Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b9b457b0-a21a-334f-b6e9-bcec89d7b0b7.roa
File:                     b9b457b0-a21a-334f-b6e9-bcec89d7b0b7.roa (raw, json)
Hash identifier:          8q5e3ukHRIDh0GiY578EyRcdW9RjcwKGou8wu/2gu+M=
Subject key identifier:   13:CB:F0:1D:36:E9:24:B3:75:B5:24:A7:A9:68:6C:D3:AF:FF:1E:E8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE48485407D4B49D80B7400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b9b457b0-a21a-334f-b6e9-bcec89d7b0b7.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        76.70.200.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:84:85:40:7d:4b:49:d8:0b:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=4ab1ccca-cb28-407a-bc45-319dfd083f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:7c:8e:3b:6e:77:1e:95:c2:29:82:46:99:
                    4a:4a:6f:5c:18:e0:61:16:a5:4d:06:fa:d2:f0:d8:
                    b8:fd:33:e5:de:74:da:c6:30:41:af:23:a9:0d:4f:
                    0c:23:52:fc:91:4b:06:36:40:14:e7:c1:fb:93:07:
                    f0:a1:d4:e8:4b:e7:6e:e0:b9:02:b6:2d:3e:cb:5c:
                    c5:be:62:d3:0d:21:37:e2:b9:91:36:3e:0d:22:d5:
                    8b:50:08:d0:73:af:f8:78:92:66:34:42:b7:7c:38:
                    88:3d:cb:09:d1:6d:8b:b8:05:b7:78:d5:74:3c:68:
                    55:e3:cd:3e:a1:7a:cd:62:9f:16:50:29:3e:87:c9:
                    fe:40:45:cc:ef:dc:f8:da:2b:35:19:77:04:b3:26:
                    71:22:22:b2:b0:95:1e:11:ee:08:bc:ba:36:f4:bf:
                    41:03:a3:94:7e:3c:82:8d:37:54:0d:1e:66:ef:5a:
                    6e:b2:b4:eb:5a:0f:cf:02:d3:24:fb:28:5c:bd:44:
                    09:39:b3:f0:fb:68:e4:59:6a:3b:1d:93:2e:37:41:
                    f2:6a:e6:fc:b3:cd:12:a3:4b:13:d5:c4:8d:e6:df:
                    87:4e:56:47:7d:a2:52:70:9d:dc:6a:6d:e9:85:c1:
                    d0:60:dc:98:ef:9a:3a:a0:22:09:69:f8:60:32:fe:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CB:F0:1D:36:E9:24:B3:75:B5:24:A7:A9:68:6C:D3:AF:FF:1E:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b9b457b0-a21a-334f-b6e9-bcec89d7b0b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.70.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:64:bf:5c:2c:1f:f4:9c:d7:3e:d1:8a:be:a8:3c:de:a7:4d:
         6a:86:20:3d:0e:4a:f2:6f:19:6a:d0:31:c9:27:12:75:0d:88:
         1d:98:69:c8:b4:eb:00:09:01:75:a8:88:1a:db:3e:a3:d6:fc:
         55:ef:95:d2:bd:ce:73:1a:09:5f:05:cc:a2:db:0a:b5:51:d2:
         d9:bd:43:cf:94:47:7e:f6:af:74:df:d3:7c:f9:d4:ca:37:a9:
         08:8a:b3:46:ef:83:31:ae:0d:99:8b:31:62:5a:2d:bc:7b:4f:
         39:ae:22:99:87:64:f8:b9:57:a4:3d:60:09:f5:a0:cb:e1:85:
         3a:5a:63:cc:75:40:3c:94:b2:45:60:3f:9e:93:61:88:63:3e:
         d2:7b:03:de:69:de:b2:c9:50:95:d3:c8:d5:49:a6:cc:c9:cf:
         ff:e4:fb:f4:90:3d:13:1f:ab:9a:71:7d:28:da:90:70:b1:4b:
         8d:5f:00:f5:5b:3b:af:f9:0b:32:7d:35:22:a9:51:38:16:8d:
         e0:04:d1:7a:77:45:f6:9b:c7:01:7b:76:62:f9:5c:ac:aa:79:
         48:77:9e:50:35:bd:e7:b9:2b:58:e4:a2:1f:92:08:df:e3:92:
         39:f3:80:ee:a9:47:3e:82:5f:ca:52:98:b9:2f:33:57:c4:90:
         e8:c8:45:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5ISFQH1LSdgLdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
NGFiMWNjY2EtY2IyOC00MDdhLWJjNDUtMzE5ZGZkMDgzZjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmid8jjtudx6VwimCRplKSm9cGOBhFqVNBvrS
8Ni4/TPl3nTaxjBBryOpDU8MI1L8kUsGNkAU58H7kwfwodToS+du4LkCti0+y1zF
vmLTDSE34rmRNj4NItWLUAjQc6/4eJJmNEK3fDiIPcsJ0W2LuAW3eNV0PGhV480+
oXrNYp8WUCk+h8n+QEXM79z42is1GXcEsyZxIiKysJUeEe4IvLo29L9BA6OUfjyC
jTdUDR5m71pusrTrWg/PAtMk+yhcvUQJObPw+2jkWWo7HZMuN0Hyaub8s80So0sT
1cSN5t+HTlZHfaJScJ3cam3phcHQYNyY75o6oCIJafhgMv7zJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPL8B026SSzdbUkp6lobNOv/x7oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjliNDU3YjAtYTIxYS0z
MzRmLWI2ZTktYmNlYzg5ZDdiMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTEbIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZkv1wsH/Sc1z7Rir6oPN6nTWqGID0OSvJvGWrQMcknEnUNiB2Yaci0
6wAJAXWoiBrbPqPW/FXvldK9znMaCV8FzKLbCrVR0tm9Q8+UR372r3Tf03z51Mo3
qQiKs0bvgzGuDZmLMWJaLbx7TzmuIpmHZPi5V6Q9YAn1oMvhhTpaY8x1QDyUskVg
P56TYYhjPtJ7A95p3rLJUJXTyNVJpszJz//k+/SQPRMfq5pxfSjakHCxS41fAPVb
O6/5CzJ9NSKpUTgWjeAE0Xp3RfabxwF7dmL5XKyqeUh3nlA1vee5K1jkoh+SCN/j
kjnzgO6pRz6CX8pSmLkvM1fEkOjIRfo=
-----END CERTIFICATE-----