Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/13ea3361-7f06-3e30-900e-433dc3ea6e23.roa
File:                     13ea3361-7f06-3e30-900e-433dc3ea6e23.roa (raw, json)
Hash identifier:          ycatlIJ24ppYMEWkJsdI8C9goihdM47js3L1aIO2hMk=
Subject key identifier:   0F:FE:CE:2A:2B:49:AB:59:69:3C:49:E6:EE:78:43:DA:AA:CA:2A:D1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA11DC99AE6849ADA9C75180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/13ea3361-7f06-3e30-900e-433dc3ea6e23.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     398006
IP address blocks:        142.163.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:dc:99:ae:68:49:ad:a9:c7:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=95df74ce-614a-4e5a-87c9-3bb91980d61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:33:71:7d:b3:6c:8f:5a:cb:1f:3f:ea:5f:
                    17:ad:0c:2d:c8:ad:df:c0:8d:07:1f:2b:b0:a5:d1:
                    54:fb:bf:09:03:2c:96:3b:20:e6:20:0a:12:8e:6d:
                    11:68:39:11:c1:cc:51:b4:3e:68:bd:74:6c:81:5b:
                    47:32:b8:4b:e1:42:b1:10:3f:d7:1e:f8:97:08:65:
                    ca:7b:b3:67:ca:34:80:d9:32:19:56:ab:be:00:32:
                    66:7b:2d:af:34:47:6d:68:82:89:a2:67:15:5b:4a:
                    bd:2c:4e:43:3e:cf:7d:4c:81:e9:e9:13:3e:7a:be:
                    af:ff:d7:a4:05:a4:27:13:94:4a:75:05:14:99:5d:
                    be:52:95:2a:69:e2:08:8c:69:e0:83:22:a9:11:2a:
                    18:7c:07:a6:fb:2c:76:04:1b:82:35:d6:e1:46:50:
                    80:37:e5:5a:72:39:90:30:78:a2:c0:91:44:41:98:
                    56:58:d4:1f:20:bb:76:4c:4a:67:b0:ab:f2:67:af:
                    f1:23:5e:71:21:f5:00:50:a8:4f:a0:5e:28:55:6a:
                    4c:76:43:97:41:03:b3:c5:f3:6c:5a:ac:32:56:82:
                    66:65:ac:12:0f:55:3e:c7:6c:bf:9a:4a:c0:6f:cf:
                    ab:e4:e9:db:37:b9:33:f5:a6:a9:1c:c8:31:ec:13:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FE:CE:2A:2B:49:AB:59:69:3C:49:E6:EE:78:43:DA:AA:CA:2A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/13ea3361-7f06-3e30-900e-433dc3ea6e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.163.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:fc:1b:d7:7b:c9:31:f1:62:9f:3b:83:60:af:55:5b:3c:d3:
         a7:77:40:3d:01:be:fd:7b:f9:ab:e1:8e:81:24:c2:3e:c7:b1:
         69:3a:01:89:e3:02:8e:a0:7f:88:97:78:dd:56:8b:73:19:19:
         8f:52:a0:73:c2:34:ba:d3:04:23:df:ba:9a:99:86:96:32:cd:
         36:26:d1:92:bb:66:63:4a:2f:04:56:5a:93:51:4f:74:1c:5a:
         24:2b:10:25:f6:50:5c:f3:92:15:bf:7d:37:9a:5e:2e:52:7e:
         1c:a7:a8:75:aa:de:c3:b5:50:2f:e8:f1:89:0d:64:93:0e:95:
         76:1d:e6:74:38:58:ac:ae:2a:35:e5:72:5a:2b:61:2d:d0:23:
         c3:17:16:f4:c8:ff:38:e1:da:8b:79:6d:35:8e:5a:29:9d:23:
         25:5e:b3:d2:0f:96:5e:40:3f:59:ef:c6:a2:89:b0:83:26:d6:
         44:55:1d:d3:63:78:72:b2:84:de:8b:b2:c2:30:b8:e4:67:97:
         ca:7a:99:f9:d3:c9:e0:1b:db:de:97:b0:a1:fe:ca:f7:d9:28:
         fb:f5:d1:21:2a:92:16:07:45:90:db:e2:92:ff:45:91:21:ac:
         a3:ea:26:9f:14:35:1a:84:19:76:f4:5a:94:5b:cb:7e:7c:54:
         c6:29:39:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKqEdyZrmhJranHUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDcyNDEyMDAwMFoXDTIzMTAyNDA0MDAwMFowLzEtMCsGA1UEAxMk
OTVkZjc0Y2UtNjE0YS00ZTVhLTg3YzktM2JiOTE5ODBkNjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+UzcX2zbI9ayx8/6l8XrQwtyK3fwI0HHyuw
pdFU+78JAyyWOyDmIAoSjm0RaDkRwcxRtD5ovXRsgVtHMrhL4UKxED/XHviXCGXK
e7NnyjSA2TIZVqu+ADJmey2vNEdtaIKJomcVW0q9LE5DPs99TIHp6RM+er6v/9ek
BaQnE5RKdQUUmV2+UpUqaeIIjGnggyKpESoYfAem+yx2BBuCNdbhRlCAN+VacjmQ
MHiiwJFEQZhWWNQfILt2TEpnsKvyZ6/xI15xIfUAUKhPoF4oVWpMdkOXQQOzxfNs
WqwyVoJmZawSD1U+x2y/mkrAb8+r5OnbN7kz9aapHMgx7BNEJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA/+ziorSatZaTxJ5u54Q9qqyirRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMTNlYTMzNjEtN2YwNi0z
ZTMwLTkwMGUtNDMzZGMzZWE2ZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjqM4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACH8G9d7yTHxYp87g2CvVVs806d3QD0Bvv17+avhjoEkwj7HsWk6AYnj
Ao6gf4iXeN1Wi3MZGY9SoHPCNLrTBCPfupqZhpYyzTYm0ZK7ZmNKLwRWWpNRT3Qc
WiQrECX2UFzzkhW/fTeaXi5SfhynqHWq3sO1UC/o8YkNZJMOlXYd5nQ4WKyuKjXl
clorYS3QI8MXFvTI/zjh2ot5bTWOWimdIyVes9IPll5AP1nvxqKJsIMm1kRVHdNj
eHKyhN6LssIwuORnl8p6mfnTyeAb296XsKH+yvfZKPv10SEqkhYHRZDb4pL/RZEh
rKPqJp8UNRqEGXb0WpRby358VMYpOSU=
-----END CERTIFICATE-----