Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/9281f038-b8cc-3aa6-9fcf-c1219e424198.roa
File:                     9281f038-b8cc-3aa6-9fcf-c1219e424198.roa (raw, json)
Hash identifier:          HrIwprdHAxMSvrigfOFsOIWCJkHT2D6dhDDyWCy4ncU=
Subject key identifier:   09:73:DB:91:50:EE:BF:0A:99:07:39:53:9A:C0:2D:58:BA:E6:D8:BC
Certificate issuer:       /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial:       010D0C9F43285842A8B7F1BB7D4E75525FBE1600
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/9281f038-b8cc-3aa6-9fcf-c1219e424198.roa
Signing time:             Tue 25 Jul 2023 01:51:41 +0000
ROA not before:           Tue 25 Jul 2023 01:51:41 +0000
ROA not after:            Mon 23 Oct 2023 01:51:41 +0000
asID:                     10753
IP address blocks:        64.29.70.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a8:b7:f1:bb:7d:4e:75:52:5f:be:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
        Validity
            Not Before: Jul 25 01:51:41 2023 GMT
            Not After : Oct 23 01:51:41 2023 GMT
        Subject: CN=4091f939-f5b0-4da0-a89b-49c6593c57a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:5b:96:a5:c7:7e:d5:ca:c4:45:b5:83:95:
                    a5:70:e9:fb:6e:7c:a0:b3:0d:04:36:10:50:5a:61:
                    23:d2:79:3e:19:63:6b:b2:3b:ec:7c:f2:44:1e:a6:
                    06:6c:fc:a6:cd:f6:d7:dc:7b:4e:de:92:91:db:bf:
                    7f:7c:54:b9:de:54:5d:de:9a:da:3b:9e:6d:49:28:
                    f5:26:f1:74:83:c0:e3:9c:48:50:bc:f7:97:c5:6a:
                    78:96:b5:e1:ef:db:59:1f:e5:eb:c4:36:e9:3f:ee:
                    74:86:7e:b7:87:d7:c7:71:5e:a9:c3:34:f9:48:b9:
                    44:11:5a:c2:16:1e:fa:41:b8:f0:ff:9c:0b:86:d8:
                    cc:e6:10:dc:df:98:ef:02:4f:2c:05:3a:d3:38:1c:
                    7e:9f:71:c9:e5:15:06:fe:7e:b5:eb:90:59:93:72:
                    43:11:b2:0c:c0:01:25:01:d4:51:ff:ee:02:ac:b6:
                    5b:9e:85:a4:ba:2f:c5:00:9d:2e:05:a1:e8:93:92:
                    40:6b:09:70:b8:da:f0:d7:4c:8f:00:4a:bf:3a:9a:
                    5d:78:5b:ae:10:a1:99:d7:b8:b2:6d:c0:71:5f:54:
                    9f:e6:6c:e2:27:33:08:c7:b1:25:a1:42:76:ab:9c:
                    66:03:f5:32:08:97:00:43:85:77:9f:e3:00:c4:58:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:73:DB:91:50:EE:BF:0A:99:07:39:53:9A:C0:2D:58:BA:E6:D8:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/9281f038-b8cc-3aa6-9fcf-c1219e424198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:8f:d1:ff:ee:49:c4:b7:f5:28:aa:80:63:ee:03:4c:b7:c4:
