Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2780dcc0-3ec2-3dee-ae0f-4ef6f8e11bb3.roa
File:                     2780dcc0-3ec2-3dee-ae0f-4ef6f8e11bb3.roa (raw, json)
Hash identifier:          IGY4BxvRdh878FQteRal1ZEEyV0nOWrnvJVjvP6Im1U=
Subject key identifier:   8D:64:33:87:FF:E6:9D:73:9A:AD:64:96:C2:59:AF:54:8D:FA:79:32
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648D86886886B2938988D1D0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2780dcc0-3ec2-3dee-ae0f-4ef6f8e11bb3.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     394330
IP address blocks:        184.105.49.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:86:88:68:86:b2:93:89:88:d1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=804d633b-b55f-4b07-9696-b7e7ab95c6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:f2:85:2b:35:bd:41:17:db:f7:fd:07:b2:
                    e2:9f:90:90:01:7a:66:ce:2d:08:6f:85:19:eb:c6:
                    67:3e:f0:e7:2c:f9:79:df:35:6e:7b:43:f1:36:f1:
                    2e:02:a7:e1:3e:58:5e:4c:ec:79:18:8d:43:88:95:
                    b7:98:97:1f:e9:e5:f1:3f:c5:f4:b9:2a:56:c8:2a:
                    d0:bf:b9:bb:30:17:e9:52:d7:80:37:bc:0f:1c:d4:
                    29:5e:6f:eb:9a:d5:42:93:58:61:b1:92:cd:7d:44:
                    9d:d9:ea:d5:c2:1c:30:64:07:75:e6:d6:7e:17:e0:
                    d7:88:1e:c0:66:65:cd:aa:ec:a1:53:18:e9:60:e0:
                    ab:86:4b:8e:11:7f:6f:bc:3c:03:35:a0:a9:a2:a9:
                    0f:1e:ba:a6:93:c6:ac:9a:84:e1:8e:4c:3b:77:5e:
                    0c:ec:1d:cf:11:a9:2c:fc:57:59:17:9f:38:f1:cb:
                    8c:5a:0d:5d:a6:76:3b:a5:8a:eb:63:a8:20:c5:4a:
                    57:b2:67:46:32:ec:e6:45:89:e5:00:63:be:24:a6:
                    a8:cf:14:f4:16:ab:90:2b:00:55:8f:99:d3:11:14:
                    06:8e:86:b5:ee:f1:e4:38:6f:ae:29:a5:ea:0b:97:
                    0e:38:23:4d:2a:e9:e4:8c:e2:99:12:aa:3a:88:94:
                    9d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:64:33:87:FF:E6:9D:73:9A:AD:64:96:C2:59:AF:54:8D:FA:79:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2780dcc0-3ec2-3dee-ae0f-4ef6f8e11bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:73:2d:23:80:a5:98:83:9c:93:31:e6:86:51:c6:97:84:19:
         49:1d:30:6d:e7:09:37:e6:52:e1:00:9a:b9:58:54:aa:5a:4c:
         df:fc:a9:31:2c:23:36:a7:df:48:bd:bf:e4:4c:dc:db:85:63:
         f9:66:a1:29:37:3c:66:3f:e2:b1:22:dd:cc:69:2f:3d:f5:e5:
         88:16:54:24:a3:97:88:dd:3f:ce:b0:81:3a:e5:05:8e:30:3a:
         5f:e9:15:1e:ae:0c:12:bf:a8:46:24:2a:cf:7b:f7:9d:44:cf:
         4c:3d:75:61:f3:d6:82:8e:cc:b2:7e:6e:8d:31:62:62:fc:bb:
         31:a5:22:1a:63:73:a2:2a:46:27:f8:8c:89:f1:b3:88:80:aa:
         32:e9:6f:36:0e:a5:c8:93:22:fd:01:ff:86:de:db:ab:ba:72:
         aa:7a:ed:d2:cc:6b:37:3d:b9:5b:2a:68:ed:6f:f0:08:fe:b9:
         7c:82:e3:11:0c:f9:6c:fd:49:b8:5c:41:07:22:82:d4:37:80:
         f8:02:b7:23:19:51:07:85:16:48:c1:86:a0:fb:80:0f:f1:d7:
         89:69:f0:0c:f7:c2:37:21:57:1f:3a:56:8e:15:0f:ae:b5:af:
         41:d5:a4:bf:9e:da:2c:97:bd:32:c3:cb:5b:db:70:e3:47:d6:
         2c:4c:a8:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9kjYaIaIayk4mI0dAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkyNzEyMDAwMFoXDTIzMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk
ODA0ZDYzM2ItYjU1Zi00YjA3LTk2OTYtYjdlN2FiOTVjNmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGbyhSs1vUEX2/f9B7Lin5CQAXpmzi0Ib4UZ
68ZnPvDnLPl53zVue0PxNvEuAqfhPlheTOx5GI1DiJW3mJcf6eXxP8X0uSpWyCrQ
v7m7MBfpUteAN7wPHNQpXm/rmtVCk1hhsZLNfUSd2erVwhwwZAd15tZ+F+DXiB7A
ZmXNquyhUxjpYOCrhkuOEX9vvDwDNaCpoqkPHrqmk8asmoThjkw7d14M7B3PEaks
/FdZF5848cuMWg1dpnY7pYrrY6ggxUpXsmdGMuzmRYnlAGO+JKaozxT0FquQKwBV
j5nTERQGjoa17vHkOG+uKaXqC5cOOCNNKunkjOKZEqo6iJSdeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1kM4f/5p1zmq1klsJZr1SN+nkyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjc4MGRjYzAtM2VjMi0z
ZGVlLWFlMGYtNGVmNmY4ZTExYmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGkxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALpzLSOApZiDnJMx5oZRxpeEGUkdMG3nCTfmUuEAmrlYVKpaTN/8qTEs
Izan30i9v+RM3NuFY/lmoSk3PGY/4rEi3cxpLz315YgWVCSjl4jdP86wgTrlBY4w
Ol/pFR6uDBK/qEYkKs97951Ez0w9dWHz1oKOzLJ+bo0xYmL8uzGlIhpjc6IqRif4
jInxs4iAqjLpbzYOpciTIv0B/4be26u6cqp67dLMazc9uVsqaO1v8Aj+uXyC4xEM
+Wz9SbhcQQcigtQ3gPgCtyMZUQeFFkjBhqD7gA/x14lp8Az3wjchVx86Vo4VD661
r0HVpL+e2iyXvTLDy1vbcONH1ixMqF8=
-----END CERTIFICATE-----