Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/61c1eda9-354e-3e34-b871-60d55ab4e8a1.roa
File:                     61c1eda9-354e-3e34-b871-60d55ab4e8a1.roa (raw, json)
Hash identifier:          mUWUZ/QwENxdpJt2tV438TSQ18J99mM74LsyUlxyo6k=
Subject key identifier:   0B:A9:5E:83:40:43:60:9A:2A:B7:92:7F:A0:4F:BA:EF:67:E3:D4:E6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE5818F940B93E131DC1A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/61c1eda9-354e-3e34-b871-60d55ab4e8a1.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     398713
IP address blocks:        207.161.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:81:8f:94:0b:93:e1:31:dc:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=3a58becc-27b8-42b9-84f0-e8e9d2c78bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e5:a7:67:47:02:16:4a:96:f2:5e:92:24:ec:
                    e9:1b:6f:62:03:f0:cf:cb:62:21:e5:39:88:f3:3e:
                    5a:8e:fd:0f:7b:3b:4a:79:3f:46:0d:3e:5d:b8:eb:
                    cb:d8:5a:b7:3e:5d:2f:01:87:09:dd:f0:d9:bd:d4:
                    cd:a5:a1:0d:dd:19:52:21:f4:78:cf:9d:fe:ca:0f:
                    e1:c6:df:7a:ba:31:74:2f:68:0e:1a:54:1e:ab:d2:
                    55:72:10:a2:a2:f1:96:9c:b6:c0:20:98:c4:01:eb:
                    81:e3:d6:9b:b5:e4:6c:be:56:b5:19:93:32:20:aa:
                    83:6d:87:cc:7d:a3:0e:d3:f0:37:96:13:cd:e7:17:
                    22:9f:32:29:1a:13:b5:88:3b:62:b8:b8:42:d1:13:
                    e9:b7:dd:2b:bf:cc:24:de:9d:c5:58:af:e8:62:01:
                    a7:f0:d5:62:7e:18:2e:8f:63:2e:56:d8:1d:17:86:
                    a7:a1:7f:0c:36:82:e4:6f:86:71:12:eb:4f:1f:9a:
                    67:12:43:3a:9f:2f:27:16:4e:09:03:65:18:9d:f2:
                    07:0d:d9:a5:59:44:05:e6:7c:54:15:95:90:b5:c7:
                    0d:41:d8:d4:64:04:b1:31:1f:8a:92:e6:58:a0:c5:
                    d2:e9:e9:05:2d:b3:92:2c:26:38:7a:38:53:93:11:
                    bd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A9:5E:83:40:43:60:9A:2A:B7:92:7F:A0:4F:BA:EF:67:E3:D4:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/61c1eda9-354e-3e34-b871-60d55ab4e8a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.161.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:35:92:47:06:90:da:44:3e:e7:0d:12:cb:b5:d4:24:3e:38:
         74:c2:d0:d9:e9:ee:3e:db:61:0e:4a:a9:7b:9f:01:26:64:9f:
         25:3b:27:b0:ed:78:32:24:9b:ab:99:fd:26:4f:fd:64:d5:7a:
         f9:62:f5:a3:ec:ef:74:42:8d:ed:2c:96:52:13:c8:50:e3:d6:
         e7:0b:3e:5c:b1:76:0b:99:40:bb:0f:56:bd:f3:d1:82:d9:6a:
         bd:c0:35:18:08:a0:df:a6:41:60:f9:16:11:f1:64:79:2d:d2:
         e9:34:18:27:f1:5c:f0:a4:df:1b:a3:c6:fe:c0:6a:98:ee:71:
         a3:a2:b1:7d:45:c7:e5:2b:f8:aa:ff:98:87:7e:0c:b3:4b:27:
         c8:40:af:a6:96:03:f7:63:4a:66:8a:f8:3d:02:36:c1:05:a9:
         50:29:87:28:5a:44:fa:2a:9d:e6:e6:ef:f0:d5:69:72:70:7e:
         7a:67:66:88:fd:4c:53:04:9f:06:2c:3a:2a:ee:d7:36:27:ea:
         4c:ee:20:36:92:dc:e2:1b:ed:cd:43:23:4d:cf:41:e0:60:6a:
         68:f2:9f:3d:f5:99:d8:d8:13:5a:35:5b:fd:71:30:21:09:3f:
         c1:d5:bb:67:b4:42:16:75:92:8b:8e:86:12:a6:c1:21:e1:0a:
         48:bb:6b:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5YGPlAuT4THcGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
M2E1OGJlY2MtMjdiOC00MmI5LTg0ZjAtZThlOWQyYzc4YmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluWnZ0cCFkqW8l6SJOzpG29iA/DPy2Ih5TmI
8z5ajv0PeztKeT9GDT5duOvL2Fq3Pl0vAYcJ3fDZvdTNpaEN3RlSIfR4z53+yg/h
xt96ujF0L2gOGlQeq9JVchCiovGWnLbAIJjEAeuB49abteRsvla1GZMyIKqDbYfM
faMO0/A3lhPN5xcinzIpGhO1iDtiuLhC0RPpt90rv8wk3p3FWK/oYgGn8NVifhgu
j2MuVtgdF4anoX8MNoLkb4ZxEutPH5pnEkM6ny8nFk4JA2UYnfIHDdmlWUQF5nxU
FZWQtccNQdjUZASxMR+KkuZYoMXS6ekFLbOSLCY4ejhTkxG9fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAupXoNAQ2CaKreSf6BPuu9n49TmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNjFjMWVkYTktMzU0ZS0z
ZTM0LWI4NzEtNjBkNTVhYjRlOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6HTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAI1kkcGkNpEPucNEsu11CQ+OHTC0Nnp7j7bYQ5KqXufASZknyU7J7Dt
eDIkm6uZ/SZP/WTVevli9aPs73RCje0sllITyFDj1ucLPlyxdguZQLsPVr3z0YLZ
ar3ANRgIoN+mQWD5FhHxZHkt0uk0GCfxXPCk3xujxv7AapjucaOisX1Fx+Ur+Kr/
mId+DLNLJ8hAr6aWA/djSmaK+D0CNsEFqVAphyhaRPoqnebm7/DVaXJwfnpnZoj9
TFMEnwYsOiru1zYn6kzuIDaS3OIb7c1DI03PQeBgamjynz31mdjYE1o1W/1xMCEJ
P8HVu2e0QhZ1kouOhhKmwSHhCki7a3I=
-----END CERTIFICATE-----