Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ab740e7c-244a-30e2-a6b4-8ca35e068438.roa
File:                     ab740e7c-244a-30e2-a6b4-8ca35e068438.roa (raw, json)
Hash identifier:          cQf9X2iMEH8klM6wJF+4iEDxOJsVG2MdqqX7WDg2YGM=
Subject key identifier:   24:4C:17:BD:B3:A4:4E:C7:25:37:83:24:BF:38:1E:CC:DB:1B:44:91
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285841E971912331BC21A68EA54900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ab740e7c-244a-30e2-a6b4-8ca35e068438.roa
Signing time:             Tue 16 May 2023 12:00:00 +0000
ROA not before:           Tue 16 May 2023 12:00:00 +0000
ROA not after:            Fri 17 Nov 2023 05:00:00 +0000
asID:                     398297
IP address blocks:        216.66.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e9:71:91:23:31:bc:21:a6:8e:a5:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 16 12:00:00 2023 GMT
            Not After : Nov 17 05:00:00 2023 GMT
        Subject: CN=983321d4-f2d2-459c-91f8-b4b188d5d9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:86:f8:74:1e:9d:fe:b2:83:44:46:34:8a:
                    ef:cd:68:e0:72:d3:22:18:2b:42:b4:8d:2c:6b:7e:
                    ba:79:64:6e:b2:49:31:6c:bf:6e:64:6e:98:87:58:
                    bb:8b:02:12:0f:f0:08:f7:9e:af:52:d3:16:ec:37:
                    47:be:aa:df:8b:16:74:93:5c:c2:9c:d0:d4:21:f9:
                    f4:82:92:8b:eb:78:43:09:df:1d:04:a7:57:46:ae:
                    3e:ec:b7:a3:1f:1f:05:2e:7f:1e:a8:b1:de:f9:fa:
                    8d:67:4f:6b:8d:d0:9c:36:62:61:3c:45:1b:ff:01:
                    d7:e0:2f:be:89:10:66:0d:71:9a:0f:8b:eb:42:19:
                    80:84:b9:d8:70:69:f7:c6:b8:ab:5a:39:b4:0e:01:
                    6b:d0:0b:4b:28:05:06:78:8d:01:96:08:6c:9b:16:
                    61:89:31:bc:df:44:d1:95:c4:f0:05:44:d8:22:91:
                    dc:d0:09:9b:62:eb:3e:bd:99:83:26:85:c7:9d:49:
                    63:33:16:14:74:ec:ad:8a:ba:d2:4e:4c:ba:fc:ba:
                    a0:3a:d3:92:99:aa:c6:59:67:fd:c1:99:32:cf:78:
                    5d:fe:ae:74:f0:c8:1b:e9:4f:55:38:9a:7f:c6:5a:
                    8e:02:14:28:df:73:81:84:f0:de:45:de:8a:54:cc:
                    00:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4C:17:BD:B3:A4:4E:C7:25:37:83:24:BF:38:1E:CC:DB:1B:44:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ab740e7c-244a-30e2-a6b4-8ca35e068438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fa:90:26:30:94:ee:34:3f:0a:49:4d:12:d1:9b:2b:12:aa:
         f5:42:6a:95:b4:49:f0:e4:da:2e:3a:75:ef:e1:65:c5:bc:6d:
         9e:87:38:e2:75:af:3e:6e:d5:fa:f4:3f:52:5a:ee:33:c9:28:
         a0:0c:59:0b:28:c5:6f:2b:0f:5b:41:3b:c2:86:85:c8:9a:a6:
         5f:02:b6:0c:4b:f5:77:0a:9b:f4:33:e1:2d:4b:ce:db:40:a2:
         23:89:80:ee:bf:fd:d6:88:71:63:8f:60:47:f0:a0:a6:57:27:
         2a:76:ca:5e:6b:8f:b3:8c:4d:a2:50:7f:00:ac:8b:e9:be:09:
         be:af:ed:3a:21:6e:fa:2a:b4:84:29:9f:ae:d5:6f:83:7f:c5:
         62:81:ce:77:6a:d8:3e:c4:72:11:94:68:b0:41:ae:15:fc:4c:
         6e:49:4b:55:ce:fb:81:c1:70:49:02:21:3b:ed:4d:f1:ce:a5:
         8e:a6:bc:b9:88:d3:d5:8c:94:6d:2e:2d:74:da:f4:c7:4f:0f:
         78:9f:3b:91:41:ce:10:7f:fa:fb:98:40:b5:20:a1:de:6c:9c:
         74:90:41:92:22:0a:af:55:2f:1c:0b:ff:87:27:47:e3:b0:fb:
         19:b1:4b:06:46:32:4a:b6:54:99:1f:b9:35:d4:36:94:71:3f:
         ea:74:54:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHpcZEjMbwhpo6lSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDUxNjEyMDAwMFoXDTIzMTExNzA1MDAwMFowLzEtMCsGA1UEAxMk
OTgzMzIxZDQtZjJkMi00NTljLTkxZjgtYjRiMTg4ZDVkOWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQGG+HQenf6yg0RGNIrvzWjgctMiGCtCtI0s
a366eWRuskkxbL9uZG6Yh1i7iwISD/AI956vUtMW7DdHvqrfixZ0k1zCnNDUIfn0
gpKL63hDCd8dBKdXRq4+7LejHx8FLn8eqLHe+fqNZ09rjdCcNmJhPEUb/wHX4C++
iRBmDXGaD4vrQhmAhLnYcGn3xrirWjm0DgFr0AtLKAUGeI0BlghsmxZhiTG830TR
lcTwBUTYIpHc0AmbYus+vZmDJoXHnUljMxYUdOytirrSTky6/LqgOtOSmarGWWf9
wZkyz3hd/q508Mgb6U9VOJp/xlqOAhQo33OBhPDeRd6KVMwA+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCRMF72zpE7HJTeDJL84HszbG0SRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWI3NDBlN2MtMjQ0YS0z
MGUyLWE2YjQtOGNhMzVlMDY4NDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACb6kCYwlO40PwpJTRLRmysSqvVCapW0SfDk2i46de/hZcW8bZ6HOOJ1
rz5u1fr0P1Ja7jPJKKAMWQsoxW8rD1tBO8KGhciapl8CtgxL9XcKm/Qz4S1LzttA
oiOJgO6//daIcWOPYEfwoKZXJyp2yl5rj7OMTaJQfwCsi+m+Cb6v7TohbvoqtIQp
n67Vb4N/xWKBzndq2D7EchGUaLBBrhX8TG5JS1XO+4HBcEkCITvtTfHOpY6mvLmI
09WMlG0uLXTa9MdPD3ifO5FBzhB/+vuYQLUgod5snHSQQZIiCq9VLxwL/4cnR+Ow
+xmxSwZGMkq2VJkfuTXUNpRxP+p0VLg=
-----END CERTIFICATE-----