Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/a420caee-6873-3a43-a2ca-15b880818f57.roa
File:                     a420caee-6873-3a43-a2ca-15b880818f57.roa (raw, json)
Hash identifier:          nK+etOTAn2CVqv3aKDnOE0VchdTDNdvRmxdwqEeOekE=
Subject key identifier:   BB:CB:F9:12:40:0B:C8:69:B0:14:F5:09:0E:9F:7C:60:55:F2:A9:5E
Certificate issuer:       /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial:       010D0C9F43285844BCF50027B4FAE068B8823F28
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/a420caee-6873-3a43-a2ca-15b880818f57.roa
Signing time:             Wed 31 Jan 2024 17:24:45 +0000
ROA not before:           Wed 31 Jan 2024 17:24:45 +0000
ROA not after:            Tue 30 Apr 2024 16:24:45 +0000
asID:                     23158
IP address blocks:        192.16.96.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bc:f5:00:27:b4:fa:e0:68:b8:82:3f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
        Validity
            Not Before: Jan 31 17:24:45 2024 GMT
            Not After : Apr 30 16:24:45 2024 GMT
        Subject: CN=d4486abb-cb3a-4a17-8137-7387c609903c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:02:64:66:55:e9:2c:fa:db:40:5e:26:89:
                    ce:b2:6c:a7:58:6b:67:b2:44:af:f6:51:70:34:2d:
                    ce:95:0d:8a:8e:1b:83:4c:78:55:f4:7d:be:34:05:
                    ab:76:e8:44:62:37:ed:1c:2c:d0:fc:7d:2a:61:82:
                    cc:0b:33:a9:08:8f:c5:b6:63:5b:80:00:18:5f:91:
                    45:bd:18:6a:9d:c0:5c:a5:fe:76:dd:50:60:6b:9f:
                    de:62:9c:8c:ff:11:4e:10:8d:f2:97:6f:33:9e:c6:
                    d6:4b:a6:62:c8:1b:fc:4b:e8:dd:2e:f8:01:dd:f4:
                    1b:81:4d:81:2d:00:2d:de:fd:90:f5:bb:82:43:a1:
                    2d:e8:06:52:e0:e5:95:f4:81:6b:b9:74:45:6c:2d:
                    2d:f0:05:0c:16:d0:76:b9:ff:60:6a:0a:a4:08:e0:
                    ac:d4:0c:66:5a:f4:ce:87:8a:94:3b:de:eb:6d:38:
                    40:a6:f8:80:bc:f2:ae:c2:80:9e:c9:ac:62:c1:28:
                    f2:0f:bd:ea:3e:6a:e9:3c:97:39:92:1d:59:18:08:
                    c0:3d:c0:5f:7b:b4:29:34:db:34:0a:fa:4f:14:c3:
                    c0:2e:f3:63:d0:7f:2c:70:50:af:18:81:01:cb:fd:
                    3e:3c:7d:92:3d:4c:48:e9:f1:73:8b:52:8c:03:d9:
                    d6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CB:F9:12:40:0B:C8:69:B0:14:F5:09:0E:9F:7C:60:55:F2:A9:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/a420caee-6873-3a43-a2ca-15b880818f57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl

            X509v3 Authority Key Identifier:
                keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:07:d3:13:80:e7:5d:be:c8:68:f6:d2:2f:41:00:a4:8d:52:
         84:99:c3:b2:b4:55:09:31:6a:de:75:81:62:bd:4d:d7:be:66:
         c2:92:34:d7:75:73:97:5f:ca:44:d8:ce:19:8a:82:ef:d7:b9:
         19:60:5d:f4:94:db:a4:d1:40:8a:59:97:31:97:6e:12:7f:9c:
         6f:bf:6b:ab:3a:57:3b:8c:21:8c:03:d2:51:ca:2b:09:87:b2:
         d6:cc:58:6c:92:07:fc:dc:3b:f0:85:2f:5d:d0:d4:81:c2:a4:
         33:11:47:6b:5a:d2:95:8d:1b:ea:99:f5:8a:65:2e:bd:78:38:
         af:a1:aa:7b:99:1f:f6:f2:62:f0:a8:ad:04:df:e1:76:02:de:
         46:b3:09:1e:74:61:45:aa:fa:3e:53:4d:7f:0f:2f:eb:d5:be:
         5a:cb:c7:71:6d:f0:ee:1d:6c:fe:f3:53:67:48:6e:a2:61:20:
         40:64:68:de:59:8e:f1:5e:53:99:f5:b4:23:72:87:08:e2:62:
         77:4c:38:24:64:77:1d:70:f0:f4:8e:55:77:c1:a1:6f:32:fd:
         3c:0a:09:8f:0c:29:f0:0f:81:ea:e7:b9:cc:95:a8:0e:41:05:
         d2:d4:2e:58:20:f5:d8:b8:44:80:ea:bd:c5:10:d7:98:08:bc:
         f3:6b:8d:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWES89QAntPrgaLiCPygwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy
ZDUyMB4XDTI0MDEzMTE3MjQ0NVoXDTI0MDQzMDE2MjQ0NVowLzEtMCsGA1UEAxMk
ZDQ0ODZhYmItY2IzYS00YTE3LTgxMzctNzM4N2M2MDk5MDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHsCZGZV6Sz620BeJonOsmynWGtnskSv9lFw
NC3OlQ2KjhuDTHhV9H2+NAWrduhEYjftHCzQ/H0qYYLMCzOpCI/FtmNbgAAYX5FF
vRhqncBcpf523VBga5/eYpyM/xFOEI3yl28znsbWS6ZiyBv8S+jdLvgB3fQbgU2B
LQAt3v2Q9buCQ6Et6AZS4OWV9IFruXRFbC0t8AUMFtB2uf9gagqkCOCs1AxmWvTO
h4qUO97rbThApviAvPKuwoCeyaxiwSjyD73qPmrpPJc5kh1ZGAjAPcBfe7QpNNs0
CvpPFMPALvNj0H8scFCvGIEBy/0+PH2SPUxI6fFzi1KMA9nWBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLvL+RJAC8hpsBT1CQ6ffGBV8qleMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj
NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvYTQyMGNhZWUtNjg3My0z
YTQzLWEyY2EtMTViODgwODE4ZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll
MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi
MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0
MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwBBgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA4H0xOA512+yGj20i9BAKSNUoSZw7K0VQkxat51gWK9Tde+ZsKSNNd1
c5dfykTYzhmKgu/XuRlgXfSU26TRQIpZlzGXbhJ/nG+/a6s6VzuMIYwD0lHKKwmH
stbMWGySB/zcO/CFL13Q1IHCpDMRR2ta0pWNG+qZ9YplLr14OK+hqnuZH/byYvCo
rQTf4XYC3kazCR50YUWq+j5TTX8PL+vVvlrLx3Ft8O4dbP7zU2dIbqJhIEBkaN5Z
jvFeU5n1tCNyhwjiYndMOCRkdx1w8PSOVXfBoW8y/TwKCY8MKfAPgernucyVqA5B
BdLULlgg9di4RIDqvcUQ15gIvPNrjR4=
-----END CERTIFICATE-----