Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0fb18260-c282-39a4-adc4-3154ebece399.roa
File:                     0fb18260-c282-39a4-adc4-3154ebece399.roa (raw, json)
Hash identifier:          x91ZlBSbRaiU21EMtHPyNcdvYlIkNemps6Q4QzxXKUQ=
Subject key identifier:   C1:6F:18:EF:68:B7:B9:FA:EB:FA:89:A2:6B:22:F9:90:5F:22:F0:35
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E7EF95D7FD4FB0A101700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0fb18260-c282-39a4-adc4-3154ebece399.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     47066
IP address blocks:        64.62.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:7e:f9:5d:7f:d4:fb:0a:10:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=cfde293f-df1b-4e72-b07f-99b28cb5c52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9e:ff:f1:9d:dc:85:d1:dd:95:bb:cb:dc:f0:
                    e2:b5:b5:26:83:48:be:67:50:c0:05:41:99:69:b5:
                    ee:26:a3:aa:b5:28:6c:10:e4:5f:b9:bd:77:aa:97:
                    49:05:ab:1d:a9:c4:62:a2:fc:27:41:67:4a:45:c9:
                    f5:2e:c2:e1:a7:61:53:72:42:40:e6:1b:3f:a6:3a:
                    ac:16:55:a1:e2:00:f6:e8:33:35:28:8a:11:cc:f0:
                    7c:43:01:f7:b4:1d:7e:07:63:b7:bb:81:95:72:8b:
                    2e:da:65:79:8f:2c:75:e3:0f:03:6c:b4:10:52:b2:
                    63:ea:94:bf:5d:48:9b:a4:74:a6:7c:6f:92:72:d7:
                    3e:64:72:f2:42:71:2c:d2:23:8e:0f:f9:3c:b3:42:
                    7e:d5:23:65:24:f2:2d:fa:e1:91:1f:cb:66:1c:ff:
                    ff:fd:52:f6:24:f0:b1:31:c7:ae:47:15:5c:98:da:
                    f3:67:ef:ec:da:4f:ee:3b:46:c8:83:0e:51:b1:9f:
                    5f:7b:34:ef:6f:e7:35:ea:b1:10:74:37:82:17:13:
                    70:51:db:8f:9f:a6:9b:3f:34:07:a3:27:2a:5d:f3:
                    f6:d2:c1:f0:8b:38:b1:2e:3b:ac:e2:68:14:8c:b6:
                    5d:91:e5:f5:8d:84:68:f2:d0:1c:f6:b9:7b:84:bd:
                    a3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6F:18:EF:68:B7:B9:FA:EB:FA:89:A2:6B:22:F9:90:5F:22:F0:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0fb18260-c282-39a4-adc4-3154ebece399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5a:d7:21:5e:7d:dd:e7:34:bf:3a:5c:2f:e5:60:32:d6:62:
         cd:25:37:07:ef:c1:55:97:54:8d:84:5c:97:d9:e8:8c:4b:82:
         4e:83:e2:08:35:7f:89:67:f2:34:9d:f8:5b:23:11:76:97:2c:
         08:ae:3b:8a:c5:a1:57:30:13:03:95:aa:f8:75:dc:e1:3b:02:
         9b:67:f9:b2:c6:e4:de:2b:f9:17:44:19:37:ce:76:8e:82:6c:
         d5:c4:e4:62:0b:5e:0e:72:3c:14:0b:1c:81:31:22:87:51:be:
         b3:15:9b:ed:67:e4:e5:84:e4:44:38:6e:08:8c:ca:d2:21:70:
         93:33:68:39:26:65:1f:0e:2b:2b:29:69:97:68:95:8c:0d:6a:
         59:7d:82:c3:e5:35:e2:f9:e8:7d:47:9b:91:48:f5:c5:f8:90:
         cc:f0:4a:73:9b:f9:07:1e:a8:32:e0:d5:64:b9:7e:ef:bb:eb:
         26:49:7d:b8:b3:74:b9:ce:e9:86:79:f4:af:06:a8:95:7b:7f:
         6e:19:4c:54:71:d2:98:bc:f1:76:e4:90:df:56:c5:54:f8:9e:
         37:bf:d9:ce:1c:0c:c2:42:b0:72:23:df:bf:bd:c6:71:63:06:
         b3:df:4b:ea:80:71:bf:c7:55:63:61:2b:1e:a6:35:f2:34:16:
         f2:a7:24:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9kjn75XX/U+woQFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkyNzEyMDAwMFoXDTIzMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk
Y2ZkZTI5M2YtZGYxYi00ZTcyLWIwN2YtOTliMjhjYjVjNTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ7/8Z3chdHdlbvL3PDitbUmg0i+Z1DABUGZ
abXuJqOqtShsEORfub13qpdJBasdqcRiovwnQWdKRcn1LsLhp2FTckJA5hs/pjqs
FlWh4gD26DM1KIoRzPB8QwH3tB1+B2O3u4GVcosu2mV5jyx14w8DbLQQUrJj6pS/
XUibpHSmfG+Sctc+ZHLyQnEs0iOOD/k8s0J+1SNlJPIt+uGRH8tmHP///VL2JPCx
MceuRxVcmNrzZ+/s2k/uO0bIgw5RsZ9fezTvb+c16rEQdDeCFxNwUduPn6abPzQH
oycqXfP20sHwizixLjus4mgUjLZdkeX1jYRo8tAc9rl7hL2jWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMFvGO9ot7n66/qJomsi+ZBfIvA1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGZiMTgyNjAtYzI4Mi0z
OWE0LWFkYzQtMzE1NGViZWNlMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD68MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEla1yFefd3nNL86XC/lYDLWYs0lNwfvwVWXVI2EXJfZ6IxLgk6D4gg1
f4ln8jSd+FsjEXaXLAiuO4rFoVcwEwOVqvh13OE7Aptn+bLG5N4r+RdEGTfOdo6C
bNXE5GILXg5yPBQLHIExIodRvrMVm+1n5OWE5EQ4bgiMytIhcJMzaDkmZR8OKysp
aZdolYwNall9gsPlNeL56H1Hm5FI9cX4kMzwSnOb+QceqDLg1WS5fu+76yZJfbiz
dLnO6YZ59K8GqJV7f24ZTFRx0pi88XbkkN9WxVT4nje/2c4cDMJCsHIj37+9xnFj
BrPfS+qAcb/HVWNhKx6mNfI0FvKnJLQ=
-----END CERTIFICATE-----