Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cae9c50d-129f-35ca-b50c-9f1198ef5557.roa
File:                     cae9c50d-129f-35ca-b50c-9f1198ef5557.roa (raw, json)
Hash identifier:          cJzqflANeiFmASZiFOPZu9GHicd/Ik/zrs1fAglsuc4=
Subject key identifier:   7D:BD:E9:78:A5:19:0F:1D:C6:26:0B:88:93:1B:FE:92:3E:E8:32:D8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D79350A0B17FB669F595D9E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cae9c50d-129f-35ca-b50c-9f1198ef5557.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     63949
IP address blocks:        74.82.2.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:0a:0b:17:fb:66:9f:59:5d:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=884f7227-33b0-4cd1-a73e-aa650d606e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:2b:7e:d5:8b:d8:05:f4:e1:2f:94:6d:b3:
                    e4:b6:3c:d3:07:79:97:d2:81:27:cc:fc:c9:5c:da:
                    28:de:07:23:a3:83:f3:d9:60:48:4d:0b:ea:23:cc:
                    3f:9e:bc:dc:f7:92:12:9e:97:13:e9:1c:6f:77:b4:
                    2d:b5:5e:a5:8f:aa:f9:4c:a8:42:f8:a7:d1:41:b5:
                    ad:5a:99:28:01:d5:b5:67:8f:12:c4:95:41:99:d3:
                    22:63:6c:e3:43:37:36:16:0b:d7:32:e5:e4:c2:a4:
                    59:81:d4:82:51:84:df:0e:14:74:f3:dc:03:8f:07:
                    5e:8b:75:16:e2:fe:42:1b:e4:83:27:e8:ba:bc:e5:
                    dd:e3:53:53:af:56:0f:56:4f:48:07:1d:3b:ab:64:
                    fa:cb:37:3e:05:2b:67:da:0a:4f:da:1c:c0:e1:89:
                    04:3f:44:85:4b:ab:0f:00:3f:7a:4b:52:99:cf:98:
                    77:ca:7c:ec:3c:eb:78:96:38:02:e1:2a:be:81:5f:
                    67:80:09:10:1f:92:45:20:67:8f:8e:04:89:c4:f3:
                    77:f9:1c:2f:9d:65:5f:e3:e8:40:c3:f1:f0:b5:e6:
                    2f:ae:95:ba:b0:11:01:8f:df:07:0f:21:ba:31:61:
                    f1:2a:4c:dd:06:14:b8:03:1a:d5:5c:a8:e7:da:39:
                    fe:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BD:E9:78:A5:19:0F:1D:C6:26:0B:88:93:1B:FE:92:3E:E8:32:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cae9c50d-129f-35ca-b50c-9f1198ef5557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:8f:ea:90:ed:e6:12:0f:9b:09:1f:b2:36:01:05:96:87:5a:
         fd:09:68:cf:92:99:64:a4:35:b6:d8:96:7e:93:ff:aa:d7:67:
         8e:31:33:fe:b0:ad:46:fe:0c:3b:8b:ee:70:cc:57:e4:fb:e5:
         17:5f:e8:9e:17:8a:40:05:b1:1f:49:2e:e7:fe:25:47:c0:d3:
         84:6e:3f:8f:92:a5:1d:9f:f5:52:6c:9d:a7:d8:93:c8:eb:90:
         b6:ee:9e:1a:6f:b7:4b:23:d1:c9:c6:01:20:e9:ef:7e:6a:bf:
         ac:79:44:72:b0:0e:6e:ff:9e:85:35:b9:8f:e7:82:85:c1:23:
         fe:4c:76:4e:df:62:5a:28:5e:74:46:0f:a0:7e:5d:ba:fe:25:
         07:15:af:56:00:5c:b2:52:eb:07:83:67:ac:53:0f:b0:4a:30:
         9c:cb:bd:0e:e9:9c:a4:9e:29:60:54:19:58:c6:5c:d1:92:db:
         e7:9c:78:92:63:0c:89:3b:e6:bc:c1:f4:2d:d6:e0:fd:2f:aa:
         30:4e:58:30:7f:b8:f8:ef:10:ca:0a:34:45:50:3e:fa:2a:6b:
         14:31:aa:06:70:e6:ab:7f:9e:5d:b8:69:be:ef:0e:dc:eb:52:
         22:e8:42:5b:45:da:18:c4:af:30:03:f1:57:8d:10:af:50:eb:
         fc:f2:68:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD15NQoLF/tmn1ldngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDQwNTA0MDAwMFoXDTIyMTAwNTA0MDAwMFowLzEtMCsGA1UEAxMk
ODg0ZjcyMjctMzNiMC00Y2QxLWE3M2UtYWE2NTBkNjA2ZTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb8rftWL2AX04S+UbbPktjzTB3mX0oEnzPzJ
XNoo3gcjo4Pz2WBITQvqI8w/nrzc95ISnpcT6Rxvd7QttV6lj6r5TKhC+KfRQbWt
WpkoAdW1Z48SxJVBmdMiY2zjQzc2FgvXMuXkwqRZgdSCUYTfDhR089wDjwdei3UW
4v5CG+SDJ+i6vOXd41NTr1YPVk9IBx07q2T6yzc+BStn2gpP2hzA4YkEP0SFS6sP
AD96S1KZz5h3ynzsPOt4ljgC4Sq+gV9ngAkQH5JFIGePjgSJxPN3+RwvnWVf4+hA
w/HwteYvrpW6sBEBj98HDyG6MWHxKkzdBhS4AxrVXKjn2jn+5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH296XilGQ8dxiYLiJMb/pI+6DLYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2FlOWM1MGQtMTI5Zi0z
NWNhLWI1MGMtOWYxMTk4ZWY1NTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSlICMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOP6pDt5hIPmwkfsjYBBZaHWv0JaM+SmWSkNbbYln6T/6rXZ44xM/6w
rUb+DDuL7nDMV+T75Rdf6J4XikAFsR9JLuf+JUfA04RuP4+SpR2f9VJsnafYk8jr
kLbunhpvt0sj0cnGASDp735qv6x5RHKwDm7/noU1uY/ngoXBI/5Mdk7fYlooXnRG
D6B+Xbr+JQcVr1YAXLJS6weDZ6xTD7BKMJzLvQ7pnKSeKWBUGVjGXNGS2+eceJJj
DIk75rzB9C3W4P0vqjBOWDB/uPjvEMoKNEVQPvoqaxQxqgZw5qt/nl24ab7vDtzr
UiLoQltF2hjErzAD8VeNEK9Q6/zyaOU=
-----END CERTIFICATE-----