Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/4cae4b1b-a8a2-33b6-a2fd-f4d1f55dd2ca.roa
File:                     4cae4b1b-a8a2-33b6-a2fd-f4d1f55dd2ca.roa (raw, json)
Hash identifier:          k3iLHc+0aW8/K4jWtu1ENvTZe4I4gWii4u+ZLPC7cRI=
Subject key identifier:   DA:11:24:5A:46:24:34:C0:D5:AA:1B:81:1C:16:9F:0B:4E:57:F1:12
Certificate issuer:       /CN=76c188c9-4fff-4233-9a69-35e66734774b
Certificate serial:       010D0C9F43285842F5C2723B0A9F2674D477D800
Authority key identifier: DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/4cae4b1b-a8a2-33b6-a2fd-f4d1f55dd2ca.roa
Signing time:             Mon 21 Aug 2023 16:10:06 +0000
ROA not before:           Mon 21 Aug 2023 16:10:06 +0000
ROA not after:            Sun 19 Nov 2023 17:10:06 +0000
asID:                     834
IP address blocks:        64.84.96.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f5:c2:72:3b:0a:9f:26:74:d4:77:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76c188c9-4fff-4233-9a69-35e66734774b
        Validity
            Not Before: Aug 21 16:10:06 2023 GMT
            Not After : Nov 19 17:10:06 2023 GMT
        Subject: CN=2a876677-1efe-4c00-ba99-ed510945ebf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8d:32:6f:ba:cc:b0:f3:b8:6c:2d:9b:a2:ea:
                    4a:29:19:ca:10:a8:95:61:00:12:ef:e0:d4:b2:79:
                    46:19:2e:25:b9:fe:a3:cb:a7:50:5d:ac:21:44:bd:
                    3b:96:54:e9:ad:fe:0a:b2:f6:71:31:fa:9c:c7:02:
                    5f:31:0b:2c:01:81:b8:28:76:85:86:30:d8:4d:29:
                    f5:ed:ce:70:c7:25:a8:f6:13:dd:7c:33:60:e1:15:
                    f9:e9:69:c6:c6:53:59:07:02:52:f9:65:32:b8:b6:
                    bf:62:fd:02:31:d3:4e:ba:bd:f3:33:46:bb:24:7a:
                    6a:49:47:55:9a:b8:76:c4:88:78:ad:79:22:ae:49:
                    d9:82:3b:5e:6d:21:00:a4:e1:21:f9:53:4f:d8:bc:
                    68:2c:e7:42:9b:8c:be:1a:cf:91:6b:ed:f2:4d:6e:
                    e4:f3:d5:2a:76:e6:61:b2:ee:5e:07:0f:b3:10:09:
                    ff:77:45:c0:2d:7e:c3:09:02:5a:47:08:e1:a7:be:
                    5a:73:d4:c7:54:ea:f5:9b:2a:dc:a2:b3:bc:ee:cd:
                    1c:11:16:33:63:53:c9:b2:cd:9e:ee:0a:34:42:c7:
                    0a:a5:14:92:34:f5:b2:35:07:bf:a0:70:91:6c:61:
                    da:fb:30:be:af:a5:48:5c:61:8e:33:b3:ea:ff:03:
                    94:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:11:24:5A:46:24:34:C0:D5:AA:1B:81:1C:16:9F:0B:4E:57:F1:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/4cae4b1b-a8a2-33b6-a2fd-f4d1f55dd2ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:fd:70:99:90:af:ce:1f:1e:a1:91:b0:29:17:8a:dd:ad:93:
