Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a4a8c778-7578-344f-8b1e-2f53038e80ba.roa
File:                     a4a8c778-7578-344f-8b1e-2f53038e80ba.roa (raw, json)
Hash identifier:          +rrZm/eHq2ZGPf3P1v8q10SSVDlwWTu1Beoyl54SwqE=
Subject key identifier:   FE:9A:AC:24:EF:7A:38:C7:97:FF:E8:52:9C:93:8D:29:D0:3A:F5:CD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE475B6D9B93213E5AD2400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a4a8c778-7578-344f-8b1e-2f53038e80ba.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        76.66.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:75:b6:d9:b9:32:13:e5:ad:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=273a2207-84d2-4cd7-a306-81f38fbba986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0e:7e:8b:86:33:32:18:dd:a1:d7:0e:cb:49:
                    fe:1b:5c:c0:e2:7a:69:ef:69:3f:b5:23:24:60:f9:
                    8d:87:60:9b:16:a3:ba:42:02:77:d0:4c:93:20:76:
                    d9:e6:a4:e2:aa:8e:9f:62:8e:c7:15:1a:d5:62:0e:
                    a3:b7:2c:fd:36:ab:29:40:f2:c4:52:ed:de:fc:e9:
                    42:04:14:be:a3:2e:ea:e3:53:1f:d5:fa:3d:1b:98:
                    bf:8e:9b:cb:83:3b:8e:ca:f8:51:1d:7e:fe:7a:84:
                    84:ce:4c:c7:39:35:75:4f:48:f5:cd:59:cf:99:be:
                    a3:dd:70:6c:a3:1a:97:e2:26:a2:28:5a:36:70:9c:
                    62:af:4b:ce:8a:e5:5f:c5:e3:87:1c:66:55:45:bf:
                    c1:13:ef:65:7f:d6:a2:55:4c:a3:fd:b9:fb:4d:70:
                    95:18:4e:78:58:05:bd:1a:30:b8:3b:df:e3:7f:45:
                    e9:f5:82:74:dc:0e:3a:cd:24:4b:cf:ab:d5:81:78:
                    a4:5d:d3:e5:36:c7:6c:2d:2d:00:74:48:cb:0b:3e:
                    83:dc:4d:1d:9b:a2:ff:3d:57:cf:18:09:b1:cb:78:
                    44:da:d4:de:0a:e3:f1:ce:74:af:3d:65:04:4b:a8:
                    15:cc:0d:2a:e4:2a:9e:a4:b8:88:3d:d4:a6:83:2b:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9A:AC:24:EF:7A:38:C7:97:FF:E8:52:9C:93:8D:29:D0:3A:F5:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a4a8c778-7578-344f-8b1e-2f53038e80ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:72:56:2c:64:51:b1:d3:8c:cf:a6:12:42:7d:42:1a:a5:e8:
         a5:7d:72:cc:ba:8a:05:e4:16:80:24:8e:c5:48:39:8b:2d:cf:
         4a:6f:ea:6b:8c:db:04:42:38:ac:96:ba:94:15:1d:56:e2:99:
         30:40:37:1f:ea:a4:96:01:b1:8b:f7:73:29:4b:05:94:ab:30:
         6d:1c:83:b1:fe:6a:f4:a9:53:65:15:4f:86:45:a4:0a:77:4f:
         c6:2b:98:bb:dc:93:f0:df:81:5c:b8:94:d9:76:36:43:c2:df:
         3e:fd:54:84:e5:1e:7a:82:a0:c2:33:44:d7:b4:ae:bc:11:aa:
         69:e4:02:74:c7:53:cc:5c:be:18:f0:ce:70:07:83:95:3d:3c:
         10:50:1c:7b:fd:8a:11:f8:06:b9:49:91:d2:43:73:55:89:3a:
         9c:55:1d:57:f1:c6:22:59:ff:fd:19:b7:b3:d3:1f:bb:85:68:
         11:e3:e4:af:94:70:81:29:2b:7c:a6:17:89:e4:a5:05:4d:f1:
         a7:ba:f1:76:da:58:f7:89:d0:cd:d3:5d:4e:f1:a6:c9:2b:6f:
         36:45:0d:68:c4:86:d9:ff:ea:3b:1a:9d:db:d4:96:d8:da:52:
         a7:03:de:ec:fc:13:d0:90:49:f7:87:f7:7c:b2:b6:51:cd:c3:
         28:13:10:71
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEOa5HW22bkyE+WtJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
MjczYTIyMDctODRkMi00Y2Q3LWEzMDYtODFmMzhmYmJhOTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA5+i4YzMhjdodcOy0n+G1zA4npp72k/tSMk
YPmNh2CbFqO6QgJ30EyTIHbZ5qTiqo6fYo7HFRrVYg6jtyz9NqspQPLEUu3e/OlC
BBS+oy7q41Mf1fo9G5i/jpvLgzuOyvhRHX7+eoSEzkzHOTV1T0j1zVnPmb6j3XBs
oxqX4iaiKFo2cJxir0vOiuVfxeOHHGZVRb/BE+9lf9aiVUyj/bn7TXCVGE54WAW9
GjC4O9/jf0Xp9YJ03A46zSRLz6vVgXikXdPlNsdsLS0AdEjLCz6D3E0dm6L/PVfP
GAmxy3hE2tTeCuPxznSvPWUES6gVzA0q5CqepLiIPdSmgyumHQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP6arCTvejjHl//oUpyTjSnQOvXNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTRhOGM3NzgtNzU3OC0z
NDRmLThiMWUtMmY1MzAzOGU4MGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMATEIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVXJWLGRRsdOMz6YSQn1CGqXopX1yzLqKBeQWgCSOxUg5iy3PSm/qa4zb
BEI4rJa6lBUdVuKZMEA3H+qklgGxi/dzKUsFlKswbRyDsf5q9KlTZRVPhkWkCndP
xiuYu9yT8N+BXLiU2XY2Q8LfPv1UhOUeeoKgwjNE17SuvBGqaeQCdMdTzFy+GPDO
cAeDlT08EFAce/2KEfgGuUmR0kNzVYk6nFUdV/HGIln//Rm3s9Mfu4VoEePkr5Rw
gSkrfKYXieSlBU3xp7rxdtpY94nQzdNdTvGmyStvNkUNaMSG2f/qOxqd29SW2NpS
pwPe7PwT0JBJ94f3fLK2Uc3DKBMQcQ==
-----END CERTIFICATE-----