Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/135a80d4-4ce0-36c6-9011-6b9e077bbf24.roa
File:                     135a80d4-4ce0-36c6-9011-6b9e077bbf24.roa (raw, json)
Hash identifier:          yb4tod87xOvCx+ElFWO9HZdiVs6RWw+TPLxi0Y3gD7g=
Subject key identifier:   0A:1F:2B:FF:FE:F7:FF:3F:62:4B:32:45:89:BC:39:57:56:21:58:6C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328583FED26DDE478A80AD72D8A6980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/135a80d4-4ce0-36c6-9011-6b9e077bbf24.roa
Signing time:             Tue 15 Nov 2022 12:00:00 +0000
ROA not before:           Tue 15 Nov 2022 12:00:00 +0000
ROA not after:            Wed 08 Feb 2023 05:00:00 +0000
asID:                     577
IP address blocks:        67.70.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ed:26:dd:e4:78:a8:0a:d7:2d:8a:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov 15 12:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2023 GMT
        Subject: CN=14ec372b-fc5f-4094-b763-1d6e82d2e351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5d:28:a5:85:ac:ea:9a:80:4a:78:ce:d3:76:
                    4d:0e:7d:79:cb:91:30:38:14:54:61:f7:e5:6e:e5:
                    93:09:33:d0:5f:2a:63:cf:00:c9:11:4d:48:04:a6:
                    ca:b2:47:d7:87:60:c6:b1:04:d8:f6:50:d5:6f:c4:
                    7b:b8:6a:52:08:95:28:79:43:62:a9:40:2a:78:19:
                    d5:95:19:d6:ec:0b:71:a2:6e:62:b7:7c:8e:2a:2b:
                    30:80:18:78:f2:78:ba:01:80:03:6b:aa:0a:15:b4:
                    fe:d8:46:29:13:ec:f6:e5:c3:e5:c1:e8:7e:b7:5f:
                    c4:7a:b0:e8:cf:7e:53:44:7d:a3:34:0b:2e:07:71:
                    ef:1e:97:0b:e0:0f:35:3a:93:2d:d8:a4:c7:a3:b3:
                    22:fe:65:2e:3c:4d:3d:38:f1:bc:1c:74:7c:45:06:
                    79:44:26:5a:29:76:37:7a:3e:06:b0:48:38:e6:d9:
                    76:f0:c2:22:0a:69:f5:55:ee:87:10:54:8c:40:83:
                    eb:8e:bd:51:eb:03:0c:88:9a:d3:8b:c7:b1:f9:4d:
                    58:88:66:36:fc:1d:04:5d:93:1b:80:c8:da:ad:9a:
                    7a:f0:a1:9b:29:12:1e:00:99:bc:c5:86:08:c5:25:
                    c1:c4:81:99:04:bc:3c:f6:54:e0:00:90:e0:3c:71:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1F:2B:FF:FE:F7:FF:3F:62:4B:32:45:89:BC:39:57:56:21:58:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/135a80d4-4ce0-36c6-9011-6b9e077bbf24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.70.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:1f:cc:99:8d:0c:8e:ed:16:71:b8:6e:3c:70:45:2e:aa:a8:
         19:77:f7:12:09:c3:cf:3c:aa:a5:93:9f:e9:28:12:87:c8:3e:
         f8:f6:cd:89:49:d7:cd:c8:c3:fa:ba:f7:c9:af:98:76:f3:9a:
         ec:9b:e3:3d:25:55:a2:92:16:26:bd:17:48:57:d4:a9:9e:e2:
         1b:10:88:57:f8:a1:9a:24:c3:18:c8:b7:03:7f:9f:08:7d:53:
         00:70:fa:b9:90:f7:22:b2:40:04:f8:b9:1e:f4:aa:8c:bd:24:
         06:64:99:1a:42:fb:f8:67:c7:6b:a4:7e:db:4b:b0:85:4e:81:
         35:d9:8f:da:42:97:15:5c:9c:60:f9:81:18:98:13:3e:8e:d5:
         7c:4b:24:46:81:89:0b:83:4a:09:66:c3:3f:3c:5b:4f:c8:50:
         5f:36:b5:46:7f:b5:cb:f4:f0:26:bd:16:61:40:00:de:7b:4b:
         d2:3c:0f:9d:e9:b9:61:fe:c5:e3:c9:be:03:c1:a2:d3:27:3f:
         83:03:bc:62:9f:55:c0:f7:ce:d2:b4:fe:d3:6d:e1:03:13:61:
         23:c3:8b:2b:8f:b8:78:4d:c6:0a:b3:b1:08:25:78:b4:6b:62:
         15:70:d7:32:31:19:24:aa:69:95:7f:05:65:41:d2:2e:bd:e2:
         75:9f:d4:03
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/tJt3keKgK1y2KaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIyMTExNTEyMDAwMFoXDTIzMDIwODA1MDAwMFowLzEtMCsGA1UEAxMk
MTRlYzM3MmItZmM1Zi00MDk0LWI3NjMtMWQ2ZTgyZDJlMzUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF0opYWs6pqASnjO03ZNDn15y5EwOBRUYffl
buWTCTPQXypjzwDJEU1IBKbKskfXh2DGsQTY9lDVb8R7uGpSCJUoeUNiqUAqeBnV
lRnW7Atxom5it3yOKiswgBh48ni6AYADa6oKFbT+2EYpE+z25cPlweh+t1/EerDo
z35TRH2jNAsuB3HvHpcL4A81OpMt2KTHo7Mi/mUuPE09OPG8HHR8RQZ5RCZaKXY3
ej4GsEg45tl28MIiCmn1Ve6HEFSMQIPrjr1R6wMMiJrTi8ex+U1YiGY2/B0EXZMb
gMjarZp68KGbKRIeAJm8xYYIxSXBxIGZBLw89lTgAJDgPHFq2wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAofK//+9/8/YksyRYm8OVdWIVhsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMTM1YTgwZDQtNGNlMC0z
NmM2LTkwMTEtNmI5ZTA3N2JiZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQ0YwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXh/MmY0Mju0WcbhuPHBFLqqoGXf3EgnDzzyqpZOf6SgSh8g++PbNiUnX
zcjD+rr3ya+YdvOa7JvjPSVVopIWJr0XSFfUqZ7iGxCIV/ihmiTDGMi3A3+fCH1T
AHD6uZD3IrJABPi5HvSqjL0kBmSZGkL7+GfHa6R+20uwhU6BNdmP2kKXFVycYPmB
GJgTPo7VfEskRoGJC4NKCWbDPzxbT8hQXza1Rn+1y/TwJr0WYUAA3ntL0jwPnem5
Yf7F48m+A8Gi0yc/gwO8Yp9VwPfO0rT+023hAxNhI8OLK4+4eE3GCrOxCCV4tGti
FXDXMjEZJKpplX8FZUHSLr3idZ/UAw==
-----END CERTIFICATE-----