa1bac4.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     3848
IP address blocks:        216.208.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:97:3a:e1:a1:7e:d3:48:ee:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=55c77bc2-851e-4591-b79f-db3baa5679b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fb:3e:89:fd:2e:dc:44:75:87:3e:2e:0f:29:
                    d3:ac:9c:15:0e:aa:78:ad:03:dc:4c:1f:c5:95:f4:
                    42:41:8a:37:d2:29:80:e8:b9:6c:8e:50:63:e7:66:
                    0f:68:7e:47:cd:e3:85:3c:de:98:17:27:af:08:7c:
                    8a:0b:55:b5:86:6b:ad:06:42:c6:5b:aa:37:91:24:
                    fe:8d:26:95:fb:81:18:99:24:e5:4f:e5:4c:69:6b:
                    c8:a9:cd:0a:68:06:f2:49:68:c2:2e:4c:a5:cc:32:
                    c7:82:2a:0d:02:de:f9:d3:35:b9:37:df:de:70:2b:
                    11:30:b0:c5:b9:8b:0f:ef:09:07:eb:6b:46:14:27:
                    25:19:19:df:68:af:92:fe:ea:0a:fc:2a:27:83:74:
                    bf:76:2b:71:fd:68:e0:b5:e6:d4:a6:2f:39:da:bf:
                    31:79:95:e3:da:47:61:d7:77:2b:7c:bc:be:e1:d6:
                    de:35:0a:aa:90:ca:fd:85:9c:1d:09:d9:aa:98:66:
                    40:4f:43:59:dc:f6:46:a1:dd:fc:e1:14:da:48:77:
                    88:79:12:21:6e:84:c0:3d:f8:df:0c:00:35:cb:c0:
                    6e:96:1d:2b:41:e7:29:71:4a:58:71:3e:1e:50:34:
                    7a:b5:5d:de:94:fc:39:bc:81:be:cc:93:cf:20:03:
                    bc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D0:F4:F2:64:5E:B4:E7:C2:AE:97:8C:AD:B5:B8:94:CE:5E:CF:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6fe08d7-5c61-35b6-baf5-bf3feaa1bac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:75:2b:88:58:0a:39:40:98:d5:3b:e7:6f:92:b6:95:96:83:
         e8:de:e2:c0:82:19:89:0a:34:32:b7:de:b9:c0:a9:05:06:a7:
         4c:a4:69:fc:f2:a0:a4:d8:31:df:4d:7f:5b:72:95:3e:d9:91:
         ce:03:5f:ad:08:22:1b:2f:04:5c:46:d1:a8:6a:12:87:de:92:
         e7:1a:91:17:26:f2:f9:7b:01:50:15:db:8e:ec:a2:a0:44:91:
         18:1a:6c:77:20:02:d9:63:99:2e:0b:54:ce:3f:78:40:28:4a:
         b7:61:be:d2:c0:b6:8a:03:0f:43:fa:cb:bd:ef:41:a3:9a:e9:
         64:5e:c3:ca:4c:c8:a2:f0:4d:ab:61:ec:7e:88:40:ce:14:d7:
         aa:b0:fa:bd:39:72:da:d4:df:39:d4:1f:53:6d:c1:b5:65:d1:
         cd:24:fb:ce:24:22:5e:5a:2d:51:5f:81:67:4e:bf:11:aa:26:
         4f:31:af:b7:79:9b:8f:24:44:6b:94:02:89:cd:9e:e2:60:d9:
         35:1b:04:4b:21:5a:94:0c:65:d8:97:39:ff:60:23:41:b8:e1:
         3f:f4:dc:29:da:62:16:b3:55:35:39:ea:86:5c:5e:69:af:32:
         7a:a0:a4:45:0c:47:dc:33:2c:04:7e:b0:ca:77:68:20:b9:e5:
         52:f5:2f:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFpc64aF+00juXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NTVjNzdiYzItODUxZS00NTkxLWI3OWYtZGIzYmFhNTY3OWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfs+if0u3ER1hz4uDynTrJwVDqp4rQPcTB/F
lfRCQYo30imA6LlsjlBj52YPaH5HzeOFPN6YFyevCHyKC1W1hmutBkLGW6o3kST+
jSaV+4EYmSTlT+VMaWvIqc0KaAbySWjCLkylzDLHgioNAt750zW5N9/ecCsRMLDF
uYsP7wkH62tGFCclGRnfaK+S/uoK/Cong3S/ditx/WjgtebUpi852r8xeZXj2kdh
13crfLy+4dbeNQqqkMr9hZwdCdmqmGZAT0NZ3PZGod384RTaSHeIeRIhboTAPfjf
DAA1y8Bulh0rQecpcUpYcT4eUDR6tV3elPw5vIG+zJPPIAO84QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK3Q9PJkXrTnwq6XjK21uJTOXs/wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjZmZTA4ZDctNWM2MS0z
NWI2LWJhZjUtYmYzZmVhYTFiYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NBEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAp1K4hYCjlAmNU752+StpWWg+je4sCCGYkKNDK33rnAqQUGp0ykafzy
oKTYMd9Nf1tylT7Zkc4DX60IIhsvBFxG0ahqEofekucakRcm8vl7AVAV247soqBE
kRgabHcgAtljmS4LVM4/eEAoSrdhvtLAtooDD0P6y73vQaOa6WRew8pMyKLwTath
7H6IQM4U16qw+r05ctrU3znUH1NtwbVl0c0k+84kIl5aLVFfgWdOvxGqJk8xr7d5
m48kRGuUAonNnuJg2TUbBEshWpQMZdiXOf9gI0G44T/03CnaYhazVTU56oZcXmmv
MnqgpEUMR9wzLAR+sMp3aCC55VL1L8U=
-----END CERTIFICATE-----