Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/4d553ed3-c742-3390-931e-50e32036d147.roa
File:                     4d553ed3-c742-3390-931e-50e32036d147.roa (raw, json)
Hash identifier:          lBfdu8Zt2i50PPI3BtcIvwIYWz+O8QWVXYVciAUIMpM=
Subject key identifier:   34:F2:AE:95:67:EF:2C:07:F0:AD:33:11:37:FE:D6:13:21:DA:F0:54
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285842AD29DAE551FE6C6E10A21C80
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/4d553ed3-c742-3390-931e-50e32036d147.roa
Signing time:             Wed 26 Jul 2023 16:04:26 +0000
ROA not before:           Wed 26 Jul 2023 16:04:26 +0000
ROA not after:            Tue 24 Oct 2023 16:04:26 +0000
asID:                     834
IP address blocks:        72.14.130.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ad:29:da:e5:51:fe:6c:6e:10:a2:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Jul 26 16:04:26 2023 GMT
            Not After : Oct 24 16:04:26 2023 GMT
        Subject: CN=0d3ce12a-9150-46e2-aa6d-3f60a01c8a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4f:6c:d4:fe:86:96:c9:30:90:08:6b:f9:ff:
                    43:2e:f2:01:ef:36:88:26:19:9c:1c:5d:8b:0b:d2:
                    b4:dc:76:fe:d2:54:07:ba:62:18:e5:00:b3:86:44:
                    3b:15:ef:a7:a9:e5:6e:66:6a:a9:00:2b:3a:ef:33:
                    b1:eb:98:f2:b1:60:91:2c:6d:f6:50:37:de:56:22:
                    e3:f7:4f:23:3b:bf:01:83:82:56:2d:68:45:2c:de:
                    75:94:23:80:6e:57:55:76:23:33:3f:f2:bb:1f:21:
                    9e:3a:4d:17:59:59:8a:ae:f9:18:74:70:50:9c:4a:
                    bb:5d:73:9b:2e:8b:7e:8c:74:81:f6:61:35:68:2b:
                    40:22:9b:ef:ba:46:db:c2:9a:5c:f1:99:cd:77:a4:
                    58:b7:5b:5f:fb:3b:2f:ea:2c:82:44:7b:f5:d5:17:
                    f7:1a:73:e9:74:d8:5f:5e:06:a7:b3:51:6d:14:e5:
                    0d:91:06:9b:0e:7a:fe:d0:62:13:52:ac:cb:a1:7d:
                    85:4a:bc:56:d2:2c:98:32:66:da:20:0c:2c:0b:fe:
                    c2:a7:1b:a2:e2:50:09:52:84:66:96:a6:52:85:67:
                    12:ab:a1:14:5a:2d:a1:8f:38:a6:12:07:b3:b1:51:
                    b3:12:c9:69:c8:1a:c2:31:a3:92:0f:6d:57:c6:14:
                    b7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F2:AE:95:67:EF:2C:07:F0:AD:33:11:37:FE:D6:13:21:DA:F0:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/4d553ed3-c742-3390-931e-50e32036d147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:d7:82:e8:82:ba:b9:36:84:a7:7e:e0:53:67:08:e7:5e:79:
         37:45:4a:23:11:8f:f2:5b:2e:26:60:0c:5e:50:9b:06:da:5f:
         81:a6:18:16:2c:4a:7b:3d:8a:5c:b4:7f:f7:5c:36:ec:db:34:
         60:e4:36:15:c4:0d:e4:5b:f5:0d:ed:65:de:6b:3f:ca:63:c7:
         8b:1a:07:40:ad:df:e0:88:ab:c0:51:6e:dc:30:e1:e5:40:8b:
         5c:f0:91:a9:00:a0:10:35:04:a4:2c:ae:f8:c9:73:96:cc:4c:
         15:75:1c:f1:f2:17:29:3e:66:c7:b2:00:25:73:b7:76:59:80:
         35:5a:33:ca:a3:74:c8:5b:46:b8:40:49:f0:bb:16:9c:e0:3a:
         ac:bd:40:15:1d:3f:92:7e:2a:e9:a2:7c:ad:75:15:b4:87:43:
         d3:bc:01:f8:69:ca:c0:87:4d:86:7b:7b:93:42:7c:f6:cd:cc:
         cb:47:06:67:d9:89:d7:38:05:15:e2:be:cf:04:2e:a6:41:49:
         9f:a5:47:46:13:73:80:31:1f:ee:3b:ef:81:a6:70:c8:63:57:
         ac:65:75:1d:18:c3:ad:39:4a:fe:5b:37:ce:d4:54:1f:4d:81:
         5a:c2:d3:a4:b9:aa:b5:97:2a:d4:03:fc:a4:a7:35:81:6a:ae:
         a8:4b:d8:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKtKdrlUf5sbhCiHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTIzMDcyNjE2MDQyNloXDTIzMTAyNDE2MDQyNlowLzEtMCsGA1UEAxMk
MGQzY2UxMmEtOTE1MC00NmUyLWFhNmQtM2Y2MGEwMWM4YTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU9s1P6GlskwkAhr+f9DLvIB7zaIJhmcHF2L
C9K03Hb+0lQHumIY5QCzhkQ7Fe+nqeVuZmqpACs67zOx65jysWCRLG32UDfeViLj
908jO78Bg4JWLWhFLN51lCOAbldVdiMzP/K7HyGeOk0XWVmKrvkYdHBQnEq7XXOb
Lot+jHSB9mE1aCtAIpvvukbbwppc8ZnNd6RYt1tf+zsv6iyCRHv11Rf3GnPpdNhf
Xgans1FtFOUNkQabDnr+0GITUqzLoX2FSrxW0iyYMmbaIAwsC/7Cpxui4lAJUoRm
lqZShWcSq6EUWi2hjzimEgezsVGzEslpyBrCMaOSD21XxhS3VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTyrpVn7ywH8K0zETf+1hMh2vBUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNGQ1NTNlZDMtYzc0Mi0z
MzkwLTkzMWUtNTBlMzIwMzZkMTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfXguiCurk2hKd+4FNnCOdeeTdFSiMRj/JbLiZgDF5QmwbaX4GmGBYs
Sns9ily0f/dcNuzbNGDkNhXEDeRb9Q3tZd5rP8pjx4saB0Ct3+CIq8BRbtww4eVA
i1zwkakAoBA1BKQsrvjJc5bMTBV1HPHyFyk+ZseyACVzt3ZZgDVaM8qjdMhbRrhA
SfC7FpzgOqy9QBUdP5J+KumifK11FbSHQ9O8AfhpysCHTYZ7e5NCfPbNzMtHBmfZ
idc4BRXivs8ELqZBSZ+lR0YTc4AxH+4774GmcMhjV6xldR0Yw605Sv5bN87UVB9N
gVrC06S5qrWXKtQD/KSnNYFqrqhL2CI=
-----END CERTIFICATE-----