Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/3de03768-66c0-3077-b23b-aab156174f0c.roa
File:                     3de03768-66c0-3077-b23b-aab156174f0c.roa (raw, json)
Hash identifier:          rkOfYw44ed+K/BeQqB3rfVGk9OcFkQrw5EWyE2WTJis=
Subject key identifier:   0A:33:A9:CB:29:24:A1:C7:78:65:F2:BF:9C:FB:63:B3:25:1A:0A:EC
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F43285841DEA67676D987571D54F49700
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/3de03768-66c0-3077-b23b-aab156174f0c.roa
Signing time:             Sat 13 May 2023 16:42:43 +0000
ROA not before:           Sat 13 May 2023 16:42:43 +0000
ROA not after:            Tue 13 Jun 2023 00:49:52 +0000
asID:                     32133
IP address blocks:        98.124.224.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:de:a6:76:76:d9:87:57:1d:54:f4:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: May 13 16:42:43 2023 GMT
            Not After : Jun 13 00:49:52 2023 GMT
        Subject: CN=b8e68e6a-15e2-4db7-9f54-348f4e4198e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:0b:20:2e:1b:49:a9:7e:5d:c1:13:a2:ac:
                    7b:4a:7c:ff:51:67:ba:4f:e8:9b:a3:81:af:aa:15:
                    7b:cb:24:ae:06:bf:ba:c0:d3:36:84:07:bb:14:bc:
                    4f:88:44:d4:bb:03:45:ce:34:76:fd:64:eb:1b:d9:
                    cc:7a:70:5a:91:ee:6e:aa:92:4e:78:27:66:bf:c8:
                    09:49:b0:18:63:cd:92:79:74:a5:4c:b2:37:25:88:
                    37:cd:44:c2:b8:1e:33:8c:e2:a2:e9:3e:5d:82:d0:
                    e0:72:6f:35:6b:0f:eb:dd:c9:fe:6a:bd:71:c1:24:
                    3d:cc:33:dd:e6:0c:61:1d:5f:01:b3:f4:42:38:0a:
                    93:35:60:58:69:ac:31:82:fc:85:6b:fc:50:bd:1f:
                    b3:de:c2:03:5b:88:6c:f4:e5:c6:b4:82:f9:0f:23:
                    c5:13:2b:3d:4f:2e:90:1d:de:06:61:2e:cc:a3:f6:
                    7e:54:2a:84:84:a6:b1:48:81:64:d5:b5:fc:2c:f1:
                    aa:f4:82:e5:6b:3c:2e:ff:34:86:14:35:ff:51:49:
                    e2:5f:5f:88:18:80:b0:ba:01:7c:61:01:70:58:dc:
                    d7:34:7b:99:70:7c:16:4e:48:39:ad:ad:ab:60:74:
                    df:a5:4b:65:b2:5e:d7:48:ff:29:c6:88:f1:bb:5f:
                    fe:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:33:A9:CB:29:24:A1:C7:78:65:F2:BF:9C:FB:63:B3:25:1A:0A:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/3de03768-66c0-3077-b23b-aab156174f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.124.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:bc:63:07:0c:56:49:24:06:5b:99:31:b6:b7:3a:29:f0:2a:
         ea:2e:a2:20:15:b4:39:7a:c6:95:d5:f9:a7:3f:86:6c:33:cf:
         d4:53:aa:c9:86:90:33:ad:7d:b2:f1:b3:73:96:07:dc:7b:84:
         27:66:74:eb:ff:f1:bd:85:61:e5:0e:86:88:92:5b:14:65:64:
         7d:16:51:bc:a4:31:7a:97:b6:14:14:88:af:d4:46:b8:06:3b:
         aa:94:3c:e1:89:5c:7f:86:40:0a:4d:56:f2:7a:d2:3d:6e:a3:
         1f:78:ea:f3:d7:4e:29:42:c9:9a:1f:9d:ee:08:86:df:0c:28:
         34:fd:9b:68:3d:49:2c:b6:38:4e:4c:60:ba:07:f0:04:82:6c:
         2a:74:9e:55:d3:ad:69:99:c9:e0:37:7c:01:48:9e:77:0c:21:
         2f:bc:c1:f3:9e:d3:4e:a2:c0:2f:b9:5e:80:db:f3:e2:18:69:
         12:d3:ea:b0:0e:09:fb:9f:fb:f6:08:20:54:33:b8:7f:5b:8c:
         5d:4c:f8:8f:03:1e:e3:74:ff:a4:b6:ea:8f:c7:b8:65:be:53:
         72:d4:b6:0d:c3:77:bc:cd:39:4c:06:b7:24:19:31:73:0a:d1:
         ae:45:dc:0a:d5:36:1d:30:e0:95:03:82:aa:6a:85:9e:46:15:
         8b:51:d9:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHepnZ22YdXHVT0lwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0
NjljMB4XDTIzMDUxMzE2NDI0M1oXDTIzMDYxMzAwNDk1MlowLzEtMCsGA1UEAxMk
YjhlNjhlNmEtMTVlMi00ZGI3LTlmNTQtMzQ4ZjRlNDE5OGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomcLIC4bSal+XcEToqx7Snz/UWe6T+ibo4Gv
qhV7yySuBr+6wNM2hAe7FLxPiETUuwNFzjR2/WTrG9nMenBake5uqpJOeCdmv8gJ
SbAYY82SeXSlTLI3JYg3zUTCuB4zjOKi6T5dgtDgcm81aw/r3cn+ar1xwSQ9zDPd
5gxhHV8Bs/RCOAqTNWBYaawxgvyFa/xQvR+z3sIDW4hs9OXGtIL5DyPFEys9Ty6Q
Hd4GYS7Mo/Z+VCqEhKaxSIFk1bX8LPGq9ILlazwu/zSGFDX/UUniX1+IGICwugF8
YQFwWNzXNHuZcHwWTkg5ra2rYHTfpUtlsl7XSP8pxojxu1/+QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAozqcspJKHHeGXyv5z7Y7MlGgrsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj
YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvM2RlMDM3NjgtNjZjMC0z
MDc3LWIyM2ItYWFiMTU2MTc0ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh
MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw
NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4
MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYnzgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGK8YwcMVkkkBluZMba3OinwKuouoiAVtDl6xpXV+ac/hmwzz9RTqsmG
kDOtfbLxs3OWB9x7hCdmdOv/8b2FYeUOhoiSWxRlZH0WUbykMXqXthQUiK/URrgG
O6qUPOGJXH+GQApNVvJ60j1uox946vPXTilCyZofne4Iht8MKDT9m2g9SSy2OE5M
YLoH8ASCbCp0nlXTrWmZyeA3fAFInncMIS+8wfOe006iwC+5XoDb8+IYaRLT6rAO
Cfuf+/YIIFQzuH9bjF1M+I8DHuN0/6S26o/HuGW+U3LUtg3Dd7zNOUwGtyQZMXMK
0a5F3ArVNh0w4JUDgqpqhZ5GFYtR2d8=
-----END CERTIFICATE-----