Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/007aac03-650f-33a5-a90e-b11a04ab85d9.roa
File:                     007aac03-650f-33a5-a90e-b11a04ab85d9.roa (raw, json)
Hash identifier:          ixLZ68s905Qg5jxbxg98X8gNfRPwJbeREz385dawLBc=
Subject key identifier:   72:58:3D:C7:1D:15:D9:9D:CF:73:A4:68:3A:D2:33:20:FF:27:D4:30
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648D6D3C7B345559FF157880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/007aac03-650f-33a5-a90e-b11a04ab85d9.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     63949
IP address blocks:        65.19.178.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:6d:3c:7b:34:55:59:ff:15:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=c049f007-9928-4f53-9558-6a61a138e7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:d7:5d:f2:b4:7d:64:b4:a4:79:5d:b6:3d:
                    7e:a7:de:8c:75:c6:4e:f3:a7:d6:7b:f6:18:77:ed:
                    e3:3b:c1:52:6a:26:7c:d9:a9:2a:af:b6:f1:bc:3f:
                    d5:49:b7:44:28:40:d1:e0:9a:27:f4:9f:e1:2e:c1:
                    51:e3:f9:4f:27:ea:6d:3e:a2:f4:d5:d2:53:8f:19:
                    13:15:e3:ba:55:ee:d9:25:77:66:9c:1b:f4:57:55:
                    ba:a1:01:43:f8:33:1a:d5:5d:4d:b6:47:b3:45:e3:
                    75:a3:25:77:5c:4d:19:89:1e:f7:bb:b3:ea:aa:c3:
                    d9:0b:e5:44:6c:34:0e:3e:5c:a8:57:fd:95:2d:fa:
                    bf:7c:9d:ff:9d:42:f0:02:4f:20:4e:4e:fa:08:af:
                    bd:78:32:96:06:f7:97:69:bf:6a:9d:49:d5:8d:60:
                    0f:b9:65:1e:e1:bd:bd:cc:59:c4:65:41:ca:6b:85:
                    f7:06:97:9d:cf:16:fa:f7:9c:51:81:29:1f:04:bf:
                    ff:64:2c:2a:92:6a:b0:65:22:d0:ce:97:89:96:3d:
                    15:40:6b:2a:bf:1b:5b:2d:96:c3:2f:03:db:42:a9:
                    ab:4a:76:2c:d8:8d:67:bd:6d:c7:d5:a7:12:a5:8c:
                    7d:13:d3:73:cb:95:e6:25:ca:29:6f:75:e3:c5:da:
                    02:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:58:3D:C7:1D:15:D9:9D:CF:73:A4:68:3A:D2:33:20:FF:27:D4:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/007aac03-650f-33a5-a90e-b11a04ab85d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.19.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:42:3e:c1:96:05:d0:8d:c1:10:34:13:0c:ea:44:20:a8:e9:
         99:9e:5b:1d:7f:23:6c:2e:bc:c3:b3:6e:73:c0:7a:b4:68:37:
         f7:44:df:f1:07:16:a0:43:0e:95:82:15:cd:2c:ba:4b:0c:99:
         42:3c:d2:85:38:9b:10:1b:d2:27:49:2d:8f:09:17:fc:dd:7b:
         6d:b7:93:32:63:ed:69:b0:99:82:2b:96:fe:cf:60:49:cc:a8:
         7b:61:78:a8:20:8b:0b:d6:17:c0:6a:94:a5:1c:ec:63:6d:f0:
         c0:9f:8c:f5:8d:fb:9a:f1:49:7b:3f:79:e9:d8:ea:58:bf:e7:
         d2:60:df:c5:cf:2e:e1:ff:26:b8:8f:6c:3f:a0:ba:f2:93:74:
         a7:78:e2:99:08:d2:8f:9d:40:71:99:f4:d0:0d:23:68:24:71:
         10:9d:f5:a4:d8:bb:a3:ca:27:8d:e2:71:4a:5e:5e:4b:89:8c:
         c1:31:76:48:06:9a:2c:f7:f3:28:1c:fa:6d:47:38:49:73:3c:
         7d:91:3a:5e:79:2a:3e:62:33:ce:7f:fd:80:75:09:31:fa:4d:
         47:5d:4d:d3:bc:fb:56:c8:7a:ae:ce:ad:76:ad:7c:6c:dc:44:
         44:17:89:ca:f8:25:5b:f7:30:25:4f:ec:e3:27:8a:a9:60:ea:
         97:3e:df:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9kjW08ezRVWf8VeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkyNzEyMDAwMFoXDTIzMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk
YzA0OWYwMDctOTkyOC00ZjUzLTk1NTgtNmE2MWExMzhlN2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMfXXfK0fWS0pHldtj1+p96MdcZO86fWe/YY
d+3jO8FSaiZ82akqr7bxvD/VSbdEKEDR4Jon9J/hLsFR4/lPJ+ptPqL01dJTjxkT
FeO6Ve7ZJXdmnBv0V1W6oQFD+DMa1V1NtkezReN1oyV3XE0ZiR73u7PqqsPZC+VE
bDQOPlyoV/2VLfq/fJ3/nULwAk8gTk76CK+9eDKWBveXab9qnUnVjWAPuWUe4b29
zFnEZUHKa4X3Bpedzxb695xRgSkfBL//ZCwqkmqwZSLQzpeJlj0VQGsqvxtbLZbD
LwPbQqmrSnYs2I1nvW3H1acSpYx9E9Nzy5XmJcopb3XjxdoCgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHJYPccdFdmdz3OkaDrSMyD/J9QwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDA3YWFjMDMtNjUwZi0z
M2E1LWE5MGUtYjExYTA0YWI4NWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQROyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAtCPsGWBdCNwRA0EwzqRCCo6ZmeWx1/I2wuvMOzbnPAerRoN/dE3/EH
FqBDDpWCFc0suksMmUI80oU4mxAb0idJLY8JF/zde223kzJj7WmwmYIrlv7PYEnM
qHtheKggiwvWF8BqlKUc7GNt8MCfjPWN+5rxSXs/eenY6li/59Jg38XPLuH/JriP
bD+guvKTdKd44pkI0o+dQHGZ9NANI2gkcRCd9aTYu6PKJ43icUpeXkuJjMExdkgG
miz38ygc+m1HOElzPH2ROl55Kj5iM85//YB1CTH6TUddTdO8+1bIeq7OrXatfGzc
REQXicr4JVv3MCVP7OMniqlg6pc+3zk=
-----END CERTIFICATE-----