Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/1b39225b-e27e-3087-aa39-81848e0c77dc.roa
File:                     1b39225b-e27e-3087-aa39-81848e0c77dc.roa (raw, json)
Hash identifier:          QWGfGOCpBJKBSzgDRllyMf9QgReW4SuXqiXwNz9r/0o=
Subject key identifier:   5D:F4:0C:72:9E:8B:A7:33:79:13:DA:96:84:60:BE:8A:55:50:E6:76
Certificate issuer:       /CN=76c188c9-4fff-4233-9a69-35e66734774b
Certificate serial:       010D0C9F43285842AE33CFB12DE92C8BA8EAA700
Authority key identifier: DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/1b39225b-e27e-3087-aa39-81848e0c77dc.roa
Signing time:             Thu 27 Jul 2023 01:00:17 +0000
ROA not before:           Thu 27 Jul 2023 01:00:17 +0000
ROA not after:            Wed 25 Oct 2023 01:00:17 +0000
asID:                     834
IP address blocks:        64.84.120.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ae:33:cf:b1:2d:e9:2c:8b:a8:ea:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76c188c9-4fff-4233-9a69-35e66734774b
        Validity
            Not Before: Jul 27 01:00:17 2023 GMT
            Not After : Oct 25 01:00:17 2023 GMT
        Subject: CN=1e46e735-d670-4f7b-8cac-78603dbc10c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:9f:77:07:f7:00:61:f9:b5:57:72:bb:e4:
                    53:e6:95:4d:0f:f2:56:b6:6d:d0:3d:56:4b:34:dd:
                    9a:f6:bd:f4:c3:29:9f:89:c4:d9:19:bf:7a:6d:52:
                    e0:fa:0e:b9:64:d8:80:9c:5f:f4:86:cf:a1:05:ca:
                    72:63:14:5c:a9:c5:fd:00:31:da:73:64:31:80:e8:
                    6e:7b:44:73:14:78:2d:33:12:a9:66:0d:8b:fe:54:
                    7c:ec:10:6c:46:71:32:84:0c:b1:c5:83:8b:2a:18:
                    75:e8:96:05:c0:6c:53:db:c1:0a:ac:2d:66:6e:aa:
                    a9:5f:40:c8:26:0d:6a:6f:98:18:e7:7e:5f:0c:b2:
                    1d:13:d6:28:c4:e3:68:c4:11:1a:3f:6c:41:2d:c3:
                    53:5a:f3:3b:e2:ee:d7:b4:36:3b:8e:47:02:9b:a1:
                    42:c8:a7:d6:fe:c2:78:6b:51:f3:82:fc:60:ad:ec:
                    60:05:b7:7c:5a:87:cb:16:7a:f5:32:79:12:e8:85:
                    bc:14:26:1b:85:23:6d:20:5e:fa:1d:27:b0:47:a2:
                    eb:0e:2a:be:45:e1:ac:64:9a:69:63:f3:63:9a:d6:
                    fa:f7:e3:22:19:88:e0:c3:cb:61:ee:ee:f2:73:37:
                    b1:34:c4:72:13:c9:f7:a3:2c:00:c9:a2:fd:89:77:
                    92:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F4:0C:72:9E:8B:A7:33:79:13:DA:96:84:60:BE:8A:55:50:E6:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/1b39225b-e27e-3087-aa39-81848e0c77dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:4c:38:2f:3d:b3:8f:50:72:0a:ae:33:17:1f:be:d9:05:40:
