Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6502103-ec30-3582-80b8-bbbeaed42076.roa
File:                     b6502103-ec30-3582-80b8-bbbeaed42076.roa (raw, json)
Hash identifier:          lhbYC5i2qE/ssXnbA8KbKNw73VrweQh3pScw+xGgnZM=
Subject key identifier:   0A:0A:A6:C1:16:3F:88:0C:AE:58:48:8C:43:02:F4:ED:E1:73:F2:44
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA129FB05324063332C95020
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6502103-ec30-3582-80b8-bbbeaed42076.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     10965
IP address blocks:        205.200.125.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:9f:b0:53:24:06:33:32:c9:50:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=d80e71f0-fbaa-4eb5-8004-69eb81c16439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:81:b8:73:4a:ec:e8:53:cd:a0:38:e9:7f:a4:
                    53:91:ce:26:25:8e:4a:ec:bb:3d:d0:d6:31:7c:fd:
                    e9:79:31:92:49:30:15:de:64:96:2d:4f:fd:e4:c2:
                    b2:92:c6:7e:51:d5:02:eb:7a:4e:c7:48:04:61:57:
                    41:51:f1:1b:75:60:1f:03:b0:2a:53:2c:d1:61:d4:
                    05:59:da:c3:d6:77:fc:73:41:48:d1:0d:f6:39:41:
                    8d:8e:08:38:9f:6c:97:f6:b8:0c:75:c3:24:4c:75:
                    3a:e6:71:0e:3f:98:64:da:c4:ba:89:8f:50:54:a5:
                    1d:be:10:6c:35:db:36:a9:26:36:36:de:21:64:6e:
                    7a:45:d2:39:a9:e8:e7:9b:f0:a2:09:5d:a8:b9:66:
                    0b:da:85:3d:8c:ff:39:bf:9f:4e:0b:2b:0f:76:f6:
                    2a:51:a5:ca:aa:cf:3a:cc:ec:5e:28:96:1a:22:4b:
                    c4:86:21:28:0d:2f:b3:a1:a3:86:60:13:69:a5:5e:
                    c1:6d:06:8f:2a:08:16:67:ac:88:94:fe:27:0b:55:
                    94:38:94:bd:95:e7:25:6a:f9:13:89:d0:4b:89:86:
                    2a:e3:05:b4:69:c8:33:fc:47:0b:a8:d8:53:cd:41:
                    ff:ce:fd:46:59:ce:94:45:ff:a2:95:f3:ed:7c:c5:
                    47:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0A:A6:C1:16:3F:88:0C:AE:58:48:8C:43:02:F4:ED:E1:73:F2:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6502103-ec30-3582-80b8-bbbeaed42076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.200.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:58:9f:25:2c:98:4d:d2:63:b4:56:b1:08:a7:47:f7:e1:3b:
         a5:79:01:a8:51:62:db:68:64:26:ef:19:44:8e:dd:07:b8:75:
         5e:51:cb:b7:75:0c:c9:bb:ee:e9:d2:2e:aa:8a:66:99:fc:b8:
         cc:1e:05:af:ec:1c:8c:e7:7c:ba:8e:8d:aa:0e:99:f5:78:68:
         39:cb:8a:46:26:3e:70:b5:34:62:3f:20:60:48:e6:4a:73:b6:
         47:5e:8a:fd:33:41:68:e2:28:57:7e:02:52:2f:55:2b:9b:43:
         ba:a3:22:b0:a2:e5:48:10:d9:ed:09:1b:64:7a:19:12:54:05:
         81:3f:b9:b3:9d:6e:91:ce:5a:a8:e9:e4:37:59:2f:32:89:88:
         fc:14:d4:bc:9b:47:38:08:dd:4d:e4:9a:56:01:4a:2f:15:cc:
         20:6e:b0:03:6d:7c:45:74:de:91:5a:fd:95:40:a9:55:8a:e1:
         59:e8:43:38:ca:df:d7:74:ee:cf:0c:ca:08:e7:36:e7:16:a9:
         4b:d5:c9:c0:d0:ff:34:c9:12:14:5e:8c:00:43:f5:1a:84:b2:
         21:7c:92:2b:60:14:2b:04:ac:00:ac:fe:d2:7d:e3:a2:2a:5a:
         01:8e:b5:0c:9c:21:6a:21:7d:71:e2:c3:32:7a:48:22:52:71:
         f8:40:8e:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKqEp+wUyQGMzLJUCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDcyNDEyMDAwMFoXDTIzMTAyNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZDgwZTcxZjAtZmJhYS00ZWI1LTgwMDQtNjllYjgxYzE2NDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYG4c0rs6FPNoDjpf6RTkc4mJY5K7Ls90NYx
fP3peTGSSTAV3mSWLU/95MKyksZ+UdUC63pOx0gEYVdBUfEbdWAfA7AqUyzRYdQF
WdrD1nf8c0FI0Q32OUGNjgg4n2yX9rgMdcMkTHU65nEOP5hk2sS6iY9QVKUdvhBs
Nds2qSY2Nt4hZG56RdI5qejnm/CiCV2ouWYL2oU9jP85v59OCysPdvYqUaXKqs86
zOxeKJYaIkvEhiEoDS+zoaOGYBNppV7BbQaPKggWZ6yIlP4nC1WUOJS9leclavkT
idBLiYYq4wW0acgz/EcLqNhTzUH/zv1GWc6URf+ilfPtfMVHzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAoKpsEWP4gMrlhIjEMC9O3hc/JEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjY1MDIxMDMtZWMzMC0z
NTgyLTgwYjgtYmJiZWFlZDQyMDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzch9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdYnyUsmE3SY7RWsQinR/fhO6V5AahRYttoZCbvGUSO3Qe4dV5Ry7d1
DMm77unSLqqKZpn8uMweBa/sHIznfLqOjaoOmfV4aDnLikYmPnC1NGI/IGBI5kpz
tkdeiv0zQWjiKFd+AlIvVSubQ7qjIrCi5UgQ2e0JG2R6GRJUBYE/ubOdbpHOWqjp
5DdZLzKJiPwU1LybRzgI3U3kmlYBSi8VzCBusANtfEV03pFa/ZVAqVWK4VnoQzjK
39d07s8MygjnNucWqUvVycDQ/zTJEhRejABD9RqEsiF8kitgFCsErACs/tJ946Iq
WgGOtQycIWohfXHiwzJ6SCJScfhAjrI=
-----END CERTIFICATE-----