Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a20b086b-6824-35d4-a2a6-ea6a59c83bdb.roa
File:                     a20b086b-6824-35d4-a2a6-ea6a59c83bdb.roa (raw, json)
Hash identifier:          rhBqvj80B9TakbE8qJvMu0DMF9NGlSpugFfrdTvdElk=
Subject key identifier:   CC:35:18:73:F4:13:5D:30:2D:6A:4A:FF:F9:8C:98:43:3E:3E:4C:C9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493162D371C1982192BDD2400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a20b086b-6824-35d4-a2a6-ea6a59c83bdb.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     30336
IP address blocks:        207.236.252.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:2d:37:1c:19:82:19:2b:dd:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=089ecd44-9fbe-4b0d-b1d0-79bddaffd900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:46:28:26:25:63:cc:80:10:2c:44:1e:5f:cd:
                    ea:13:c2:c8:c8:7b:d2:dc:8f:ae:0c:54:d4:50:f7:
                    47:97:ed:98:d1:ae:36:9e:e0:4d:d2:69:e6:a2:13:
                    b9:2e:8b:d2:55:50:2d:9e:3e:dd:81:e4:3a:98:f1:
                    82:5a:69:53:a1:28:1c:44:ec:d9:d5:6f:fe:f5:a8:
                    1a:83:04:34:2e:86:e6:e3:21:42:3b:af:f9:5b:c0:
                    d6:bc:ce:62:63:d9:6f:46:e5:7e:93:47:8f:6c:aa:
                    31:d1:31:fa:d5:b5:e0:ca:5a:f3:45:58:3d:72:c2:
                    a7:32:ee:bc:33:ad:70:6f:b1:d6:5b:8a:6b:ea:16:
                    78:be:f1:de:42:17:14:20:d2:65:c7:4d:4b:b0:c0:
                    7a:b0:df:ce:6e:8f:81:c2:38:2c:19:d8:64:33:0b:
                    d0:c2:bb:ed:03:70:b0:86:b9:fc:a0:88:02:07:2e:
                    f9:c7:09:bc:a1:96:6a:16:4f:02:3a:47:14:b1:b6:
                    4c:ef:ca:d4:45:74:1e:8d:d3:21:17:9d:5a:e0:2d:
                    5e:8e:13:78:46:c2:df:a8:e0:e0:0e:24:90:b2:aa:
                    ae:46:aa:87:3d:2d:e9:d6:72:22:41:73:f6:ab:8e:
                    97:b5:2c:51:6f:39:d7:31:19:fc:40:52:e9:c2:e3:
                    60:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:35:18:73:F4:13:5D:30:2D:6A:4A:FF:F9:8C:98:43:3E:3E:4C:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a20b086b-6824-35d4-a2a6-ea6a59c83bdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2e:8a:9f:d1:1a:0d:93:88:c7:d3:42:dc:61:ef:f0:76:bf:
         25:7b:57:be:42:79:67:4a:0f:ca:38:6f:cd:c7:b2:8c:c9:ac:
         e0:b9:1a:ee:44:e1:39:04:03:62:fb:7a:d4:45:56:48:42:11:
         a7:9f:fb:fd:e9:a7:70:a7:dc:a1:0a:d4:85:6e:2d:b4:02:ba:
         37:ae:2a:41:6a:16:59:93:0d:6f:fd:cb:fa:37:21:a2:e2:ed:
         f5:36:c2:75:af:3f:40:54:c3:09:d6:8d:98:96:cf:fe:35:f6:
         5b:e3:92:b8:aa:ff:30:c3:5c:be:2a:a6:ad:04:fb:f6:b3:bc:
         18:e7:9c:09:48:43:39:79:94:9e:05:a3:08:15:32:2d:54:45:
         34:7b:e7:b2:c8:5c:6a:d5:43:a9:2b:87:e5:26:c4:ea:e4:6a:
         5c:1b:80:72:fd:31:0a:da:06:58:78:b4:11:84:b2:15:65:37:
         af:8b:fa:b8:6a:55:4d:f2:29:c3:7d:f6:51:b9:38:e8:3d:af:
         50:83:17:5e:d5:ca:2f:08:ca:a4:b4:74:f6:4c:e1:cb:6f:5a:
         eb:ad:5d:59:9d:2f:67:d1:c3:c3:44:86:3c:0e:23:95:3f:8d:
         58:b0:ef:67:8d:0b:ac:64:bd:c0:b3:6c:a9:e2:7d:38:51:41:
         35:46:b0:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFi03HBmCGSvdJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MDg5ZWNkNDQtOWZiZS00YjBkLWIxZDAtNzliZGRhZmZkOTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60YoJiVjzIAQLEQeX83qE8LIyHvS3I+uDFTU
UPdHl+2Y0a42nuBN0mnmohO5LovSVVAtnj7dgeQ6mPGCWmlToSgcROzZ1W/+9aga
gwQ0Lobm4yFCO6/5W8DWvM5iY9lvRuV+k0ePbKox0TH61bXgylrzRVg9csKnMu68
M61wb7HWW4pr6hZ4vvHeQhcUINJlx01LsMB6sN/Obo+BwjgsGdhkMwvQwrvtA3Cw
hrn8oIgCBy75xwm8oZZqFk8COkcUsbZM78rURXQejdMhF51a4C1ejhN4RsLfqODg
DiSQsqquRqqHPS3p1nIiQXP2q46XtSxRbznXMRn8QFLpwuNgtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMw1GHP0E10wLWpK//mMmEM+PkzJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTIwYjA4NmItNjgyNC0z
NWQ0LWEyYTYtZWE2YTU5YzgzYmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+z8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFIuip/RGg2TiMfTQtxh7/B2vyV7V75CeWdKD8o4b83HsozJrOC5Gu5E
4TkEA2L7etRFVkhCEaef+/3pp3Cn3KEK1IVuLbQCujeuKkFqFlmTDW/9y/o3IaLi
7fU2wnWvP0BUwwnWjZiWz/419lvjkriq/zDDXL4qpq0E+/azvBjnnAlIQzl5lJ4F
owgVMi1URTR757LIXGrVQ6krh+UmxOrkalwbgHL9MQraBlh4tBGEshVlN6+L+rhq
VU3yKcN99lG5OOg9r1CDF17Vyi8IyqS0dPZM4ctvWuutXVmdL2fRw8NEhjwOI5U/
jViw72eNC6xkvcCzbKnifThRQTVGsPY=
-----END CERTIFICATE-----