         d6:26:bf:99:33:15:9c:2b:ed:73:32:05:03:73:8d:4f:82:db:
         4a:12:c7:a7:1f:2c:33:0f:e1:34:be:01:a1:1e:15:9b:c2:af:
         58:cc:ec:9f:d4:4e:8e:f3:fc:9e:8c:ef:79:96:99:fb:51:3d:
         0e:84:21:31:9d:5b:6d:cf:ea:23:5b:f0:86:f1:95:66:f7:e9:
         6a:af:7c:e7:df:7b:e4:7c:d3:d5:60:40:1d:d5:ba:1d:15:7f:
         0a:87:0b:a3:69:9c:d3:05:49:d2:73:fd:46:4b:9e:54:54:04:
         ee:fb:ae:f4:ea:dd:d7:7f:b7:0e:99:17:08:fa:94:2f:01:00:
         57:03:ae:ec:e2:d2:22:b9:46:bd:5b:e4:e3:d3:c4:fc:c2:cb:
         6e:46:f7:15:89:4c:8e:b6:eb:22:46:05:fc:df:59:c6:f0:6c:
         67:2e:7d:c5:dd:17:dd:16:18:6f:54:16:be:cf:09:7a:b6:46:
         0a:28:f9:4c:8f:82:2c:59:1c:00:19:ca:22:13:28:25:f8:72:
         19:c6:d9:eb:f5:c2:6d:cc:7a:cf:17:46:44:88:34:d5:e7:55:
         ad:49:31:da:82:3c:d4:28:d9:03:88:6b:7f:e1:5b:63:2b:1d:
         54:0d:53:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEL1wnI7Cp8mdNR32AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZjMTg4YzktNGZmZi00MjMzLTlhNjktMzVlNjY3MzQ3
NzRiMB4XDTIzMDgyMTE2MTAwNloXDTIzMTExOTE3MTAwNlowLzEtMCsGA1UEAxMk
MmE4NzY2NzctMWVmZS00YzAwLWJhOTktZWQ1MTA5NDVlYmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY0yb7rMsPO4bC2boupKKRnKEKiVYQAS7+DU
snlGGS4luf6jy6dQXawhRL07llTprf4KsvZxMfqcxwJfMQssAYG4KHaFhjDYTSn1
7c5wxyWo9hPdfDNg4RX56WnGxlNZBwJS+WUyuLa/Yv0CMdNOur3zM0a7JHpqSUdV
mrh2xIh4rXkirknZgjtebSEApOEh+VNP2LxoLOdCm4y+Gs+Ra+3yTW7k89UqduZh
su5eBw+zEAn/d0XALX7DCQJaRwjhp75ac9THVOr1myrcorO87s0cERYzY1PJss2e
7go0QscKpRSSNPWyNQe/oHCRbGHa+zC+r6VIXGGOM7Pq/wOUGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNoRJFpGJDTA1aobgRwWnwtOV/ESMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NmMx
ODhjOS00ZmZmLTQyMzMtOWE2OS0zNWU2NjczNDc3NGIvNGNhZTRiMWItYThhMi0z
M2I2LWEyZmQtZjRkMWY1NWRkMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzZjMTg4YzktNGZmZi00MjMzLTlh
NjktMzVlNjY3MzQ3NzRiLzc2YzE4OGM5LTRmZmYtNDIzMy05YTY5LTM1ZTY2NzM0
Nzc0Yi5jcmwwHwYDVR0jBBgwFoAU2+KmpXhT9xLjHzFSCsVBuxw+5xswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NmMxODhjOS00ZmZmLTQyMzMtOWE2OS0zNWU2
NjczNDc3NGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFRgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFv9cJmQr84fHqGRsCkXit2tk9Ymv5kzFZwr7XMyBQNzjU+C20oSx6cf
LDMP4TS+AaEeFZvCr1jM7J/UTo7z/J6M73mWmftRPQ6EITGdW23P6iNb8IbxlWb3
6WqvfOffe+R809VgQB3Vuh0VfwqHC6NpnNMFSdJz/UZLnlRUBO77rvTq3dd/tw6Z
Fwj6lC8BAFcDruzi0iK5Rr1b5OPTxPzCy25G9xWJTI626yJGBfzfWcbwbGcufcXd
F90WGG9UFr7PCXq2Rgoo+UyPgixZHAAZyiITKCX4chnG2ev1wm3Mes8XRkSINNXn
Va1JMdqCPNQo2QOIa3/hW2MrHVQNUzc=
-----END CERTIFICATE-----