Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6eb8eb53-ac6e-3f62-8e64-f23abe6fa722.roa
File:                     6eb8eb53-ac6e-3f62-8e64-f23abe6fa722.roa (raw, json)
Hash identifier:          IIJwpxKmZ/C9qGkb6gcp6yVXc9K11alWfJVT71oNzSs=
Subject key identifier:   2B:23:13:B1:B0:28:BC:13:82:26:65:B2:6B:12:B7:85:7E:4F:72:5B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF7515AF8F98C1DB820AD080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6eb8eb53-ac6e-3f62-8e64-f23abe6fa722.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        70.49.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:15:af:8f:98:c1:db:82:0a:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=dbbf8a30-5918-40eb-9e0a-50c9d01fa7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:08:4a:5c:5e:96:54:47:79:a7:db:3d:5d:22:
                    15:cd:fe:83:d9:4d:f1:63:64:33:61:81:c9:1a:96:
                    fa:b3:8e:0d:95:ac:27:39:46:ff:66:da:8c:b1:43:
                    c6:40:d6:2a:a6:1e:e5:ca:0b:29:b2:fc:97:b5:bd:
                    dc:6c:b9:4f:99:b7:9f:15:80:5b:95:6c:15:73:51:
                    4d:f5:63:a6:38:39:6e:08:29:d8:82:63:2a:3d:fa:
                    3b:f3:6f:64:80:c1:6a:bd:74:ad:b8:8d:a6:bd:25:
                    a1:81:66:95:14:8b:26:94:42:c9:5f:d7:28:42:46:
                    13:3e:ba:18:d3:ba:40:0e:ca:6b:62:e5:a9:99:0d:
                    01:f9:b7:2b:3f:59:df:b7:b5:af:23:ac:44:0e:3f:
                    b9:7f:fe:58:04:f1:83:70:bb:7c:89:7a:6e:7d:f7:
                    db:a9:33:f7:d0:3c:d7:3c:7c:85:2b:03:5e:73:3b:
                    fe:eb:e4:d7:51:26:34:84:b0:e7:f1:bf:2c:52:87:
                    87:7e:84:52:d5:05:65:7f:2b:47:10:37:90:2d:88:
                    dc:d1:7e:34:0a:d7:61:87:d2:a9:03:35:56:a8:de:
                    ef:fd:e1:80:07:99:ee:c5:41:3c:11:c4:0f:ed:b6:
                    7f:96:6a:26:4f:3f:e5:02:1d:78:7a:08:0a:30:64:
                    4c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:23:13:B1:B0:28:BC:13:82:26:65:B2:6B:12:B7:85:7E:4F:72:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6eb8eb53-ac6e-3f62-8e64-f23abe6fa722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d2:9a:31:5e:3b:56:4d:b6:0b:ba:4c:ab:bd:f8:9c:39:9c:
         1a:ab:1a:67:9e:31:79:f3:1c:f9:6b:b8:cd:9c:ed:71:33:c1:
         bf:d8:5e:12:9b:c6:93:f7:cb:3c:86:03:18:22:04:e1:7b:12:
         38:27:af:e4:c5:b6:d4:0d:bf:df:d4:d3:73:21:0d:02:92:cb:
         39:82:da:de:07:3e:d7:69:3a:80:57:50:55:33:bf:e9:e5:19:
         b5:d3:fd:45:b3:b5:4a:02:8a:e9:56:13:7f:7b:d2:b7:97:c0:
         c0:01:65:dc:88:72:54:e2:92:8b:71:9b:bf:ab:5e:d9:ee:ce:
         93:55:13:96:49:d5:42:c6:29:17:5d:21:0f:9f:5f:c9:df:07:
         97:ef:80:c2:94:dc:61:88:b8:85:a9:53:57:dc:ec:2f:d2:42:
         9c:94:cc:26:73:47:03:bf:03:be:11:62:f0:07:ac:74:85:35:
         18:92:44:63:45:54:10:d8:9e:bb:81:7b:fe:43:1b:b6:16:55:
         56:c0:2b:54:0d:ec:09:76:59:f4:00:9f:35:b5:48:33:4a:79:
         ab:7d:64:11:3d:2a:d7:d6:a9:bd:8c:14:71:9a:d0:a4:3d:95:
         df:2c:0a:76:f9:73:63:d1:5b:29:da:aa:8a:f4:f4:69:8e:55:
         c8:2d:45:e1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEGvdRWvj5jB24IK0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDQyNTEyMDAwMFoXDTIzMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZGJiZjhhMzAtNTkxOC00MGViLTllMGEtNTBjOWQwMWZhN2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ghKXF6WVEd5p9s9XSIVzf6D2U3xY2QzYYHJ
Gpb6s44NlawnOUb/ZtqMsUPGQNYqph7lygspsvyXtb3cbLlPmbefFYBblWwVc1FN
9WOmODluCCnYgmMqPfo7829kgMFqvXStuI2mvSWhgWaVFIsmlELJX9coQkYTProY
07pADsprYuWpmQ0B+bcrP1nft7WvI6xEDj+5f/5YBPGDcLt8iXpufffbqTP30DzX
PHyFKwNeczv+6+TXUSY0hLDn8b8sUoeHfoRS1QVlfytHEDeQLYjc0X40Ctdhh9Kp
AzVWqN7v/eGAB5nuxUE8EcQP7bZ/lmomTz/lAh14eggKMGRMbQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCsjE7GwKLwTgiZlsmsSt4V+T3JbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNmViOGViNTMtYWM2ZS0z
ZjYyLThlNjQtZjIzYWJlNmZhNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARjEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAW9KaMV47Vk22C7pMq734nDmcGqsaZ54xefMc+Wu4zZztcTPBv9heEpvG
k/fLPIYDGCIE4XsSOCev5MW21A2/39TTcyENApLLOYLa3gc+12k6gFdQVTO/6eUZ
tdP9RbO1SgKK6VYTf3vSt5fAwAFl3IhyVOKSi3Gbv6te2e7Ok1UTlknVQsYpF10h
D59fyd8Hl++AwpTcYYi4halTV9zsL9JCnJTMJnNHA78DvhFi8AesdIU1GJJEY0VU
ENieu4F7/kMbthZVVsArVA3sCXZZ9ACfNbVIM0p5q31kET0q19apvYwUcZrQpD2V
3ywKdvlzY9FbKdqqivT0aY5VyC1F4Q==
-----END CERTIFICATE-----