Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0c3e18c2-0e73-38d6-84a2-8e272304fef9.roa
File:                     0c3e18c2-0e73-38d6-84a2-8e272304fef9.roa (raw, json)
Hash identifier:          H6BqwqfVKSkA6s+225XazqtAoqfMsYr/Lm/VbEpF714=
Subject key identifier:   2D:64:AB:90:56:C1:78:7C:0B:CB:A1:DB:CF:EB:EE:95:A9:D9:3C:D6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A51377CA6E55907BFDCE1C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0c3e18c2-0e73-38d6-84a2-8e272304fef9.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     394996
IP address blocks:        184.105.208.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:37:7c:a6:e5:59:07:bf:dc:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=8730e12b-16ce-4b7a-a20d-80f186814fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:fb:19:59:b5:86:16:85:2d:9b:4b:da:5e:
                    c5:27:90:d5:2e:b2:dc:e9:db:13:9f:a3:2f:02:76:
                    9d:82:16:b7:96:15:4f:1f:81:1a:2c:db:c0:42:62:
                    e7:86:1c:46:0c:9b:c3:7f:a7:49:01:a8:49:79:18:
                    a5:6a:29:99:a0:c3:35:1e:ba:5e:5e:ee:b3:94:bc:
                    f3:17:cd:32:ff:f5:03:b9:69:6b:6d:65:39:23:4b:
                    3b:32:d1:ad:33:92:30:1e:38:dd:4e:f0:18:d5:da:
                    5c:3d:8b:56:90:94:81:a1:5d:6f:20:f6:62:2f:6b:
                    52:8e:bd:09:1e:fb:56:9e:33:52:76:80:a1:36:e9:
                    0a:31:04:b5:a2:f3:52:5a:49:35:36:53:18:c3:ab:
                    ff:09:d8:42:9b:34:17:be:f9:af:fd:bd:67:54:1f:
                    3f:ba:10:e5:2c:19:c4:c6:40:64:2a:fc:20:ce:47:
                    dc:a1:60:2f:67:b3:5e:bb:0c:85:26:33:c6:1d:46:
                    a4:48:88:e0:43:62:b0:da:90:1b:7e:95:0e:23:85:
                    7a:5e:2b:64:85:8c:61:bf:94:64:15:d3:0f:51:75:
                    57:78:36:63:ef:d5:53:88:73:68:b0:da:8c:37:ba:
                    99:0e:d8:86:47:9d:08:4a:f2:37:a4:2b:da:17:d6:
                    51:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:64:AB:90:56:C1:78:7C:0B:CB:A1:DB:CF:EB:EE:95:A9:D9:3C:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0c3e18c2-0e73-38d6-84a2-8e272304fef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:4d:7e:c8:8a:6b:0c:ec:60:91:45:ed:0d:5c:3a:b0:57:c9:
         b8:8d:d7:d6:41:9e:ba:9e:f6:43:87:c1:5b:95:2b:8e:98:9e:
         39:1a:e4:53:4e:b8:3f:cf:b3:38:39:f3:81:e1:3b:1f:f1:a4:
         52:b1:d5:05:62:a8:a4:72:71:e2:db:46:a3:49:dc:99:b0:f1:
         f9:fc:c6:80:c4:cf:db:01:2b:f1:dd:2b:b1:01:9c:29:db:a5:
         c3:f0:85:56:c0:cf:16:13:7b:b7:15:3e:a1:a7:b8:11:cd:39:
         92:79:da:f7:49:dd:a6:42:d3:35:20:db:aa:b8:bd:a4:02:51:
         03:03:a7:28:40:d0:74:6c:57:09:90:44:9e:fd:2d:21:77:f7:
         0a:17:1c:89:46:a6:36:43:ad:ca:86:3b:b5:2a:d5:a5:25:e8:
         d8:5d:ef:b6:56:ac:e0:fb:ab:fa:cd:a4:78:bf:c3:cc:68:b9:
         0e:50:11:15:ec:96:11:aa:6f:56:9d:86:15:f7:6c:89:02:bb:
         c8:ec:05:12:ba:be:a1:f1:50:a5:29:44:be:b3:f3:01:a3:49:
         2f:58:95:ab:3a:94:8c:29:69:07:04:af:57:6a:14:37:3f:57:
         97:ac:16:1e:4f:3a:87:03:9e:be:c2:92:f0:c1:9f:20:62:78:
         4e:a0:12:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKUTd8puVZB7/c4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ODczMGUxMmItMTZjZS00YjdhLWEyMGQtODBmMTg2ODE0ZmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCP7GVm1hhaFLZtL2l7FJ5DVLrLc6dsTn6Mv
Anadgha3lhVPH4EaLNvAQmLnhhxGDJvDf6dJAahJeRilaimZoMM1HrpeXu6zlLzz
F80y//UDuWlrbWU5I0s7MtGtM5IwHjjdTvAY1dpcPYtWkJSBoV1vIPZiL2tSjr0J
HvtWnjNSdoChNukKMQS1ovNSWkk1NlMYw6v/CdhCmzQXvvmv/b1nVB8/uhDlLBnE
xkBkKvwgzkfcoWAvZ7NeuwyFJjPGHUakSIjgQ2Kw2pAbfpUOI4V6XitkhYxhv5Rk
FdMPUXVXeDZj79VTiHNosNqMN7qZDtiGR50ISvI3pCvaF9ZRJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1kq5BWwXh8C8uh28/r7pWp2TzWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGMzZTE4YzItMGU3My0z
OGQ2LTg0YTItOGUyNzIzMDRmZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGnQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALxNfsiKawzsYJFF7Q1cOrBXybiN19ZBnrqe9kOHwVuVK46Ynjka5FNO
uD/Pszg584HhOx/xpFKx1QViqKRyceLbRqNJ3Jmw8fn8xoDEz9sBK/HdK7EBnCnb
pcPwhVbAzxYTe7cVPqGnuBHNOZJ52vdJ3aZC0zUg26q4vaQCUQMDpyhA0HRsVwmQ
RJ79LSF39woXHIlGpjZDrcqGO7Uq1aUl6Nhd77ZWrOD7q/rNpHi/w8xouQ5QERXs
lhGqb1adhhX3bIkCu8jsBRK6vqHxUKUpRL6z8wGjSS9Ylas6lIwpaQcEr1dqFDc/
V5esFh5POocDnr7CkvDBnyBieE6gEmo=
-----END CERTIFICATE-----