Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6e3273ca-5f65-35eb-ae49-8e1aa46a504d.roa
File:                     6e3273ca-5f65-35eb-ae49-8e1aa46a504d.roa (raw, json)
Hash identifier:          zwuW0pY6rfgUf6JkrLepoNln/J6ljFhYp6kRUm0wY9c=
Subject key identifier:   40:C4:D9:D1:6A:B2:17:63:C8:60:28:89:32:98:F7:23:D9:3C:98:51
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE4E10BD066CBDD56FE2B00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6e3273ca-5f65-35eb-ae49-8e1aa46a504d.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        174.90.220.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:e1:0b:d0:66:cb:dd:56:fe:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=ede96d7d-f4d3-4aeb-a7c5-3981879ff04f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:43:00:e4:07:26:44:5e:ea:30:2e:2b:38:54:
                    4a:b9:5b:d3:40:9e:e1:7b:f5:5c:4f:24:5d:4f:fa:
                    ab:c5:ea:9c:4d:ac:44:17:b8:43:29:77:3d:90:e6:
                    f7:dd:18:b2:70:8c:08:8d:f4:b2:37:1a:c7:c2:4b:
                    bf:dd:bc:6d:ab:c8:24:e3:e3:e4:c3:73:31:62:6a:
                    d4:e2:a6:b5:8f:79:b5:f7:0a:b4:d6:ed:1e:67:db:
                    29:5e:86:7f:f6:9c:29:f8:e2:1f:81:98:ab:b8:3e:
                    1c:5d:16:2b:a5:64:fb:a6:83:0d:8b:86:0d:e0:14:
                    48:70:7d:80:fe:68:97:8a:81:19:57:31:79:bc:9d:
                    85:5f:c8:d1:d9:4c:47:52:17:e0:13:93:82:0b:f4:
                    0c:9e:b0:50:78:aa:14:b9:f1:ce:56:6a:8a:90:4e:
                    3b:78:ae:99:cd:c0:d0:4c:f6:9a:ab:92:27:e0:9f:
                    60:3a:0e:64:df:f4:57:86:21:ff:8c:72:0b:6a:26:
                    d3:d1:a4:fb:de:f4:39:b5:1e:c3:7b:05:66:87:7a:
                    34:c8:4c:48:9f:f2:80:62:e3:59:38:3f:66:6e:83:
                    f5:72:1b:0a:d1:ec:91:7d:e3:85:9d:55:b7:c7:56:
                    d6:3e:f1:5c:cb:40:e1:9c:c2:59:87:8d:16:ca:69:
                    b5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C4:D9:D1:6A:B2:17:63:C8:60:28:89:32:98:F7:23:D9:3C:98:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6e3273ca-5f65-35eb-ae49-8e1aa46a504d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.90.220.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:2b:b2:62:24:cc:cd:18:3e:99:91:d2:fc:2e:7a:93:34:bf:
         22:81:77:d5:59:ac:0b:01:e0:83:cb:76:9d:3a:d6:e8:44:1d:
         e9:04:dd:f4:7c:b4:c6:55:62:ef:86:8e:05:78:93:6d:50:9a:
         9d:bf:03:48:d7:ab:ae:c2:bc:11:72:25:96:e9:54:eb:a9:d8:
         20:34:63:61:22:ef:f7:38:b7:13:30:60:cb:f3:7b:d2:0c:b7:
         41:e7:57:5a:b8:a7:d2:96:3d:6f:7f:07:79:4c:81:f4:2f:06:
         c6:75:9d:cd:74:2d:0a:f6:46:90:d9:65:6f:ad:4e:97:95:8d:
         d8:ba:90:e5:f7:a1:21:48:63:af:8c:98:69:c2:19:ae:89:2b:
         62:1e:a5:4d:3d:42:94:1f:e2:f5:b1:bf:33:ca:41:d3:ec:91:
         61:d3:a6:ff:ba:c1:59:76:84:46:a0:3f:47:c8:79:96:b2:f1:
         dd:4b:2a:d2:29:c9:bd:ba:fd:f2:c2:5a:73:15:1c:76:44:7a:
         68:6e:d0:67:32:11:ec:84:e8:7d:4b:eb:c4:a3:82:a1:79:e3:
         e9:ab:5a:39:b6:09:fb:0e:dd:20:3f:4f:6d:91:91:08:fe:dd:
         2e:c3:3a:69:9c:60:1d:4a:ed:d7:bc:5c:b1:3c:c8:4a:5d:d2:
         17:3b:20:c0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEOa5OEL0GbL3Vb+KwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
ZWRlOTZkN2QtZjRkMy00YWViLWE3YzUtMzk4MTg3OWZmMDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUMA5AcmRF7qMC4rOFRKuVvTQJ7he/VcTyRd
T/qrxeqcTaxEF7hDKXc9kOb33RiycIwIjfSyNxrHwku/3bxtq8gk4+Pkw3MxYmrU
4qa1j3m19wq01u0eZ9spXoZ/9pwp+OIfgZiruD4cXRYrpWT7poMNi4YN4BRIcH2A
/miXioEZVzF5vJ2FX8jR2UxHUhfgE5OCC/QMnrBQeKoUufHOVmqKkE47eK6ZzcDQ
TPaaq5In4J9gOg5k3/RXhiH/jHILaibT0aT73vQ5tR7DewVmh3o0yExIn/KAYuNZ
OD9mboP1chsK0eyRfeOFnVW3x1bWPvFcy0DhnMJZh40Wymm1zwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEDE2dFqshdjyGAoiTKY9yPZPJhRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNmUzMjczY2EtNWY2NS0z
NWViLWFlNDktOGUxYWE0NmE1MDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrlrcgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAaK7JiJMzNGD6ZkdL8LnqTNL8igXfVWawLAeCDy3adOtboRB3pBN30
fLTGVWLvho4FeJNtUJqdvwNI16uuwrwRciWW6VTrqdggNGNhIu/3OLcTMGDL83vS
DLdB51dauKfSlj1vfwd5TIH0LwbGdZ3NdC0K9kaQ2WVvrU6XlY3YupDl96EhSGOv
jJhpwhmuiStiHqVNPUKUH+L1sb8zykHT7JFh06b/usFZdoRGoD9HyHmWsvHdSyrS
Kcm9uv3ywlpzFRx2RHpobtBnMhHshOh9S+vEo4KheePpq1o5tgn7Dt0gP09tkZEI
/t0uwzppnGAdSu3XvFyxPMhKXdIXOyDA
-----END CERTIFICATE-----