Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/925b4237-eb1b-3a3c-a9b5-ef8fd4a468ba.roa
File:                     925b4237-eb1b-3a3c-a9b5-ef8fd4a468ba.roa (raw, json)
Hash identifier:          g+6C9zor+V7y+WoU2BlsLT/zxveRh5V/7zZhxvPDNHo=
Subject key identifier:   67:F3:71:18:F5:73:C3:6D:BA:06:E6:7B:8B:9D:CD:85:03:51:C7:E1
Certificate issuer:       /CN=55452ee1-697d-484d-b971-7a8c75820ecc
Certificate serial:       010D0C9F43285841E46D69745332E3DC5A38B400
Authority key identifier: B6:86:A0:07:79:5A:6A:89:6F:58:55:92:09:53:B7:56:7D:D3:7C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/925b4237-eb1b-3a3c-a9b5-ef8fd4a468ba.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Wed 28 Jun 2023 08:34:13 +0000
asID:                     32391
IP address blocks:        130.51.0.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:69:74:53:32:e3:dc:5a:38:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55452ee1-697d-484d-b971-7a8c75820ecc
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 28 08:34:13 2023 GMT
        Subject: CN=0d16125e-5fed-4e03-929d-2d0571fa7920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:91:25:e0:fb:58:14:2a:96:88:1c:11:58:c5:
                    36:bc:03:9b:2f:a0:dd:df:30:b3:ab:fa:c0:a4:4b:
                    b0:f5:5b:51:bb:d7:65:a0:34:57:08:b1:ec:43:78:
                    1f:69:5c:50:5b:b7:ee:73:e4:e0:f9:74:bd:49:9a:
                    bb:c7:ee:28:eb:2b:55:74:0c:8d:c7:8e:6f:21:df:
                    c6:e9:0f:8d:25:dd:90:f8:cb:77:a8:c3:1c:d7:ba:
                    39:28:05:51:89:6c:2c:b8:ec:03:52:c9:1c:90:fa:
                    04:a8:3e:d6:83:4c:26:5d:60:c4:9b:7f:cf:0b:1e:
                    f9:ca:f5:f2:be:8b:e0:09:d5:38:2d:f3:47:5d:68:
                    65:65:01:ef:87:b5:1d:30:26:d2:e0:45:cb:86:92:
                    66:49:c5:a0:75:8d:1b:8a:e5:df:0a:c2:0a:07:b3:
                    ad:a9:68:25:6a:7d:ca:70:3b:60:4f:2a:84:f5:90:
                    ba:d2:a7:10:d5:b2:f2:2f:f6:bf:30:44:8d:d0:24:
                    7d:7f:01:1e:1a:69:8a:42:36:93:69:39:8a:8e:e4:
                    38:01:bc:5b:7f:cd:97:13:ab:48:d4:09:09:f8:e4:
                    63:10:b9:b5:65:c8:7b:f8:1b:0f:80:f3:4a:88:45:
                    e1:27:0f:4b:d4:3a:a7:72:f6:2e:60:93:98:21:6e:
                    bf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F3:71:18:F5:73:C3:6D:BA:06:E6:7B:8B:9D:CD:85:03:51:C7:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/925b4237-eb1b-3a3c-a9b5-ef8fd4a468ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/55452ee1-697d-484d-b971-7a8c75820ecc.crl

            X509v3 Authority Key Identifier:
