Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/69805794-21d4-3bd4-a718-092629982a99.roa
File:                     69805794-21d4-3bd4-a718-092629982a99.roa (raw, json)
Hash identifier:          F8ojkP/NusMOe5Q3+zVp7g4blxMmvuFEwp/cKoFpTFs=
Subject key identifier:   61:4C:C1:CC:FB:F4:59:2D:4B:F0:06:FA:86:47:F7:96:0A:4C:33:94
Certificate issuer:       /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial:       010D0C9F4328583C46EF465C738977772C3BB580
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/69805794-21d4-3bd4-a718-092629982a99.roa
Signing time:             Mon 13 Dec 2021 05:00:00 +0000
ROA not before:           Mon 13 Dec 2021 05:00:00 +0000
ROA not after:            Wed 20 Jul 2022 04:00:00 +0000
asID:                     1239
IP address blocks:        147.124.198.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:46:ef:46:5c:73:89:77:77:2c:3b:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
        Validity
            Not Before: Dec 13 05:00:00 2021 GMT
            Not After : Jul 20 04:00:00 2022 GMT
        Subject: CN=58031219-7640-409d-8b7f-df23b31a90df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:87:d1:12:6f:41:1a:14:b0:63:37:b1:d0:a5:
                    85:17:cc:fe:ea:cf:b2:f6:2e:cf:63:16:53:84:74:
                    74:7d:bd:0e:81:30:34:96:e4:bc:bb:f9:6e:2e:9f:
                    dd:8c:ca:d5:be:b0:64:c7:93:2f:24:9f:07:83:0a:
                    04:26:92:b7:28:15:7d:a7:59:8a:6d:42:bc:b8:ac:
                    50:d1:98:11:a7:e9:d5:f2:44:0d:f1:49:40:da:bf:
                    b9:a2:c9:d8:88:fb:77:d7:57:7e:8c:2e:fc:8e:7f:
                    29:a6:c0:28:54:13:35:25:eb:80:3b:00:1f:96:a1:
                    95:67:27:65:21:cb:4c:06:33:2a:f0:4a:28:c6:65:
                    79:92:99:ae:23:6b:61:87:03:2a:a8:2f:d9:5a:99:
                    b1:83:08:bd:5a:9a:80:c1:85:46:6c:e1:6b:a3:ba:
                    2d:7f:d2:6d:90:f1:7a:6d:75:8f:da:a5:af:05:55:
                    b0:69:e6:0e:6d:0f:1c:fe:a6:d5:66:47:34:49:9b:
                    b4:15:b1:39:d3:3b:eb:ec:4a:8a:82:8b:32:d2:06:
                    af:f9:d3:6d:db:8e:20:5f:52:fc:0b:30:74:36:1f:
                    ce:d2:5e:01:3d:3c:be:fd:3f:9a:d5:1b:8a:8a:ba:
                    e5:8d:79:04:3c:9e:cc:cd:79:86:c4:69:9c:22:22:
                    ab:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4C:C1:CC:FB:F4:59:2D:4B:F0:06:FA:86:47:F7:96:0A:4C:33:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/69805794-21d4-3bd4-a718-092629982a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl

            X509v3 Authority Key Identifier:
                keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:2f:92:3f:2e:0a:df:3c:6a:72:e9:d3:7f:d1:00:1e:44:0c:
         be:04:0f:2f:79:b0:02:d7:65:86:75:e6:d6:40:28:5b:7f:aa:
         e4:8c:7d:ae:3b:15:43:e8:85:25:de:a2:d0:15:f4:d9:a0:26:
         91:7c:7d:c1:62:6a:51:9a:9d:43:27:b9:a9:a6:c0:22:16:ea:
         03:fc:c7:ab:2b:73:6c:62:a6:28:b5:53:ab:ae:83:4b:c1:9e:
         5d:11:bc:4e:e9:67:40:44:88:6f:dc:89:ac:9c:34:6d:53:5a:
         90:5f:96:d2:e7:ec:43:16:93:eb:17:91:a7:47:4e:fe:34:ee:
         47:70:00:d5:c4:50:46:a2:45:05:1e:bd:8e:1c:27:f8:4e:ac:
         38:1c:7a:00:10:97:ff:ae:43:12:b4:9d:84:83:5a:ac:95:3e:
         b6:9f:9a:27:94:46:dd:d9:d7:48:5f:5b:a0:db:26:a2:fb:f9:
         09:ca:ed:02:84:37:99:2c:57:87:26:41:d6:07:5c:1e:75:99:
         6a:ce:13:de:05:f2:f0:e6:90:9c:4f:e4:fe:97:0e:24:57:02:
         b6:39:ab:84:54:d6:67:d2:26:cf:62:98:7e:a0:70:5e:37:18:
         b6:41:76:6a:99:76:a2:e2:b0:02:9e:27:4e:3c:11:ff:6d:cb:
         24:06:3f:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxG70Zcc4l3dyw7tYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2
MzhiMB4XDTIxMTIxMzA1MDAwMFoXDTIyMDcyMDA0MDAwMFowLzEtMCsGA1UEAxMk
NTgwMzEyMTktNzY0MC00MDlkLThiN2YtZGYyM2IzMWE5MGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24fREm9BGhSwYzex0KWFF8z+6s+y9i7PYxZT
hHR0fb0OgTA0luS8u/luLp/djMrVvrBkx5MvJJ8HgwoEJpK3KBV9p1mKbUK8uKxQ
0ZgRp+nV8kQN8UlA2r+5osnYiPt311d+jC78jn8ppsAoVBM1JeuAOwAflqGVZydl
IctMBjMq8EooxmV5kpmuI2thhwMqqC/ZWpmxgwi9WpqAwYVGbOFro7otf9JtkPF6
bXWP2qWvBVWwaeYObQ8c/qbVZkc0SZu0FbE50zvr7EqKgosy0gav+dNt244gX1L8
CzB0Nh/O0l4BPTy+/T+a1RuKirrljXkEPJ7MzXmGxGmcIiKrBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGFMwcz79FktS/AG+oZH95YKTDOUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MTdj
MDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvNjk4MDU3OTQtMjFkNC0z
YmQ0LWE3MTgtMDkyNjI5OTgyYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDE3YzA2ZDAtMzIwMy00NGZkLWIx
NjQtMGFlZDUwZjU2MzhiLzQxN2MwNmQwLTMyMDMtNDRmZC1iMTY0LTBhZWQ1MGY1
NjM4Yi5jcmwwHwYDVR0jBBgwFoAUAM6gxUxaaLPRCSpmePODyUIHxf0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVk
NTBmNTYzOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADAvkj8uCt88anLp03/RAB5EDL4EDy95sALXZYZ15tZAKFt/quSMfa47
FUPohSXeotAV9NmgJpF8fcFialGanUMnuammwCIW6gP8x6src2xipii1U6uug0vB
nl0RvE7pZ0BEiG/ciaycNG1TWpBfltLn7EMWk+sXkadHTv407kdwANXEUEaiRQUe
vY4cJ/hOrDgcegAQl/+uQxK0nYSDWqyVPrafmieURt3Z10hfW6DbJqL7+QnK7QKE
N5ksV4cmQdYHXB51mWrOE94F8vDmkJxP5P6XDiRXArY5q4RU1mfSJs9imH6gcF43
GLZBdmqZdqLisAKeJ048Ef9tyyQGP1I=
-----END CERTIFICATE-----