Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/d86676fc-7976-33ab-98f3-83a0598e5d65.roa
File:                     d86676fc-7976-33ab-98f3-83a0598e5d65.roa (raw, json)
Hash identifier:          QWzvceLdCzq3vLbRmI/S0cnMxzSrP1klozgqSU9Xl78=
Subject key identifier:   78:EA:EC:2E:5A:BD:05:F1:52:01:63:22:CE:24:DC:E5:03:88:DE:91
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F4328583F117EF3F5A0A7F3D563D83640
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/d86676fc-7976-33ab-98f3-83a0598e5d65.roa
Signing time:             Mon 29 Aug 2022 13:03:33 +0000
ROA not before:           Mon 29 Aug 2022 13:03:33 +0000
ROA not after:            Tue 01 Nov 2022 04:00:00 +0000
asID:                     3756
IP address blocks:        192.52.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:11:7e:f3:f5:a0:a7:f3:d5:63:d8:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Aug 29 13:03:33 2022 GMT
            Not After : Nov  1 04:00:00 2022 GMT
        Subject: CN=7a239adf-481a-46af-a73b-9f9b9dc9cb96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f6:64:65:82:9b:df:c4:72:4a:00:f5:53:96:
                    1b:10:7d:c5:24:cd:d0:46:5d:7e:d7:4f:03:ea:ff:
                    41:08:88:8b:62:6c:ce:8f:f8:94:63:7f:d2:28:3b:
                    6e:59:cf:0a:1b:53:b4:d4:4e:ee:ff:68:fc:ce:3f:
                    e0:32:94:05:ac:e9:16:6c:7e:b1:82:dc:24:e2:94:
                    e8:62:16:2f:d2:2d:7c:75:9c:31:50:fa:30:74:de:
                    f0:98:69:22:09:c3:bb:2a:87:a3:83:af:c6:c1:c8:
                    e0:e2:1b:e6:83:54:1b:fb:83:37:74:2b:be:21:ea:
                    fa:83:61:8a:9f:02:a2:20:9e:4d:0f:21:0a:90:43:
                    77:2d:b9:aa:7e:48:b8:0b:88:62:6e:69:e2:a8:85:
                    66:d4:5f:14:37:c2:d4:0f:46:98:62:bb:f6:35:41:
                    73:5a:93:7a:24:3f:93:f1:b1:d8:76:48:a7:28:88:
                    8f:4a:0e:0d:f3:c6:e5:c9:af:e4:7a:dd:69:c5:af:
                    7e:64:7a:01:70:d3:2d:6a:78:da:d2:76:11:b2:3d:
                    ae:57:3f:4e:57:94:b4:88:e6:1a:8c:82:66:a7:c3:
                    f5:c4:d3:5d:10:de:bb:f4:53:af:ca:98:74:59:a3:
                    8a:43:29:dd:28:4a:e9:81:9f:91:67:90:6b:fb:71:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EA:EC:2E:5A:BD:05:F1:52:01:63:22:CE:24:DC:E5:03:88:DE:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/d86676fc-7976-33ab-98f3-83a0598e5d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ea:25:83:9c:9f:6a:b2:a3:98:f3:e6:ca:a9:91:f1:52:df:
         9a:6c:4f:44:2a:3e:7d:b7:0d:57:6d:22:fc:f3:1b:d2:b6:a5:
         02:54:40:66:8f:ef:71:87:69:11:68:76:62:13:13:a2:ad:7b:
         db:3f:08:df:3e:8b:36:b8:45:1d:2d:b7:ce:ae:6e:6b:e7:e4:
         73:89:fa:35:d3:68:f8:3a:c0:c9:87:31:b8:ec:5a:b0:f8:2d:
         6e:d1:50:9f:36:cf:00:ea:9e:aa:18:16:88:51:6d:ee:59:4d:
         b7:11:f0:2a:1b:9d:6c:82:88:0e:8e:39:3b:1f:b4:1c:c6:a5:
         48:fc:8e:20:f0:8e:cd:71:41:53:2c:f0:80:ce:9c:10:b4:d9:
         65:be:27:7b:c7:64:0a:53:d1:e0:26:0a:98:bc:a0:b1:c1:90:
         8c:8b:be:39:31:e5:f9:bb:aa:f5:20:bc:48:aa:65:e6:c4:43:
         a2:f6:f1:bf:49:75:d0:24:5b:ab:c7:70:27:14:a9:55:f4:b4:
         c1:62:2d:94:a4:23:8e:9c:a7:37:cd:88:c2:a4:33:6e:9e:6e:
         71:22:c8:5e:83:72:cf:f8:6b:54:60:cf:29:ec:21:3e:5f:56:
         e0:ca:5a:02:44:8b:18:27:89:21:70:87:ad:d5:30:bb:23:e9:
         95:74:f7:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8RfvP1oKfz1WPYNkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz
ODdjMB4XDTIyMDgyOTEzMDMzM1oXDTIyMTEwMTA0MDAwMFowLzEtMCsGA1UEAxMk
N2EyMzlhZGYtNDgxYS00NmFmLWE3M2ItOWY5YjlkYzljYjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPZkZYKb38RySgD1U5YbEH3FJM3QRl1+108D
6v9BCIiLYmzOj/iUY3/SKDtuWc8KG1O01E7u/2j8zj/gMpQFrOkWbH6xgtwk4pTo
YhYv0i18dZwxUPowdN7wmGkiCcO7Koejg6/Gwcjg4hvmg1Qb+4M3dCu+Ier6g2GK
nwKiIJ5NDyEKkEN3Lbmqfki4C4hibmniqIVm1F8UN8LUD0aYYrv2NUFzWpN6JD+T
8bHYdkinKIiPSg4N88blya/ket1pxa9+ZHoBcNMtanja0nYRsj2uVz9OV5S0iOYa
jIJmp8P1xNNdEN679FOvyph0WaOKQyndKErpgZ+RZ5Br+3FSbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHjq7C5avQXxUgFjIs4k3OUDiN6RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm
NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZDg2Njc2ZmMtNzk3Ni0z
M2FiLTk4ZjMtODNhMDU5OGU1ZDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0
ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4
Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy
OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDS0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3qJYOcn2qyo5jz5sqpkfFS35psT0QqPn23DVdtIvzzG9K2pQJUQGaP
73GHaRFodmITE6Kte9s/CN8+iza4RR0tt86ubmvn5HOJ+jXTaPg6wMmHMbjsWrD4
LW7RUJ82zwDqnqoYFohRbe5ZTbcR8CobnWyCiA6OOTsftBzGpUj8jiDwjs1xQVMs
8IDOnBC02WW+J3vHZApT0eAmCpi8oLHBkIyLvjkx5fm7qvUgvEiqZebEQ6L28b9J
ddAkW6vHcCcUqVX0tMFiLZSkI46cpzfNiMKkM26ebnEiyF6Dcs/4a1RgzynsIT5f
VuDKWgJEixgniSFwh63VMLsj6ZV09+k=
-----END CERTIFICATE-----