         df:a1:a9:6c:94:6b:ac:65:11:ff:92:b7:0e:fe:f3:75:de:b2:
         b8:22:b8:fd:27:b3:2a:75:96:73:27:3d:3f:f1:dc:a2:0e:1b:
         69:7a:a1:dd:6a:1a:5c:5e:01:e1:e0:7e:ad:e3:ad:25:78:18:
         36:72:2d:47:5d:56:93:20:d9:67:b4:97:e8:25:6d:2a:2c:2f:
         4e:80:4c:0b:77:14:c9:fa:34:62:ea:c5:56:66:3f:0a:e6:38:
         24:3f:38:fb:b6:c1:92:d2:b6:cc:70:0a:73:f1:57:8f:fd:71:
         4d:9d:b5:23:90:68:ba:0f:87:af:93:40:ec:d6:04:d6:5a:40:
         9f:3f:d8:23:f2:d3:b2:0b:c0:35:44:99:5f:da:ce:52:11:1c:
         26:1a:f9:f7:83:48:fa:b4:a0:b0:a8:eb:82:58:34:5f:a0:9e:
         d9:2a:f8:14:2a:c3:53:a1:fd:bf:af:f5:e6:27:96:e5:97:10:
         1d:c6:c8:8f:b9:bf:98:3c:13:09:63:3c:77:be:8f:b2:bb:ca:
         cb:c8:3d:7a:87:da:43:42:44:bb:cd:a2:9c:50:1b:4f:01:2c:
         ca:23:bf:49:ad:eb:f0:20:be:80:9a:a9:4f:77:15:c6:d1:d7:
         95:ae:c5:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKot/G7fU51Ul++FgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU1MzY3MDEtZTQwYy00MjBhLWFiZDAtOTkzYmY4ZTBl
YWM4MB4XDTIzMDcyNTAxNTE0MVoXDTIzMTAyMzAxNTE0MVowLzEtMCsGA1UEAxMk
NDA5MWY5MzktZjViMC00ZGEwLWE4OWItNDljNjU5M2M1N2E3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxpblqXHftXKxEW1g5WlcOn7bnygsw0ENhBQ
WmEj0nk+GWNrsjvsfPJEHqYGbPymzfbX3HtO3pKR279/fFS53lRd3praO55tSSj1
JvF0g8DjnEhQvPeXxWp4lrXh79tZH+XrxDbpP+50hn63h9fHcV6pwzT5SLlEEVrC
Fh76Qbjw/5wLhtjM5hDc35jvAk8sBTrTOBx+n3HJ5RUG/n6165BZk3JDEbIMwAEl
AdRR/+4CrLZbnoWkui/FAJ0uBaHok5JAawlwuNrw10yPAEq/OppdeFuuEKGZ17iy
bcBxX1Sf5mziJzMIx7EloUJ2q5xmA/UyCJcAQ4V3n+MAxFiKgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAlz25FQ7r8KmQc5U5rALVi65ti8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTUz
NjcwMS1lNDBjLTQyMGEtYWJkMC05OTNiZjhlMGVhYzgvOTI4MWYwMzgtYjhjYy0z
YWE2LTlmY2YtYzEyMTllNDI0MTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU1MzY3MDEtZTQwYy00MjBhLWFi
ZDAtOTkzYmY4ZTBlYWM4LzFlNTM2NzAxLWU0MGMtNDIwYS1hYmQwLTk5M2JmOGUw
ZWFjOC5jcmwwHwYDVR0jBBgwFoAUTOj0knFEJlIJQflQP4AuKyHOilswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTUzNjcwMS1lNDBjLTQyMGEtYWJkMC05OTNi
ZjhlMGVhYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQB1GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2P0f/uScS39SiqgGPuA0y3xN+hqWyUa6xlEf+Stw7+83XesrgiuP0n
syp1lnMnPT/x3KIOG2l6od1qGlxeAeHgfq3jrSV4GDZyLUddVpMg2We0l+glbSos
L06ATAt3FMn6NGLqxVZmPwrmOCQ/OPu2wZLStsxwCnPxV4/9cU2dtSOQaLoPh6+T
QOzWBNZaQJ8/2CPy07ILwDVEmV/azlIRHCYa+feDSPq0oLCo64JYNF+gntkq+BQq
w1Oh/b+v9eYnluWXEB3GyI+5v5g8EwljPHe+j7K7ysvIPXqH2kNCRLvNopxQG08B
LMojv0mt6/AgvoCaqU93FcbR15WuxTI=
-----END CERTIFICATE-----