Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5cdca277-7fda-3fc4-bf91-e3640b9b4c7e.roa
File:                     5cdca277-7fda-3fc4-bf91-e3640b9b4c7e.roa (raw, json)
Hash identifier:          OPOgljXHWfmIuVJ+JOVjndmWYkr7Z5xuJulwFefsQTU=
Subject key identifier:   E9:41:B3:02:CB:44:E7:B8:16:97:B3:60:1E:CE:49:84:B5:2B:98:10
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858431FE0E998544B1B590296D940
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5cdca277-7fda-3fc4-bf91-e3640b9b4c7e.roa
Signing time:             Mon 04 Sep 2023 12:00:00 +0000
ROA not before:           Mon 04 Sep 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        162.158.197.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:1f:e0:e9:98:54:4b:1b:59:02:96:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep  4 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=8c2ef98b-e8b1-4073-bd36-8408c4ff181e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:f3:30:fe:04:2e:e4:e2:3f:40:4c:8f:cb:
                    b0:d8:c6:75:50:61:6e:f2:42:7c:86:50:83:81:52:
                    7d:11:02:23:5f:57:6d:e8:aa:1c:d8:9b:b4:a5:0b:
                    96:f5:c7:db:be:be:6b:ee:cf:90:22:67:68:dd:26:
                    5d:9c:39:a2:9c:5e:05:de:88:41:c1:b5:d1:a7:d2:
                    bb:15:2e:69:42:4a:56:b3:6d:72:3b:b6:6d:00:71:
                    eb:34:9d:df:f6:d4:51:72:85:25:46:df:f0:97:1f:
                    a5:ae:4c:1b:67:e6:82:ff:28:6a:90:0f:fd:55:c8:
                    99:7f:75:b6:31:d6:52:c4:13:d4:c1:a9:43:ca:97:
                    24:5a:ac:06:d6:18:57:5b:5a:bb:0e:cb:a6:18:69:
                    22:ac:18:14:7c:bd:7e:7e:20:20:e8:25:5c:3c:82:
                    89:c1:cf:d7:c2:e5:e8:88:df:98:10:04:42:34:ea:
                    ed:99:4f:31:b5:85:68:0b:b9:23:11:8e:f0:e9:35:
                    5a:f5:52:9a:7b:d1:b8:00:9a:9b:7b:9b:b1:10:00:
                    13:19:83:8b:d3:13:21:88:ae:f5:99:a9:d7:aa:31:
                    fb:c6:9c:d1:01:e8:e4:c7:b4:26:0f:c4:b7:d3:ec:
                    9d:d0:53:76:03:6e:6b:ca:e5:32:d9:bf:3f:2e:5e:
                    93:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:41:B3:02:CB:44:E7:B8:16:97:B3:60:1E:CE:49:84:B5:2B:98:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5cdca277-7fda-3fc4-bf91-e3640b9b4c7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:99:76:67:b1:89:a9:0a:6b:f0:67:ac:c5:da:c0:b3:89:e0:
         87:20:5f:06:47:12:0c:b4:da:20:09:bf:85:3b:1c:51:00:57:
         13:5a:29:9f:10:78:a9:13:2a:56:3a:13:da:61:2f:26:99:53:
         d4:01:88:b5:3d:6d:dd:71:a8:f8:0d:92:35:6e:3b:30:60:d6:
         0a:9d:c5:80:9e:b8:c1:62:a2:95:b0:00:93:49:68:4b:fc:73:
         42:d9:80:7b:1c:19:d3:01:13:83:50:4f:79:1e:b7:ef:d2:54:
         fc:a8:f5:d5:7e:8c:e0:d1:70:91:e5:ad:98:29:ae:98:3a:4d:
         55:32:7f:af:ca:3d:9a:5a:62:39:c9:f4:0c:57:c4:58:1d:e2:
         90:17:d0:2f:c2:63:83:86:ef:ca:c5:77:8f:37:c4:86:ba:6f:
         20:93:12:72:85:15:dd:40:b7:ec:93:09:0d:4c:3a:af:a3:b7:
         93:de:fc:55:26:40:f5:cc:1a:f5:d6:11:19:9e:19:91:08:7f:
         ad:99:94:ae:c7:01:4f:d6:d2:6e:d9:1b:e9:08:64:47:d9:ce:
         62:de:c0:1f:b2:ad:57:45:07:e2:9e:e2:c2:e6:39:dc:73:83:
         1d:4c:02:cb:7b:7c:bf:11:27:c2:90:be:ca:f1:be:02:58:84:
         7d:e7:15:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMf4OmYVEsbWQKW2UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIzMDkwNDEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
OGMyZWY5OGItZThiMS00MDczLWJkMzYtODQwOGM0ZmYxODFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsfzMP4ELuTiP0BMj8uw2MZ1UGFu8kJ8hlCD
gVJ9EQIjX1dt6Koc2Ju0pQuW9cfbvr5r7s+QImdo3SZdnDminF4F3ohBwbXRp9K7
FS5pQkpWs21yO7ZtAHHrNJ3f9tRRcoUlRt/wlx+lrkwbZ+aC/yhqkA/9VciZf3W2
MdZSxBPUwalDypckWqwG1hhXW1q7DsumGGkirBgUfL1+fiAg6CVcPIKJwc/XwuXo
iN+YEARCNOrtmU8xtYVoC7kjEY7w6TVa9VKae9G4AJqbe5uxEAATGYOL0xMhiK71
manXqjH7xpzRAejkx7QmD8S30+yd0FN2A25ryuUy2b8/Ll6TMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOlBswLLROe4FpezYB7OSYS1K5gQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWNkY2EyNzctN2ZkYS0z
ZmM0LWJmOTEtZTM2NDBiOWI0YzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop7FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALuZdmexiakKa/BnrMXawLOJ4IcgXwZHEgy02iAJv4U7HFEAVxNaKZ8Q
eKkTKlY6E9phLyaZU9QBiLU9bd1xqPgNkjVuOzBg1gqdxYCeuMFiopWwAJNJaEv8
c0LZgHscGdMBE4NQT3ket+/SVPyo9dV+jODRcJHlrZgprpg6TVUyf6/KPZpaYjnJ
9AxXxFgd4pAX0C/CY4OG78rFd483xIa6byCTEnKFFd1At+yTCQ1MOq+jt5Pe/FUm
QPXMGvXWERmeGZEIf62ZlK7HAU/W0m7ZG+kIZEfZzmLewB+yrVdFB+Ke4sLmOdxz
gx1MAst7fL8RJ8KQvsrxvgJYhH3nFTs=
-----END CERTIFICATE-----