Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/12326258-de43-3feb-b537-b9f6e0ca3d2f.roa
File:                     12326258-de43-3feb-b537-b9f6e0ca3d2f.roa (raw, json)
Hash identifier:          SQWrjq3zDp8IOuWb5lpszhyH1I30so5ozZ8JtMhqFQM=
Subject key identifier:   AC:FC:31:14:BE:5C:E2:69:DB:CE:EA:02:85:53:A2:AD:87:3A:61:D1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285840C1D3FC84F71CE99E219CF780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/12326258-de43-3feb-b537-b9f6e0ca3d2f.roa
Signing time:             Mon 30 Jan 2023 12:00:00 +0000
ROA not before:           Mon 30 Jan 2023 12:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     577
IP address blocks:        74.12.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:d3:fc:84:f7:1c:e9:9e:21:9c:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 30 12:00:00 2023 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=6c7f2a57-9c3e-4d80-ba9b-1c300b08ba1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:b8:6b:bd:fd:20:bf:21:c4:66:97:b4:51:
                    14:4b:91:15:9f:bd:f2:23:61:0d:2c:43:7e:fc:40:
                    bb:d1:16:84:a9:b6:97:3f:62:bc:fb:2d:08:f9:9a:
                    57:47:41:8e:7d:db:a5:41:60:5f:94:0e:5d:2c:2e:
                    74:cd:36:b1:8f:f8:5d:59:e6:42:43:cd:82:13:7c:
                    84:24:50:12:1f:93:a6:8b:c3:98:74:7c:2a:d8:50:
                    f3:ec:9c:77:71:07:07:fe:62:dd:6d:e1:57:03:4c:
                    34:91:93:7f:3d:58:9c:05:28:ca:8a:97:6e:32:ac:
                    59:3b:e1:7f:cc:18:b4:9f:e6:9a:a0:ee:67:7a:3e:
                    13:d1:74:7a:89:d7:0f:83:0b:5b:a5:8a:ad:62:a3:
                    49:72:b2:b3:ef:c0:3c:50:eb:92:8a:1b:92:7f:4a:
                    3f:28:6f:4a:08:63:28:fb:85:22:5d:37:a9:9c:b3:
                    28:0a:53:58:61:15:d1:cc:3e:f9:5c:94:5e:9d:f4:
                    bd:0e:37:06:3d:5a:15:ee:0b:a2:d3:0b:62:9b:b8:
                    17:ef:ab:96:46:ba:1b:ed:88:b0:47:00:4b:9d:7e:
                    dd:2c:85:3a:fe:3a:95:68:0a:76:3c:18:ed:d3:f0:
                    bc:b9:05:b5:79:44:57:d1:35:91:02:7d:6e:3f:3a:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FC:31:14:BE:5C:E2:69:DB:CE:EA:02:85:53:A2:AD:87:3A:61:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/12326258-de43-3feb-b537-b9f6e0ca3d2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e9:37:34:79:f3:d4:8d:2f:75:be:60:5f:86:bf:fe:0a:a5:
         99:52:b2:7d:c8:9a:ee:47:89:eb:48:bb:11:ff:d8:90:f7:3d:
         5a:3f:26:14:fa:e4:2f:a4:bb:da:cc:c8:e1:93:f0:c7:72:8e:
         52:50:64:09:4d:b1:ca:a2:86:97:68:5f:7d:8b:b8:48:bc:19:
         fd:64:b8:e8:15:dc:af:de:b0:31:88:16:50:a1:c3:91:41:c6:
         21:55:27:d5:96:23:34:7d:6a:bc:d5:dd:79:9c:32:c4:05:7e:
         44:d3:99:9c:6b:4a:88:78:e1:44:45:a3:e3:84:67:45:d5:3e:
         38:a0:4e:c0:d9:73:69:95:1c:d7:e3:8f:c3:4a:d1:81:35:35:
         0b:01:90:24:54:e7:1c:c9:ed:56:80:c5:6c:34:21:29:6b:85:
         ea:86:5e:04:c1:71:53:4c:11:18:c6:a3:34:87:7b:60:b2:48:
         4a:75:cd:b4:41:36:72:34:34:0d:b9:a2:78:23:54:76:a3:93:
         89:16:74:66:3b:22:e1:e4:eb:f9:eb:9f:f9:d3:a0:44:62:63:
         82:79:ae:ab:09:49:e0:a3:a4:4f:02:f3:bb:93:0c:c8:bb:c3:
         01:87:c2:34:68:06:b2:ac:ce:63:bf:47:b4:3f:90:eb:13:ae:
         83:4c:80:cc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDB0/yE9xzpniGc94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDEzMDEyMDAwMFoXDTIzMDUwMjA0MDAwMFowLzEtMCsGA1UEAxMk
NmM3ZjJhNTctOWMzZS00ZDgwLWJhOWItMWMzMDBiMDhiYTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQm4a739IL8hxGaXtFEUS5EVn73yI2ENLEN+
/EC70RaEqbaXP2K8+y0I+ZpXR0GOfdulQWBflA5dLC50zTaxj/hdWeZCQ82CE3yE
JFASH5Omi8OYdHwq2FDz7Jx3cQcH/mLdbeFXA0w0kZN/PVicBSjKipduMqxZO+F/
zBi0n+aaoO5nej4T0XR6idcPgwtbpYqtYqNJcrKz78A8UOuSihuSf0o/KG9KCGMo
+4UiXTepnLMoClNYYRXRzD75XJRenfS9DjcGPVoV7gui0wtim7gX76uWRrob7Yiw
RwBLnX7dLIU6/jqVaAp2PBjt0/C8uQW1eURX0TWRAn1uPzriKwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKz8MRS+XOJp287qAoVToq2HOmHRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMTIzMjYyNTgtZGU0My0z
ZmViLWI1MzctYjlmNmUwY2EzZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASgwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABOk3NHnz1I0vdb5gX4a//gqlmVKyfcia7keJ60i7Ef/YkPc9Wj8mFPrk
L6S72szI4ZPwx3KOUlBkCU2xyqKGl2hffYu4SLwZ/WS46BXcr96wMYgWUKHDkUHG
IVUn1ZYjNH1qvNXdeZwyxAV+RNOZnGtKiHjhREWj44RnRdU+OKBOwNlzaZUc1+OP
w0rRgTU1CwGQJFTnHMntVoDFbDQhKWuF6oZeBMFxU0wRGMajNId7YLJISnXNtEE2
cjQ0DbmieCNUdqOTiRZ0Zjsi4eTr+euf+dOgRGJjgnmuqwlJ4KOkTwLzu5MMyLvD
AYfCNGgGsqzOY79HtD+Q6xOug0yAzA==
-----END CERTIFICATE-----