Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8ad925d-48c6-30d4-a7f6-1cd73e031a14.roa
File:                     e8ad925d-48c6-30d4-a7f6-1cd73e031a14.roa (raw, json)
Hash identifier:          SkOwCZR/DwI+B5Kf5cTMvnA3T0NBSXxWnnp6XVIltNo=
Subject key identifier:   65:19:39:66:C0:61:F0:98:D4:25:9D:94:33:E5:C6:7F:7C:F1:0D:64
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328583FEA74F51E04D8281A4117F800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8ad925d-48c6-30d4-a7f6-1cd73e031a14.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     577
IP address blocks:        2001:4958:1829::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ea:74:f5:1e:04:d8:28:1a:41:17:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=342093cd-3f71-4e8e-b402-3d8bd7c52646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:14:dc:1e:dd:4e:a0:83:0e:1f:20:a1:e2:e5:
                    f4:11:9b:0b:48:4a:d9:fd:10:80:22:18:88:23:b0:
                    42:2b:fd:3a:d1:8e:08:4d:65:c6:6e:6b:f9:bc:3b:
                    7a:67:11:86:3e:24:de:9b:99:ff:04:8f:4d:bc:52:
                    45:58:71:3e:6c:f0:2e:58:f9:2c:7d:0b:f6:de:bb:
                    1e:d4:37:05:8f:2f:ce:6b:c5:8a:26:c1:32:c4:0b:
                    6c:9e:c0:f5:20:ea:bd:e7:19:aa:2b:ea:8f:2f:dc:
                    0f:ec:41:55:10:d8:a1:d9:a7:ed:1d:68:e6:6c:d6:
                    39:83:b9:45:0b:d4:fc:6c:5c:ed:c5:3d:de:81:03:
                    7e:92:f5:57:8e:38:70:4b:d9:c6:3c:7a:67:7b:e7:
                    bc:54:b2:95:84:b1:6d:19:08:04:1b:6e:53:f4:a7:
                    4d:8f:d6:bd:f1:e5:1c:e0:af:a5:9a:3e:84:05:00:
                    33:c7:97:00:97:7d:03:e0:93:50:c6:98:c9:c5:1d:
                    6c:a4:f6:4f:e0:05:e7:6f:8c:ef:f9:ea:66:01:c8:
                    b5:9d:f1:74:7f:8b:b1:5d:b8:0f:dd:23:a4:c2:18:
                    89:c5:c6:b6:2d:76:32:0b:cd:f3:ff:a2:8a:3b:98:
                    42:be:fb:c3:4c:6c:2c:a5:92:7b:17:97:93:ce:7c:
                    d4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:19:39:66:C0:61:F0:98:D4:25:9D:94:33:E5:C6:7F:7C:F1:0D:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8ad925d-48c6-30d4-a7f6-1cd73e031a14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:1829::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:9a:10:31:a5:d9:b9:fb:4a:53:4b:89:71:72:4a:55:28:06:
         7b:f6:44:44:d0:58:dd:77:2b:99:7c:4f:b5:a0:fc:9c:a0:97:
         f3:58:57:b7:fd:f7:37:cc:ab:e6:f5:c7:6d:3f:ed:59:00:29:
         d9:8a:1c:78:2a:b5:dd:0d:cd:df:0d:83:c5:7b:fc:1e:3b:2b:
         74:5a:d6:a2:c0:9f:46:c7:ad:e5:b2:c0:97:c9:52:f6:ef:3b:
         2f:85:57:97:eb:10:33:37:b1:e8:fb:e4:58:63:86:48:95:fb:
         7d:d6:1b:08:83:9a:10:7c:83:45:5a:c8:0e:de:34:c1:1b:b5:
         05:07:9b:21:ff:4e:ab:81:58:dc:fe:e6:e7:70:8e:be:0a:5e:
         9e:ea:c9:63:a8:b5:16:b5:41:ea:38:e3:78:a3:a9:bb:12:4a:
         2c:21:88:71:56:03:80:df:08:16:e0:98:b6:96:49:03:46:1d:
         26:d8:71:7a:08:c9:d4:c6:3d:9e:e1:e7:d7:65:84:a2:e6:48:
         b6:91:35:61:3f:7a:32:c0:e9:bf:35:72:74:bc:7d:5c:35:25:
         83:3c:16:4b:7c:41:24:39:a0:c4:c3:46:64:ac:ab:8b:0a:8b:
         43:49:12:ad:eb:fb:93:ef:0d:08:75:c8:e5:7f:58:ce:29:05:
         7b:84:c5:c3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD/qdPUeBNgoGkEX+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIyMTExNDEyMDAwMFoXDTIzMDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MzQyMDkzY2QtM2Y3MS00ZThlLWI0MDItM2Q4YmQ3YzUyNjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhTcHt1OoIMOHyCh4uX0EZsLSErZ/RCAIhiI
I7BCK/060Y4ITWXGbmv5vDt6ZxGGPiTem5n/BI9NvFJFWHE+bPAuWPksfQv23rse
1DcFjy/Oa8WKJsEyxAtsnsD1IOq95xmqK+qPL9wP7EFVENih2aftHWjmbNY5g7lF
C9T8bFztxT3egQN+kvVXjjhwS9nGPHpne+e8VLKVhLFtGQgEG25T9KdNj9a98eUc
4K+lmj6EBQAzx5cAl30D4JNQxpjJxR1spPZP4AXnb4zv+epmAci1nfF0f4uxXbgP
3SOkwhiJxca2LXYyC83z/6KKO5hCvvvDTGwspZJ7F5eTznzUxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGUZOWbAYfCY1CWdlDPlxn988Q1kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZThhZDkyNWQtNDhjNi0z
MGQ0LWE3ZjYtMWNkNzNlMDMxYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFJWBgp
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ2aEDGl2bn7SlNLiXFySlUoBnv2RETQWN13K5l8T7Wg/Jygl/NY
V7f99zfMq+b1x20/7VkAKdmKHHgqtd0Nzd8Ng8V7/B47K3Ra1qLAn0bHreWywJfJ
UvbvOy+FV5frEDM3sej75FhjhkiV+33WGwiDmhB8g0VayA7eNMEbtQUHmyH/TquB
WNz+5udwjr4KXp7qyWOotRa1Qeo443ijqbsSSiwhiHFWA4DfCBbgmLaWSQNGHSbY
cXoIydTGPZ7h59dlhKLmSLaRNWE/ejLA6b81cnS8fVw1JYM8Fkt8QSQ5oMTDRmSs
q4sKi0NJEq3r+5PvDQh1yOV/WM4pBXuExcM=
-----END CERTIFICATE-----