Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ef38ca62-1901-3104-8288-be2f4898d641.roa
File:                     ef38ca62-1901-3104-8288-be2f4898d641.roa (raw, json)
Hash identifier:          64SzcIHtGOk2lk4Me0H7Luz6+NwFJGH5wuHgT343Jxo=
Subject key identifier:   EE:FD:CD:10:38:DE:33:3A:3A:61:81:AA:53:B2:00:02:53:86:B5:73
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA146D23C39E6FE2911F2EC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ef38ca62-1901-3104-8288-be2f4898d641.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     14112
IP address blocks:        216.6.204.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:14:6d:23:c3:9e:6f:e2:91:1f:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=cf0adf7e-80d0-4fdf-9a38-cf824ed9b097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:27:0d:fa:c3:da:b4:ae:09:9e:0e:7a:67:
                    9f:f3:ea:4d:4d:02:98:01:d3:04:7a:f7:49:41:6d:
                    5a:06:52:6c:40:9b:a4:ee:a3:5f:4f:fc:7b:2d:91:
                    cf:03:b7:0b:e4:42:73:b4:dd:39:b2:da:81:cb:7b:
                    9d:6e:6a:52:dc:a2:aa:db:ce:23:76:bf:da:9f:d8:
                    ec:c1:58:e4:63:2c:fe:07:7e:96:90:b0:14:04:c0:
                    38:2b:ea:7d:bf:4b:ac:a4:7b:bf:79:49:62:46:34:
                    db:94:29:6a:88:ba:1a:9b:b7:65:2c:64:45:d7:75:
                    57:8b:de:ed:60:32:82:f8:f9:3a:e8:04:70:fd:d8:
                    4a:ec:0c:fc:01:24:d3:13:30:0b:f7:0e:88:f9:ed:
                    f6:ec:3a:32:d7:19:5e:ab:1f:f4:03:87:95:f3:0c:
                    08:1c:63:2d:08:67:37:b6:40:2b:ba:1d:7d:88:f7:
                    69:b4:49:96:23:12:55:44:2c:e6:77:8a:f3:a9:aa:
                    1e:11:0a:55:28:42:38:1c:e1:1c:e6:7e:30:b6:8f:
                    82:86:42:36:0f:69:e9:e7:4d:71:b4:34:25:aa:9a:
                    83:ff:48:23:da:83:19:22:14:22:da:09:dd:df:09:
                    01:5c:79:77:f8:82:ab:58:42:b8:44:d2:41:d8:48:
                    1b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FD:CD:10:38:DE:33:3A:3A:61:81:AA:53:B2:00:02:53:86:B5:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ef38ca62-1901-3104-8288-be2f4898d641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6e:71:09:26:d3:e3:eb:14:af:9f:18:18:08:91:90:d2:9f:
         a9:64:69:bb:ac:5a:1a:74:25:f4:53:4f:94:47:b4:9f:58:70:
         e2:40:e8:c1:2a:39:23:58:ca:65:33:93:1a:ce:7b:df:00:c6:
         b6:7a:64:6c:af:86:9c:df:e1:a9:8d:39:02:54:6b:fe:17:33:
         21:2f:d1:65:34:ce:04:36:46:89:3f:fa:54:73:4a:46:b2:eb:
         e4:df:e4:f0:67:97:e0:bc:91:c9:a9:57:66:f3:58:ed:36:6a:
         b2:64:11:a5:f8:92:c4:03:68:6c:03:a4:c4:23:df:2b:d4:e4:
         2a:06:af:21:6d:8c:5e:a8:b7:67:52:6c:a4:2c:de:16:86:a3:
         d0:7e:e8:00:10:33:6c:cb:e7:a7:c1:99:ae:48:ae:93:67:b2:
         a0:4e:41:3e:91:33:e0:ce:63:49:35:66:bf:ca:e2:04:31:3e:
         2b:ea:af:f0:db:f6:75:cc:e5:33:a6:a2:fe:64:19:e7:17:0d:
         a0:48:e5:03:a4:06:28:8d:31:0b:7c:24:45:8f:9d:93:c9:27:
         47:40:72:b6:c7:82:e1:b3:be:d1:99:d9:b0:b2:09:2e:1e:1c:
         88:85:bf:21:66:d1:2f:3d:24:37:36:09:a9:12:06:09:2e:01:
         7f:ca:a4:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKqFG0jw55v4pEfLsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDcyNDEyMDAwMFoXDTIzMTAyNDA0MDAwMFowLzEtMCsGA1UEAxMk
Y2YwYWRmN2UtODBkMC00ZmRmLTlhMzgtY2Y4MjRlZDliMDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoAnDfrD2rSuCZ4Oemef8+pNTQKYAdMEevdJ
QW1aBlJsQJuk7qNfT/x7LZHPA7cL5EJztN05stqBy3udbmpS3KKq284jdr/an9js
wVjkYyz+B36WkLAUBMA4K+p9v0uspHu/eUliRjTblClqiLoam7dlLGRF13VXi97t
YDKC+Pk66ARw/dhK7Az8ASTTEzAL9w6I+e327Doy1xleqx/0A4eV8wwIHGMtCGc3
tkAruh19iPdptEmWIxJVRCzmd4rzqaoeEQpVKEI4HOEc5n4wto+ChkI2D2np501x
tDQlqpqD/0gj2oMZIhQi2gnd3wkBXHl3+IKrWEK4RNJB2EgbYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO79zRA43jM6OmGBqlOyAAJThrVzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZWYzOGNhNjItMTkwMS0z
MTA0LTgyODgtYmUyZjQ4OThkNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2AbMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNucQkm0+PrFK+fGBgIkZDSn6lkabusWhp0JfRTT5RHtJ9YcOJA6MEq
OSNYymUzkxrOe98AxrZ6ZGyvhpzf4amNOQJUa/4XMyEv0WU0zgQ2Rok/+lRzSkay
6+Tf5PBnl+C8kcmpV2bzWO02arJkEaX4ksQDaGwDpMQj3yvU5CoGryFtjF6ot2dS
bKQs3haGo9B+6AAQM2zL56fBma5IrpNnsqBOQT6RM+DOY0k1Zr/K4gQxPivqr/Db
9nXM5TOmov5kGecXDaBI5QOkBiiNMQt8JEWPnZPJJ0dAcrbHguGzvtGZ2bCyCS4e
HIiFvyFm0S89JDc2CakSBgkuAX/KpNY=
-----END CERTIFICATE-----