Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ab6341b1-2afd-32f0-ae89-e7b391229c29.roa
File:                     ab6341b1-2afd-32f0-ae89-e7b391229c29.roa (raw, json)
Hash identifier:          UYHBgx+F6AV8PjsFWORUGdjW6t9wS96Yq9bdfy6/w4I=
Subject key identifier:   4F:48:9E:60:7B:F1:E0:1B:DE:81:40:29:9C:3E:FE:98:5B:BD:EF:AB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E9EB7797F069EDC8F1F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ab6341b1-2afd-32f0-ae89-e7b391229c29.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     54288
IP address blocks:        216.218.201.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:9e:b7:79:7f:06:9e:dc:8f:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=a67906d7-e16e-4e79-a7a5-0de9b716180c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ea:60:fe:b7:d8:45:a9:94:09:6d:7d:1e:f4:
                    bf:fe:ea:30:27:43:15:fd:96:76:21:3d:8e:28:69:
                    11:bf:9a:6a:47:dc:51:75:ff:a7:49:5e:3a:17:ea:
                    d7:2b:db:67:e7:5b:4b:ea:d3:d5:7b:25:d8:67:b6:
                    2e:01:77:a5:2f:55:7c:ab:c7:d8:02:e3:b5:05:7a:
                    88:5e:16:bf:b7:58:a4:90:5f:27:ad:58:16:11:e3:
                    66:06:08:e5:a1:c4:9b:5e:8a:ba:51:91:84:8e:09:
                    ac:0f:e4:27:27:e1:42:85:5a:0d:32:bf:d2:a8:28:
                    65:19:d5:a9:2f:de:ba:f5:9a:4e:79:8e:cb:b0:7c:
                    6d:01:f4:0b:a0:71:59:df:f5:8d:7a:1c:55:ae:e0:
                    22:52:82:b1:80:b9:e6:50:af:40:69:52:25:81:ac:
                    b1:11:e3:cf:96:e4:82:a8:0d:05:8a:48:1f:79:07:
                    29:73:81:c2:4b:06:72:34:c5:10:12:30:96:e8:81:
                    83:35:0c:5b:f4:ac:90:69:28:21:e1:dd:30:89:68:
                    49:41:47:1a:d0:01:6c:7d:e3:64:64:9f:46:66:f3:
                    e3:3b:e3:6c:f8:50:bc:0d:52:41:2e:05:17:b0:73:
                    78:70:3b:25:7d:20:1a:22:87:00:8c:41:e6:5f:ec:
                    ef:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:48:9E:60:7B:F1:E0:1B:DE:81:40:29:9C:3E:FE:98:5B:BD:EF:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ab6341b1-2afd-32f0-ae89-e7b391229c29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ed:9a:a0:5e:18:a8:d2:51:95:7b:a6:18:87:52:c8:91:85:
         1c:71:53:e9:18:bb:79:16:d4:67:d8:88:dd:be:98:10:c2:5d:
         d1:f5:67:c0:96:dc:ed:1d:8c:de:cd:49:a7:ab:fd:b5:7d:0a:
         3f:f4:3a:72:45:cb:22:d4:b4:a5:0f:6f:f8:6b:34:03:2a:a2:
         84:07:89:52:59:b3:3b:7b:21:ca:b9:76:84:fd:01:c4:97:c6:
         75:1d:52:cb:6e:41:a1:0a:a9:0b:ed:ff:5c:81:70:c7:72:3b:
         a2:03:b0:9d:b9:62:34:c6:4b:72:32:9b:bb:1f:5f:08:e9:bf:
         0f:c9:b6:49:f1:82:f0:c9:47:98:29:23:03:2a:0e:91:67:ac:
         2d:a6:8d:9e:11:f3:db:a6:d4:02:2a:c1:84:12:04:ce:30:9f:
         0e:0b:e3:07:b5:7e:64:2a:70:fe:22:41:9f:17:14:55:77:e2:
         3b:74:0b:19:6f:3e:c9:0e:71:c7:ac:ec:14:50:cc:99:c5:49:
         19:28:d0:7f:cb:b6:6c:c6:db:3e:e5:f5:9f:18:4f:4c:47:e6:
         ff:4e:da:3f:df:25:55:0b:c5:9d:28:ec:87:3b:68:d0:38:54:
         6e:44:10:3f:cf:9e:30:36:df:37:d0:17:ac:dd:8b:e8:ec:21:
         5a:db:9d:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9kjp63eX8GntyPHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkyNzEyMDAwMFoXDTIzMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk
YTY3OTA2ZDctZTE2ZS00ZTc5LWE3YTUtMGRlOWI3MTYxODBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiupg/rfYRamUCW19HvS//uowJ0MV/ZZ2IT2O
KGkRv5pqR9xRdf+nSV46F+rXK9tn51tL6tPVeyXYZ7YuAXelL1V8q8fYAuO1BXqI
Xha/t1ikkF8nrVgWEeNmBgjlocSbXoq6UZGEjgmsD+QnJ+FChVoNMr/SqChlGdWp
L9669ZpOeY7LsHxtAfQLoHFZ3/WNehxVruAiUoKxgLnmUK9AaVIlgayxEePPluSC
qA0FikgfeQcpc4HCSwZyNMUQEjCW6IGDNQxb9KyQaSgh4d0wiWhJQUca0AFsfeNk
ZJ9GZvPjO+Ns+FC8DVJBLgUXsHN4cDslfSAaIocAjEHmX+zviQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE9InmB78eAb3oFAKZw+/phbve+rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWI2MzQxYjEtMmFmZC0z
MmYwLWFlODktZTdiMzkxMjI5YzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NrJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTtmqBeGKjSUZV7phiHUsiRhRxxU+kYu3kW1GfYiN2+mBDCXdH1Z8CW
3O0djN7NSaer/bV9Cj/0OnJFyyLUtKUPb/hrNAMqooQHiVJZszt7Icq5doT9AcSX
xnUdUstuQaEKqQvt/1yBcMdyO6IDsJ25YjTGS3Iym7sfXwjpvw/JtknxgvDJR5gp
IwMqDpFnrC2mjZ4R89um1AIqwYQSBM4wnw4L4we1fmQqcP4iQZ8XFFV34jt0Cxlv
PskOcces7BRQzJnFSRko0H/LtmzG2z7l9Z8YT0xH5v9O2j/fJVULxZ0o7Ic7aNA4
VG5EED/PnjA23zfQF6zdi+jsIVrbnaQ=
-----END CERTIFICATE-----