Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/9ee52104-5a53-3cf8-a84c-cbeebdd89908.roa
File:                     9ee52104-5a53-3cf8-a84c-cbeebdd89908.roa (raw, json)
Hash identifier:          dftmJoWHnTBRQIVf6+YwpQyyR4Ow1FbTig5133Iuos0=
Subject key identifier:   41:A6:FE:42:68:D7:5C:66:32:C4:5B:4E:D4:A2:ED:32:83:0B:3C:4F
Certificate issuer:       /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Certificate serial:       010D0C9F43285841E42AE2B0B8193746E04F6700
Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/9ee52104-5a53-3cf8-a84c-cbeebdd89908.roa
Signing time:             Mon 15 May 2023 16:08:10 +0000
ROA not before:           Mon 15 May 2023 16:08:10 +0000
ROA not after:            Tue 30 May 2023 05:44:47 +0000
asID:                     7057
IP address blocks:        98.143.64.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:2a:e2:b0:b8:19:37:46:e0:4f:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
        Validity
            Not Before: May 15 16:08:10 2023 GMT
            Not After : May 30 05:44:47 2023 GMT
        Subject: CN=f2f96b38-ccf7-4865-84dc-0759ccbc4bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0f:7d:dc:9d:8c:28:27:1f:ec:e3:b7:79:0a:
                    12:d2:9f:61:59:d3:a9:39:41:c4:2b:36:f8:49:ba:
                    76:48:32:af:8d:60:04:b9:6b:cf:c6:ad:23:44:d9:
                    7b:42:a0:23:36:c5:4b:d3:7f:79:64:02:34:2b:81:
                    95:63:11:4d:8d:39:bd:d7:52:a9:4f:13:d9:aa:39:
                    89:eb:61:34:ae:23:c5:e5:75:1a:05:bc:01:8f:22:
                    19:b8:02:9c:e9:8e:78:b9:43:1f:ce:3e:a7:f5:38:
                    e8:9b:f2:2d:2a:a0:d1:ac:3c:96:92:8a:bb:a9:52:
                    a7:ef:5a:76:af:26:bb:cd:b8:c5:15:47:fb:21:25:
                    29:f1:7a:4e:a2:46:99:2f:2d:da:27:88:5f:d6:f0:
                    c8:a1:d5:49:b2:cf:5e:d6:0d:09:42:c8:91:9f:94:
                    78:57:d4:56:b1:b2:bb:7a:13:82:a3:ca:cf:3c:f7:
                    12:4b:57:72:a1:0c:f7:ab:3f:aa:f2:57:14:4a:1f:
                    4a:83:b7:fb:f0:f6:c7:47:0f:f8:2e:40:8a:bd:7d:
                    5d:13:6e:90:3f:92:11:8a:ee:04:7a:e7:11:48:38:
                    b9:94:fe:c4:2b:d3:cd:2d:0a:e2:6d:b0:90:79:9c:
                    6a:86:dd:be:a9:3d:4d:ee:04:d9:7e:5f:65:66:8c:
                    c5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A6:FE:42:68:D7:5C:66:32:C4:5B:4E:D4:A2:ED:32:83:0B:3C:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/9ee52104-5a53-3cf8-a84c-cbeebdd89908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl

            X509v3 Authority Key Identifier:
                keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.143.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:cb:08:9e:61:6c:3e:3b:3e:4a:14:c4:92:3b:59:d2:31:e8:
         7b:f8:10:db:ac:61:9b:59:ac:28:0b:dc:ca:f6:19:79:9a:de:
         0f:e6:84:96:8c:25:48:30:01:83:33:c2:d8:e7:d9:b0:87:c2:
         f2:f3:27:84:45:7e:d7:ce:8c:cb:3c:ac:09:61:16:4e:07:3e:
         81:72:d8:f6:ce:ac:3f:e6:ba:ce:80:ff:fa:87:0f:81:f0:a7:
         38:e4:5d:9d:16:77:dd:27:35:14:62:6d:0b:ca:fa:cc:ca:3e:
         70:6e:33:de:c9:01:4b:e4:91:e8:41:6a:a1:8e:10:55:69:71:
         62:59:0f:72:43:d3:63:88:a0:38:aa:4d:ac:5b:7b:fc:f7:73:
         f4:88:21:78:8d:3b:db:97:df:df:47:40:02:f5:8f:fe:74:a3:
         2e:2d:0a:74:19:ef:aa:1d:6f:16:9e:d7:e5:e9:a7:13:8b:10:
         e6:f0:61:1e:7c:2c:53:58:69:59:dc:ef:c5:62:e8:af:3b:c9:
         5c:8d:9f:70:27:01:6e:65:cd:54:da:d6:df:55:f3:1c:2d:7a:
         24:15:cc:a8:59:7b:f0:33:81:15:1e:bf:7f:51:e8:ac:91:93:
         02:8b:8e:04:9f:05:0e:a3:05:43:f8:4a:93:ee:8b:86:7b:c1:
         77:a5:7b:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkKuKwuBk3RuBPZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIz
OWM4MB4XDTIzMDUxNTE2MDgxMFoXDTIzMDUzMDA1NDQ0N1owLzEtMCsGA1UEAxMk
ZjJmOTZiMzgtY2NmNy00ODY1LTg0ZGMtMDc1OWNjYmM0YmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg993J2MKCcf7OO3eQoS0p9hWdOpOUHEKzb4
Sbp2SDKvjWAEuWvPxq0jRNl7QqAjNsVL0395ZAI0K4GVYxFNjTm911KpTxPZqjmJ
62E0riPF5XUaBbwBjyIZuAKc6Y54uUMfzj6n9Tjom/ItKqDRrDyWkoq7qVKn71p2
rya7zbjFFUf7ISUp8XpOokaZLy3aJ4hf1vDIodVJss9e1g0JQsiRn5R4V9RWsbK7
ehOCo8rPPPcSS1dyoQz3qz+q8lcUSh9Kg7f78PbHRw/4LkCKvX1dE26QP5IRiu4E
eucRSDi5lP7EK9PNLQribbCQeZxqht2+qT1N7gTZfl9lZozFPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEGm/kJo11xmMsRbTtSi7TKDCzxPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdi
YzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5YzgvOWVlNTIxMDQtNWE1My0z
Y2Y4LWE4NGMtY2JlZWJkZDg5OTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU3YmMyOGQtMzdlNC00Yzc2LTg0
ZDQtODQzMWRjOTIzOWM4LzFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0LTg0MzFkYzky
MzljOC5jcmwwHwYDVR0jBBgwFoAUT2hGCOzA/DWcXU1xd+vJ0MqBG1QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMx
ZGM5MjM5YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYo9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFbLCJ5hbD47PkoUxJI7WdIx6Hv4ENusYZtZrCgL3Mr2GXma3g/mhJaM
JUgwAYMzwtjn2bCHwvLzJ4RFftfOjMs8rAlhFk4HPoFy2PbOrD/mus6A//qHD4Hw
pzjkXZ0Wd90nNRRibQvK+szKPnBuM97JAUvkkehBaqGOEFVpcWJZD3JD02OIoDiq
Taxbe/z3c/SIIXiNO9uX399HQAL1j/50oy4tCnQZ76odbxae1+XppxOLEObwYR58
LFNYaVnc78Vi6K87yVyNn3AnAW5lzVTa1t9V8xwteiQVzKhZe/AzgRUev39R6KyR
kwKLjgSfBQ6jBUP4SpPui4Z7wXele2M=
-----END CERTIFICATE-----