Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a3a3323e-d2e6-3831-8b40-95336642be9d.roa
File:                     a3a3323e-d2e6-3831-8b40-95336642be9d.roa (raw, json)
Hash identifier:          +SlKOncmdpl3GVq2L+P26Nspqe1EQavxf3l36/KvKHs=
Subject key identifier:   57:D8:B7:D6:16:61:68:55:B7:C3:DB:E8:13:9A:D2:37:88:2D:15:04
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE51C5F5058C61EE69A9580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a3a3323e-d2e6-3831-8b40-95336642be9d.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        184.151.3.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:1c:5f:50:58:c6:1e:e6:9a:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=1d394afe-979f-493b-b4b0-b54f4049486a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:82:21:fc:58:25:a1:91:63:91:a1:6a:2a:12:
                    da:d4:44:02:90:75:82:04:df:38:25:ee:74:30:56:
                    e1:3e:c3:bc:1f:ac:0d:79:91:bc:bb:8f:8e:d1:c9:
                    d8:d7:bc:1c:67:97:7a:b1:9c:8f:24:c4:42:9c:00:
                    90:eb:77:69:e5:b3:72:ff:96:28:41:81:45:9d:62:
                    38:38:cd:a3:f9:2b:88:a8:e8:94:53:a4:08:1c:06:
                    81:d9:73:45:6e:19:ec:97:19:56:b2:a4:8f:41:5e:
                    91:f4:64:44:73:26:c4:03:dc:bf:6e:b2:ec:a5:b7:
                    1b:7f:69:46:9f:a4:6c:17:47:e2:2d:79:c2:69:19:
                    36:4c:fc:e0:c3:5b:77:ba:5a:b2:83:de:6a:68:ee:
                    b2:60:be:1c:9e:d5:0b:7d:04:b8:de:4a:1b:0e:96:
                    09:68:c8:27:db:aa:91:b1:f9:59:2c:58:33:f0:cc:
                    38:59:5d:a1:f5:cc:d2:af:fb:ed:47:d0:24:64:1a:
                    8e:4a:18:be:3d:17:b0:7e:50:6c:c9:ec:51:02:3a:
                    10:89:6d:db:ed:b2:39:21:41:35:78:8f:a1:20:17:
                    17:79:79:e0:10:a1:39:14:c2:1f:b1:96:ef:3b:ab:
                    a9:44:8f:cd:34:84:5f:ee:27:2f:bf:df:57:13:cd:
                    9d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D8:B7:D6:16:61:68:55:B7:C3:DB:E8:13:9A:D2:37:88:2D:15:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a3a3323e-d2e6-3831-8b40-95336642be9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:9b:92:1c:54:f0:1c:b6:d1:02:f7:cd:15:86:e5:41:05:fa:
         a9:bf:02:47:62:7c:59:e1:e3:15:20:f5:9b:65:57:f9:7b:3a:
         5e:93:f9:ad:ca:53:ae:fd:bb:22:48:ea:54:20:78:ac:64:40:
         55:df:3f:59:6f:07:24:e7:b4:1e:17:1d:27:3f:57:a7:e3:98:
         f6:26:e3:14:39:f6:48:55:07:70:f7:d7:62:43:d0:79:48:57:
         30:0a:b7:f8:2b:8f:f1:27:2d:68:c0:97:1c:9b:41:4c:03:b4:
         3d:6f:d7:1d:cd:00:29:e1:b1:07:61:d0:2e:38:71:d8:d9:0f:
         8b:4a:25:81:81:12:09:f3:64:54:e1:55:4a:fc:ee:63:72:84:
         ef:b9:fb:ab:b9:ad:3a:a4:86:3b:87:9f:d5:68:0a:43:18:4c:
         aa:c9:6d:eb:bb:46:2b:9f:e7:f7:8b:cf:b1:58:fb:67:9f:a6:
         35:6a:40:c6:ea:45:6c:77:38:e2:d6:ff:a9:fa:6d:9c:35:53:
         30:4d:51:df:15:f3:62:ba:8f:2d:7d:fe:91:2f:bc:16:bb:78:
         12:cd:f9:e0:12:cf:38:fd:4c:02:42:02:c0:ab:64:29:71:e4:
         db:c0:2e:cf:2d:5d:cb:b0:51:99:38:c7:a7:2c:73:ce:ee:9b:
         84:2a:40:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5RxfUFjGHuaalYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
MWQzOTRhZmUtOTc5Zi00OTNiLWI0YjAtYjU0ZjQwNDk0ODZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoIh/FgloZFjkaFqKhLa1EQCkHWCBN84Je50
MFbhPsO8H6wNeZG8u4+O0cnY17wcZ5d6sZyPJMRCnACQ63dp5bNy/5YoQYFFnWI4
OM2j+SuIqOiUU6QIHAaB2XNFbhnslxlWsqSPQV6R9GREcybEA9y/brLspbcbf2lG
n6RsF0fiLXnCaRk2TPzgw1t3ulqyg95qaO6yYL4cntULfQS43kobDpYJaMgn26qR
sflZLFgz8Mw4WV2h9czSr/vtR9AkZBqOShi+PRewflBsyexRAjoQiW3b7bI5IUE1
eI+hIBcXeXngEKE5FMIfsZbvO6upRI/NNIRf7icvv99XE82dHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFfYt9YWYWhVt8Pb6BOa0jeILRUEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTNhMzMyM2UtZDJlNi0z
ODMxLThiNDAtOTUzMzY2NDJiZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuJcDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABubkhxU8By20QL3zRWG5UEF+qm/AkdifFnh4xUg9ZtlV/l7Ol6T+a3K
U679uyJI6lQgeKxkQFXfP1lvByTntB4XHSc/V6fjmPYm4xQ59khVB3D312JD0HlI
VzAKt/grj/EnLWjAlxybQUwDtD1v1x3NACnhsQdh0C44cdjZD4tKJYGBEgnzZFTh
VUr87mNyhO+5+6u5rTqkhjuHn9VoCkMYTKrJbeu7Riuf5/eLz7FY+2efpjVqQMbq
RWx3OOLW/6n6bZw1UzBNUd8V82K6jy19/pEvvBa7eBLN+eASzzj9TAJCAsCrZClx
5NvALs8tXcuwUZk4x6csc87um4QqQF8=
-----END CERTIFICATE-----