         63:12:0b:f0:e8:b7:fe:24:bd:10:1f:93:bf:84:ca:c2:66:78:
         e1:3d:8e:27:f1:50:51:6d:77:56:05:bf:50:38:cc:d8:de:a7:
         36:c4:7f:23:0b:d9:85:20:7a:61:fc:f2:e9:f4:55:ea:65:87:
         87:21:8c:71:6e:9d:0b:b6:88:1b:d2:38:50:d3:e8:28:cf:a4:
         4a:82:48:94:db:05:30:2d:7a:3f:f5:62:03:0b:4a:fd:ac:9a:
         3b:b2:02:73:db:b5:c9:62:77:b5:47:f9:14:9a:0a:45:98:8c:
         7f:3b:d3:73:21:a2:b4:d7:ed:b9:48:37:75:86:d7:0e:65:5d:
         e9:bd:9c:1e:5e:8d:27:0f:05:e3:63:46:4f:76:d4:3f:25:a1:
         c3:41:f9:1d:53:85:57:39:ba:bc:e9:d3:d3:db:d2:cf:2c:51:
         33:69:13:d3:93:19:1c:ff:c4:fd:f0:a7:be:ed:fc:ba:df:c4:
         8a:b6:34:8d:e4:48:1f:c9:e9:78:19:ef:77:61:8b:73:4c:2c:
         26:86:d4:8d:4f:0d:2d:61:fa:6f:b8:06:77:a8:7c:77:b7:c8:
         d7:b9:98:c9:f5:48:64:f8:64:11:da:ae:dd:d4:bd:65:ab:fd:
         a7:46:1c:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKuM8+xLeksi6jqpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZjMTg4YzktNGZmZi00MjMzLTlhNjktMzVlNjY3MzQ3
NzRiMB4XDTIzMDcyNzAxMDAxN1oXDTIzMTAyNTAxMDAxN1owLzEtMCsGA1UEAxMk
MWU0NmU3MzUtZDY3MC00ZjdiLThjYWMtNzg2MDNkYmMxMGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTKfdwf3AGH5tVdyu+RT5pVND/JWtm3QPVZL
NN2a9r30wymficTZGb96bVLg+g65ZNiAnF/0hs+hBcpyYxRcqcX9ADHac2QxgOhu
e0RzFHgtMxKpZg2L/lR87BBsRnEyhAyxxYOLKhh16JYFwGxT28EKrC1mbqqpX0DI
Jg1qb5gY535fDLIdE9YoxONoxBEaP2xBLcNTWvM74u7XtDY7jkcCm6FCyKfW/sJ4
a1HzgvxgrexgBbd8WofLFnr1MnkS6IW8FCYbhSNtIF76HSewR6LrDiq+ReGsZJpp
Y/Njmtb69+MiGYjgw8th7u7yczexNMRyE8n3oywAyaL9iXeSAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF30DHKei6czeRPaloRgvopVUOZ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NmMx
ODhjOS00ZmZmLTQyMzMtOWE2OS0zNWU2NjczNDc3NGIvMWIzOTIyNWItZTI3ZS0z
MDg3LWFhMzktODE4NDhlMGM3N2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzZjMTg4YzktNGZmZi00MjMzLTlh
NjktMzVlNjY3MzQ3NzRiLzc2YzE4OGM5LTRmZmYtNDIzMy05YTY5LTM1ZTY2NzM0
Nzc0Yi5jcmwwHwYDVR0jBBgwFoAU2+KmpXhT9xLjHzFSCsVBuxw+5xswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NmMxODhjOS00ZmZmLTQyMzMtOWE2OS0zNWU2
NjczNDc3NGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFR4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJMOC89s49QcgquMxcfvtkFQGMSC/Dot/4kvRAfk7+EysJmeOE9jifx
UFFtd1YFv1A4zNjepzbEfyML2YUgemH88un0Veplh4chjHFunQu2iBvSOFDT6CjP
pEqCSJTbBTAtej/1YgMLSv2smjuyAnPbtclid7VH+RSaCkWYjH8703MhorTX7blI
N3WG1w5lXem9nB5ejScPBeNjRk921D8locNB+R1ThVc5urzp09Pb0s8sUTNpE9OT
GRz/xP3wp77t/LrfxIq2NI3kSB/J6XgZ73dhi3NMLCaG1I1PDS1h+m+4BneofHe3
yNe5mMn1SGT4ZBHart3UvWWr/adGHAc=
-----END CERTIFICATE-----