Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d2b21413-0c4f-3ce7-837a-fb97123ca5ce.roa
File:                     d2b21413-0c4f-3ce7-837a-fb97123ca5ce.roa (raw, json)
Hash identifier:          KnsUR7ZW2Q72g5OqGNuWNTlL8kxbSxH4jU4lLt+0Xo0=
Subject key identifier:   D8:CE:7B:D8:77:4B:1E:12:EF:B0:1F:0B:A7:B6:C0:DD:A9:A7:BF:E2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328583FED26EA8363511511F2DF7520
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d2b21413-0c4f-3ce7-837a-fb97123ca5ce.roa
Signing time:             Tue 15 Nov 2022 12:00:00 +0000
ROA not before:           Tue 15 Nov 2022 12:00:00 +0000
ROA not after:            Wed 08 Feb 2023 05:00:00 +0000
asID:                     577
IP address blocks:        70.50.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ed:26:ea:83:63:51:15:11:f2:df:75:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov 15 12:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2023 GMT
        Subject: CN=600c2a17-e365-4ecd-b075-0fc3f0159a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dd:07:7b:b3:e3:b4:aa:c2:50:c1:f5:67:e6:
                    7e:2e:2f:49:33:a1:17:a5:9e:ee:02:30:07:16:0b:
                    9e:41:c9:cf:7b:11:35:fa:f9:20:ab:fb:46:0f:49:
                    6e:ff:e7:26:02:7f:5d:4e:3b:99:b8:9a:e7:96:d6:
                    40:d6:d5:74:7f:53:4e:1a:d0:8d:92:70:5f:ff:d3:
                    64:2a:b5:77:1c:cf:2a:8c:3d:5f:65:51:e3:9a:df:
                    f9:b1:53:98:2b:56:8b:14:39:e1:e1:a4:b5:6c:67:
                    17:51:a7:1b:d6:29:2b:bb:d8:9f:2c:84:74:65:f7:
                    17:b8:d5:7d:cc:f8:af:d5:c3:90:0e:46:63:d2:4b:
                    b6:95:4d:46:dc:9d:89:3d:72:c8:c4:e2:ce:c9:d3:
                    18:2c:1b:95:3a:e1:ab:89:7b:fc:c8:a7:43:d8:9e:
                    07:d9:8b:39:fe:f0:c5:bc:37:4a:06:86:aa:b7:14:
                    75:e5:ae:c0:86:99:ad:11:0e:e2:b0:48:51:43:be:
                    93:5c:20:ca:7d:99:7c:60:fe:fe:12:57:8b:45:56:
                    6a:c0:79:65:4c:e2:f2:56:b3:ed:80:f4:19:e9:f3:
                    96:a2:a9:e6:af:ed:68:4d:82:70:a4:c6:82:65:ee:
                    b4:8e:7f:05:52:bd:91:5e:3a:e7:63:6e:45:d3:5e:
                    22:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CE:7B:D8:77:4B:1E:12:EF:B0:1F:0B:A7:B6:C0:DD:A9:A7:BF:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d2b21413-0c4f-3ce7-837a-fb97123ca5ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.50.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:3a:b2:1a:36:bc:76:05:f7:b8:03:b2:c3:59:65:28:6b:0a:
         f4:d6:5d:11:5b:94:f7:17:5e:87:15:ef:08:95:00:f6:78:b9:
         f7:b8:2f:52:d3:ce:74:4a:4c:58:5c:ed:ea:61:67:15:c5:7a:
         a3:1f:24:1f:03:0e:18:ff:d8:a0:df:7a:7c:1a:7b:b0:81:5b:
         3d:0b:9e:28:bf:92:ac:c7:1e:a8:47:fb:4e:67:d9:9b:f3:01:
         b0:eb:f0:bb:e5:9c:5b:3f:81:89:0c:9e:ad:9c:ef:8f:f9:08:
         0f:6e:f9:a0:04:24:77:62:14:ec:71:c7:de:9f:0e:a4:3c:01:
         b2:b5:fc:83:25:aa:47:41:0a:69:db:25:db:5d:39:41:4a:b4:
         72:ec:df:a1:13:7c:aa:b5:4e:7a:f5:0b:70:6e:cf:6f:6e:20:
         be:83:0f:7b:e6:04:a1:7c:02:a1:94:0c:68:c0:15:86:ae:65:
         54:a1:3e:5c:6e:2f:a0:c4:4c:5b:70:a9:07:fe:0a:0d:20:9c:
         1a:f2:d7:97:7a:ed:74:3d:72:27:f3:cf:c5:c4:e8:e0:aa:c8:
         4b:e7:f1:67:2c:72:a2:99:92:64:e0:99:72:96:e4:bd:e4:73:
         0c:3b:c1:b1:20:6d:49:41:aa:ba:4e:6c:e2:26:78:11:7f:66:
         0c:68:d4:19
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/tJuqDY1EVEfLfdSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIyMTExNTEyMDAwMFoXDTIzMDIwODA1MDAwMFowLzEtMCsGA1UEAxMk
NjAwYzJhMTctZTM2NS00ZWNkLWIwNzUtMGZjM2YwMTU5YTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd0He7PjtKrCUMH1Z+Z+Li9JM6EXpZ7uAjAH
FgueQcnPexE1+vkgq/tGD0lu/+cmAn9dTjuZuJrnltZA1tV0f1NOGtCNknBf/9Nk
KrV3HM8qjD1fZVHjmt/5sVOYK1aLFDnh4aS1bGcXUacb1ikru9ifLIR0ZfcXuNV9
zPiv1cOQDkZj0ku2lU1G3J2JPXLIxOLOydMYLBuVOuGriXv8yKdD2J4H2Ys5/vDF
vDdKBoaqtxR15a7AhpmtEQ7isEhRQ76TXCDKfZl8YP7+EleLRVZqwHllTOLyVrPt
gPQZ6fOWoqnmr+1oTYJwpMaCZe60jn8FUr2RXjrnY25F014iUwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNjOe9h3Sx4S77AfC6e2wN2pp7/iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDJiMjE0MTMtMGM0Zi0z
Y2U3LTgzN2EtZmI5NzEyM2NhNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARjIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhjqyGja8dgX3uAOyw1llKGsK9NZdEVuU9xdehxXvCJUA9ni597gvUtPO
dEpMWFzt6mFnFcV6ox8kHwMOGP/YoN96fBp7sIFbPQueKL+SrMceqEf7TmfZm/MB
sOvwu+WcWz+BiQyerZzvj/kID275oAQkd2IU7HHH3p8OpDwBsrX8gyWqR0EKadsl
2105QUq0cuzfoRN8qrVOevULcG7Pb24gvoMPe+YEoXwCoZQMaMAVhq5lVKE+XG4v
oMRMW3CpB/4KDSCcGvLXl3rtdD1yJ/PPxcTo4KrIS+fxZyxyopmSZOCZcpbkveRz
DDvBsSBtSUGquk5s4iZ4EX9mDGjUGQ==
-----END CERTIFICATE-----