Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/418cbac8-e5b1-374b-bc28-752377e77a4a.roa
File:                     418cbac8-e5b1-374b-bc28-752377e77a4a.roa (raw, json)
Hash identifier:          TPUfN15siSsgHDNDU7ehahJv1ip9zZrDOHiswIL0/IQ=
Subject key identifier:   D6:1A:6E:85:11:54:6B:D8:0E:1A:C2:C8:0D:AA:C0:CA:6F:54:A1:0E
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285841E46DCC5C38B9E43F18891410
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/418cbac8-e5b1-374b-bc28-752377e77a4a.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Fri 07 Jul 2023 13:50:39 +0000
asID:                     29837
IP address blocks:        139.177.156.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:cc:5c:38:b9:e4:3f:18:89:14:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul  7 13:50:39 2023 GMT
        Subject: CN=197a2b31-02ea-4456-8ee3-90ee8fb54d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3f:aa:0f:74:fe:94:cc:b8:63:f7:73:d7:ca:
                    8b:77:1a:f9:f1:ad:ad:54:8c:da:cd:8b:62:5f:41:
                    7f:e5:c0:78:c9:f4:75:c3:e4:55:db:c0:b4:33:be:
                    73:2a:df:e7:7d:7e:c4:33:be:56:be:79:9b:48:b1:
                    b2:f8:86:1a:d7:f0:a3:6b:75:6b:31:45:05:94:0c:
                    44:a8:9f:9f:42:1b:46:84:9c:2a:a8:4c:30:5e:1e:
                    22:79:08:43:0e:11:d4:a5:d5:a4:00:04:0d:03:22:
                    ad:e5:b0:65:12:28:73:e0:4b:61:d4:a9:20:d6:3b:
                    82:52:dd:58:69:3b:b0:83:6f:1d:46:c7:ad:f9:dc:
                    fb:79:7c:9a:f5:a3:5b:54:fe:ff:61:11:7a:e4:2d:
                    60:55:a8:a5:af:b2:ec:fc:4c:8e:ab:fe:2e:71:f2:
                    3a:8a:80:4a:0c:bc:18:6d:ca:9d:35:10:6e:95:6b:
                    99:7f:d7:81:90:64:11:1d:22:b0:95:ae:9c:70:e7:
                    e8:18:c7:a5:4f:cc:d6:74:82:b3:d3:41:7f:47:b0:
                    af:fd:91:2b:ec:ca:7a:44:0d:ca:fa:c5:20:3d:57:
                    9f:d2:1b:27:bb:76:e2:57:a4:b1:36:f0:8b:fa:0c:
                    44:c3:37:d2:f0:62:76:00:dc:fe:bf:69:a6:52:7a:
                    de:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1A:6E:85:11:54:6B:D8:0E:1A:C2:C8:0D:AA:C0:CA:6F:54:A1:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/418cbac8-e5b1-374b-bc28-752377e77a4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d2:55:4c:d5:c2:a7:6b:fd:b8:f8:bd:45:d0:1c:9b:9d:33:
         3f:00:bb:68:f1:9f:f1:e4:49:86:30:16:42:86:ef:92:bf:c4:
         9e:37:ce:b5:03:01:ea:d4:76:b8:2f:17:4d:74:09:8e:17:93:
         d6:6a:52:04:a6:52:53:ef:36:66:00:37:15:4c:dc:1c:e0:e0:
         d6:3d:cf:d3:18:3d:79:e2:02:24:7c:e7:d5:66:e7:2e:23:86:
         09:9d:3c:22:e7:5c:53:6f:3f:24:91:ec:0b:94:bc:24:13:74:
         f6:ce:69:eb:9d:6d:8a:09:7a:52:e8:9b:3d:c2:fc:23:c1:de:
         08:6d:9d:ee:3b:80:85:b1:4c:36:55:b4:6d:99:a5:01:2b:ed:
         74:96:0d:5a:07:1b:c4:6d:6a:12:63:b9:c4:eb:01:ee:5b:b1:
         42:65:3e:09:5d:06:c3:f2:df:cb:d3:95:08:84:d2:47:0e:6d:
         af:5c:a2:4a:8e:3a:cd:2b:f5:16:96:4f:7f:cf:52:6f:97:cc:
         78:bd:cc:29:44:1c:d6:99:e0:f5:2b:75:ca:b8:cb:fb:04:cb:
         a8:76:6d:ae:aa:ee:09:ec:01:ce:cc:19:68:07:59:4c:61:51:
         8a:a5:4f:6b:d4:3a:18:7f:71:4c:32:b0:da:e9:64:07:db:0b:
         f8:db:ee:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbcxcOLnkPxiJFBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDcwNzEzNTAzOVowLzEtMCsGA1UEAxMk
MTk3YTJiMzEtMDJlYS00NDU2LThlZTMtOTBlZThmYjU0ZDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz+qD3T+lMy4Y/dz18qLdxr58a2tVIzazYti
X0F/5cB4yfR1w+RV28C0M75zKt/nfX7EM75WvnmbSLGy+IYa1/Cja3VrMUUFlAxE
qJ+fQhtGhJwqqEwwXh4ieQhDDhHUpdWkAAQNAyKt5bBlEihz4Eth1Kkg1juCUt1Y
aTuwg28dRset+dz7eXya9aNbVP7/YRF65C1gVailr7Ls/EyOq/4ucfI6ioBKDLwY
bcqdNRBulWuZf9eBkGQRHSKwla6ccOfoGMelT8zWdIKz00F/R7Cv/ZEr7Mp6RA3K
+sUgPVef0hsnu3biV6SxNvCL+gxEwzfS8GJ2ANz+v2mmUnre7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNYaboURVGvYDhrCyA2qwMpvVKEOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNDE4Y2JhYzgtZTViMS0z
NzRiLWJjMjgtNzUyMzc3ZTc3YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTSVUzVwqdr/bj4vUXQHJudMz8Au2jxn/HkSYYwFkKG75K/xJ43zrUD
AerUdrgvF010CY4Xk9ZqUgSmUlPvNmYANxVM3Bzg4NY9z9MYPXniAiR859Vm5y4j
hgmdPCLnXFNvPySR7AuUvCQTdPbOaeudbYoJelLomz3C/CPB3ghtne47gIWxTDZV
tG2ZpQEr7XSWDVoHG8RtahJjucTrAe5bsUJlPgldBsPy38vTlQiE0kcOba9cokqO
Os0r9RaWT3/PUm+XzHi9zClEHNaZ4PUrdcq4y/sEy6h2ba6q7gnsAc7MGWgHWUxh
UYqlT2vUOhh/cUwysNrpZAfbC/jb7uE=
-----END CERTIFICATE-----