                keyid:B6:86:A0:07:79:5A:6A:89:6F:58:55:92:09:53:B7:56:7D:D3:7C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:67:58:02:b4:2d:9b:ed:37:6e:f1:92:1a:aa:45:ba:33:6d:
         19:83:f6:c1:f5:5d:aa:9a:d2:58:e1:ba:9f:43:19:9e:b4:97:
         50:24:fc:4f:43:83:0e:e3:9b:da:b6:e8:f9:e1:57:5e:b4:50:
         e3:39:cd:5d:0a:cb:a3:b2:f3:59:3e:ca:0c:f6:95:6f:2d:4c:
         27:ff:f9:cb:65:6f:15:58:52:b2:bf:41:ff:77:59:ff:55:cf:
         93:cb:87:63:2a:9c:5e:58:f4:52:81:b3:b4:4b:97:d5:9c:e5:
         1c:61:11:cc:1d:2b:c7:a8:31:ae:e3:7f:a9:6e:d0:08:ed:5b:
         4b:17:f0:16:72:e4:3b:b8:bf:d5:04:2a:af:fd:23:4e:df:eb:
         8c:ee:1d:fd:14:84:e3:f7:16:d8:2b:f7:09:2c:aa:b8:82:30:
         bb:5f:23:22:b0:39:e3:68:8f:7a:2d:0e:fd:a2:a5:b3:6d:f2:
         55:ec:81:89:a9:be:24:86:46:40:42:b3:41:fb:51:cd:50:50:
         30:df:d3:68:4a:6a:e1:96:b9:75:7f:11:1f:aa:67:f7:f8:b0:
         74:18:08:59:0d:8e:80:ea:a1:e6:07:b5:5f:78:a1:29:52:49:
         5b:c5:65:96:14:59:4c:2b:ca:d9:fe:8e:b5:71:a6:0e:78:7e:
         2e:05:77:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbWl0UzLj3Fo4tAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU0NTJlZTEtNjk3ZC00ODRkLWI5NzEtN2E4Yzc1ODIw
ZWNjMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDYyODA4MzQxM1owLzEtMCsGA1UEAxMk
MGQxNjEyNWUtNWZlZC00ZTAzLTkyOWQtMmQwNTcxZmE3OTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpEl4PtYFCqWiBwRWMU2vAObL6Dd3zCzq/rA
pEuw9VtRu9dloDRXCLHsQ3gfaVxQW7fuc+Tg+XS9SZq7x+4o6ytVdAyNx45vId/G
6Q+NJd2Q+Mt3qMMc17o5KAVRiWwsuOwDUskckPoEqD7Wg0wmXWDEm3/PCx75yvXy
vovgCdU4LfNHXWhlZQHvh7UdMCbS4EXLhpJmScWgdY0biuXfCsIKB7OtqWglan3K
cDtgTyqE9ZC60qcQ1bLyL/a/MESN0CR9fwEeGmmKQjaTaTmKjuQ4Abxbf82XE6tI
1AkJ+ORjELm1Zch7+BsPgPNKiEXhJw9L1DqncvYuYJOYIW6/CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGfzcRj1c8Ntugbme4udzYUDUcfhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NTQ1
MmVlMS02OTdkLTQ4NGQtYjk3MS03YThjNzU4MjBlY2MvOTI1YjQyMzctZWIxYi0z
YTNjLWE5YjUtZWY4ZmQ0YTQ2OGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTU0NTJlZTEtNjk3ZC00ODRkLWI5
NzEtN2E4Yzc1ODIwZWNjLzU1NDUyZWUxLTY5N2QtNDg0ZC1iOTcxLTdhOGM3NTgy
MGVjYy5jcmwwHwYDVR0jBBgwFoAUtoagB3laaolvWFWSCVO3Vn3TfJkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NTQ1MmVlMS02OTdkLTQ4NGQtYjk3MS03YThj
NzU4MjBlY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgjMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALJnWAK0LZvtN27xkhqqRbozbRmD9sH1Xaqa0ljhup9DGZ60l1Ak/E9D
gw7jm9q26PnhV160UOM5zV0Ky6Oy81k+ygz2lW8tTCf/+ctlbxVYUrK/Qf93Wf9V
z5PLh2MqnF5Y9FKBs7RLl9Wc5RxhEcwdK8eoMa7jf6lu0AjtW0sX8BZy5Du4v9UE
Kq/9I07f64zuHf0UhOP3Ftgr9wksqriCMLtfIyKwOeNoj3otDv2ipbNt8lXsgYmp
viSGRkBCs0H7Uc1QUDDf02hKauGWuXV/ER+qZ/f4sHQYCFkNjoDqoeYHtV94oSlS
SVvFZZYUWUwrytn+jrVxpg54fi4Fd40=
-----END CERTIFICATE-----