Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cf01b129-9e6c-31c2-b2ea-bfde6ecc6567.roa
File:                     cf01b129-9e6c-31c2-b2ea-bfde6ecc6567.roa (raw, json)
Hash identifier:          fGV7Rm6Kr49FxmiXXVX/BAYFIdqapZSIy1zDRHrnNJU=
Subject key identifier:   EB:80:E3:12:F9:3C:E7:E2:3F:7C:43:F2:3A:4F:03:D0:F7:E8:71:37
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285844BB2A4E77417167DD6D431B00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cf01b129-9e6c-31c2-b2ea-bfde6ecc6567.roa
Signing time:             Wed 31 Jan 2024 02:00:26 +0000
ROA not before:           Wed 31 Jan 2024 02:00:26 +0000
ROA not after:            Tue 30 Apr 2024 01:00:26 +0000
asID:                     20940
IP address blocks:        157.238.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bb:2a:4e:77:41:71:67:dd:6d:43:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jan 31 02:00:26 2024 GMT
            Not After : Apr 30 01:00:26 2024 GMT
        Subject: CN=b5db5614-5d3d-4154-b35e-18ff69db7e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d7:12:0c:d4:54:59:47:cb:7d:36:88:ce:1c:
                    84:1b:5d:79:b7:97:c6:43:c9:59:4b:64:78:39:41:
                    29:e6:84:40:9c:c7:a2:c3:11:05:f2:63:cd:ed:da:
                    42:0b:30:7b:3f:84:8d:b5:8a:64:0a:e3:e7:a5:16:
                    61:e1:0d:11:d5:2f:fd:2c:08:c0:3e:95:ab:4b:bb:
                    03:3b:34:41:d0:db:d7:45:44:28:40:37:f7:8e:08:
                    61:1d:70:73:e6:9a:42:0c:e1:2a:16:b9:84:44:9b:
                    60:43:47:ba:56:69:fa:8a:e6:a6:ed:4a:e7:0c:1b:
                    f4:2a:d4:bc:1f:13:0e:77:99:e0:43:21:33:35:a5:
                    6a:12:2f:31:3b:d4:da:a1:e1:d1:3a:e9:33:c4:af:
                    41:bf:bc:c7:54:b8:8c:38:5f:a2:40:12:15:14:97:
                    95:76:39:ce:6d:8d:21:6d:b1:5f:50:56:61:75:d0:
                    cc:38:93:0a:59:a8:e5:74:a9:cf:36:43:39:c4:3d:
                    f7:4f:ae:0d:ac:77:62:c1:a5:54:cf:d8:64:8e:39:
                    ed:90:d6:8b:7b:e3:b4:26:8e:ae:ac:ed:c0:82:de:
                    d0:e7:58:c4:f8:e9:db:b9:ec:88:4b:35:95:df:d4:
                    c5:e9:1f:bb:b9:fd:d0:73:f5:a8:23:5a:58:94:4b:
                    d1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:80:E3:12:F9:3C:E7:E2:3F:7C:43:F2:3A:4F:03:D0:F7:E8:71:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cf01b129-9e6c-31c2-b2ea-bfde6ecc6567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.238.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:26:cb:66:c0:53:97:d8:7d:f0:61:ac:10:0c:69:2f:9d:12:
         89:36:a4:c1:3f:2e:30:9a:97:1f:61:33:23:22:2f:c8:ec:06:
         7b:3e:1b:c9:12:6c:3d:e3:53:5b:44:1e:be:be:35:64:36:7c:
         72:1a:1e:39:81:00:68:8d:24:d4:59:73:68:e1:2e:18:a0:0f:
         71:c1:a2:54:3f:8f:ec:30:2b:d4:f2:ad:9e:e4:b0:1a:61:dc:
         70:d2:8f:24:34:63:75:8e:1d:ec:35:0a:66:d4:d5:ea:7d:67:
         4a:cb:26:8b:92:00:6b:a3:c7:44:14:ed:49:35:da:c9:90:72:
         18:2d:6c:70:3f:0e:59:6d:88:5c:a4:e8:e7:32:c5:1e:b5:73:
         5c:c7:30:aa:ba:80:42:f8:6e:5e:c4:f9:2d:ec:ac:a7:9b:47:
         ca:30:74:3b:e6:de:e2:ed:f7:00:e7:c7:60:3f:40:ab:9d:c8:
         e0:95:5b:fe:8c:53:f5:98:b4:0a:72:01:44:37:b0:fe:bb:fd:
         71:81:22:15:2c:66:4f:b8:d0:e6:3a:0d:58:86:5b:0b:5e:1d:
         1d:31:52:41:e0:2f:00:0b:4a:16:fa:01:65:3a:39:75:ea:f3:
         ff:5a:f8:d0:92:40:28:94:03:d1:50:fe:c9:b8:fc:bc:29:b7:
         3b:b7:7d:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWES7Kk53QXFn3W1DGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MDEzMTAyMDAyNloXDTI0MDQzMDAxMDAyNlowLzEtMCsGA1UEAxMk
YjVkYjU2MTQtNWQzZC00MTU0LWIzNWUtMThmZjY5ZGI3ZTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNcSDNRUWUfLfTaIzhyEG115t5fGQ8lZS2R4
OUEp5oRAnMeiwxEF8mPN7dpCCzB7P4SNtYpkCuPnpRZh4Q0R1S/9LAjAPpWrS7sD
OzRB0NvXRUQoQDf3jghhHXBz5ppCDOEqFrmERJtgQ0e6Vmn6iuam7UrnDBv0KtS8
HxMOd5ngQyEzNaVqEi8xO9TaoeHROukzxK9Bv7zHVLiMOF+iQBIVFJeVdjnObY0h
bbFfUFZhddDMOJMKWajldKnPNkM5xD33T64NrHdiwaVUz9hkjjntkNaLe+O0Jo6u
rO3Agt7Q51jE+OnbueyISzWV39TF6R+7uf3Qc/WoI1pYlEvRPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuA4xL5POfiP3xD8jpPA9D36HE3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2YwMWIxMjktOWU2Yy0z
MWMyLWIyZWEtYmZkZTZlY2M2NTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAne5PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACYmy2bAU5fYffBhrBAMaS+dEok2pME/LjCalx9hMyMiL8jsBns+G8kS
bD3jU1tEHr6+NWQ2fHIaHjmBAGiNJNRZc2jhLhigD3HBolQ/j+wwK9TyrZ7ksBph
3HDSjyQ0Y3WOHew1CmbU1ep9Z0rLJouSAGujx0QU7Uk12smQchgtbHA/DlltiFyk
6OcyxR61c1zHMKq6gEL4bl7E+S3srKebR8owdDvm3uLt9wDnx2A/QKudyOCVW/6M
U/WYtApyAUQ3sP67/XGBIhUsZk+40OY6DViGWwteHR0xUkHgLwALShb6AWU6OXXq
8/9a+NCSQCiUA9FQ/sm4/Lwptzu3fY4=
-----END CERTIFICATE-----