Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d750e86-bc10-3463-a9b6-65e3081ea23b.roa
File:                     3d750e86-bc10-3463-a9b6-65e3081ea23b.roa (raw, json)
Hash identifier:          fhKHknXok6bVJCkSZvcy5jhR9IHZ2P8XsO4AEciZJGE=
Subject key identifier:   C6:C5:36:9A:F4:FD:CA:FD:5D:B6:97:DC:BB:95:79:AE:6A:DB:60:76
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285844931376DDD207F3309727BB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d750e86-bc10-3463-a9b6-65e3081ea23b.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        64.229.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:13:76:dd:d2:07:f3:30:97:27:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=0080706b-e8ff-48bc-ae30-77c230ddbf2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:cf:6a:00:a1:da:05:91:41:a5:1b:cd:9d:
                    68:5f:cf:ff:f0:01:7b:b0:14:89:3b:49:c9:0a:eb:
                    3e:11:dc:22:77:2e:f5:b0:ea:4f:81:17:c4:38:26:
                    b5:e5:f2:f2:10:19:26:af:b0:46:88:20:a6:ca:d6:
                    9a:dc:bf:47:89:41:98:df:4e:ba:fd:28:b3:02:3a:
                    d0:0b:7a:72:a9:8b:fa:47:f7:9b:33:d7:6f:c4:c8:
                    76:91:e7:d3:52:4b:25:9d:09:2c:77:a0:6d:d1:8c:
                    c5:52:a3:4e:ef:4f:52:e0:3c:ec:1d:d2:de:95:40:
                    83:b4:ab:23:8d:5d:6e:a8:77:a2:4c:6a:4a:a1:0f:
                    e2:7f:3f:23:16:70:1e:17:ce:47:34:a9:1c:c9:77:
                    a1:41:79:b1:b5:97:b8:b0:2b:c4:5b:9d:38:c9:e8:
                    7b:11:c5:c6:2d:d4:34:5a:c2:17:9e:68:47:d7:2c:
                    30:c7:54:f9:b9:aa:3e:c8:97:12:1e:87:20:1f:11:
                    39:3c:c9:25:02:71:7c:7f:f2:63:da:ec:32:da:3f:
                    db:64:f7:55:62:67:4a:64:11:2a:34:da:5e:b0:82:
                    7c:1b:8d:06:ae:bc:23:55:b6:ee:33:3f:ae:8b:af:
                    79:26:f3:0b:70:ab:86:c9:f3:81:53:1f:85:93:ce:
                    0c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C5:36:9A:F4:FD:CA:FD:5D:B6:97:DC:BB:95:79:AE:6A:DB:60:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d750e86-bc10-3463-a9b6-65e3081ea23b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.229.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b9:32:df:a2:61:33:24:0e:c8:80:72:b9:0d:07:ff:f9:d1:
         82:c6:0a:ec:e4:03:7e:eb:b5:1f:83:31:9a:31:ef:10:6b:a9:
         55:b1:28:b1:7a:d3:a4:95:8d:ad:38:dc:60:fc:00:eb:f7:dd:
         f9:8c:88:90:8d:83:52:c9:24:d7:cf:08:a4:80:f4:85:f2:2d:
         9f:75:ed:6c:3e:f3:d5:9c:a3:9b:0a:13:2f:af:fc:43:33:e0:
         5a:e3:e7:96:25:e9:57:cb:5c:e9:68:4e:53:09:0d:0e:e8:80:
         1d:46:73:ea:97:96:75:6e:da:92:69:27:89:e1:69:41:4c:66:
         43:f2:fa:ca:f9:50:91:00:ea:80:6e:7c:ef:e1:51:b4:70:2e:
         d5:b8:8b:47:7f:86:1b:25:6c:4c:83:ad:dd:83:82:5c:5b:3d:
         e7:20:23:34:32:a4:49:32:3f:2f:89:00:d5:f9:cf:5a:da:2c:
         66:35:f4:ff:1a:d3:03:5b:01:1f:8c:af:de:57:b8:a4:08:76:
         5a:94:b2:a1:51:0d:fb:bd:8b:c2:e4:12:5d:45:e6:46:6b:3a:
         79:05:81:8a:0e:cf:1d:65:50:a5:f5:32:df:42:98:e2:83:5c:
         f0:5e:89:e2:c9:99:d9:ee:6a:1f:6d:60:65:55:74:7b:8a:89:
         1f:7e:56:e5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWESTE3bd0gfzMJcnuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MDA4MDcwNmItZThmZi00OGJjLWFlMzAtNzdjMjMwZGRiZjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqirPagCh2gWRQaUbzZ1oX8//8AF7sBSJO0nJ
Cus+Edwidy71sOpPgRfEOCa15fLyEBkmr7BGiCCmytaa3L9HiUGY3066/SizAjrQ
C3pyqYv6R/ebM9dvxMh2kefTUkslnQksd6Bt0YzFUqNO709S4DzsHdLelUCDtKsj
jV1uqHeiTGpKoQ/ifz8jFnAeF85HNKkcyXehQXmxtZe4sCvEW504yeh7EcXGLdQ0
WsIXnmhH1ywwx1T5uao+yJcSHocgHxE5PMklAnF8f/Jj2uwy2j/bZPdVYmdKZBEq
NNpesIJ8G40GrrwjVbbuMz+ui695JvMLcKuGyfOBUx+Fk84MqwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMbFNpr0/cr9XbaX3LuVea5q22B2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvM2Q3NTBlODYtYmMxMC0z
NDYzLWE5YjYtNjVlMzA4MWVhMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQOUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGbky36JhMyQOyIByuQ0H//nRgsYK7OQDfuu1H4MxmjHvEGupVbEosXrT
pJWNrTjcYPwA6/fd+YyIkI2DUskk188IpID0hfItn3XtbD7z1ZyjmwoTL6/8QzPg
WuPnliXpV8tc6WhOUwkNDuiAHUZz6peWdW7akmknieFpQUxmQ/L6yvlQkQDqgG58
7+FRtHAu1biLR3+GGyVsTIOt3YOCXFs95yAjNDKkSTI/L4kA1fnPWtosZjX0/xrT
A1sBH4yv3le4pAh2WpSyoVEN+72LwuQSXUXmRms6eQWBig7PHWVQpfUy30KY4oNc
8F6J4smZ2e5qH21gZVV0e4qJH35W5Q==
-----END CERTIFICATE-----