Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/29348786-4882-3790-911f-4240189724bf.roa
File:                     29348786-4882-3790-911f-4240189724bf.roa (raw, json)
Hash identifier:          bg2GLfl4lM9MiX6z8mQeFjKUrHv737j7hvC4S+/+RN8=
Subject key identifier:   34:27:12:ED:17:28:8B:D7:0A:54:A1:8D:83:7F:66:F1:2E:61:BD:DE
Certificate issuer:       /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial:       010D0C9F4328583D9D868EE38C01F601E6BED200
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/29348786-4882-3790-911f-4240189724bf.roa
Signing time:             Mon 18 Apr 2022 04:00:00 +0000
ROA not before:           Mon 18 Apr 2022 04:00:00 +0000
ROA not after:            Wed 21 Dec 2022 05:00:00 +0000
asID:                     397423
IP address blocks:        147.124.204.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:9d:86:8e:e3:8c:01:f6:01:e6:be:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
        Validity
            Not Before: Apr 18 04:00:00 2022 GMT
            Not After : Dec 21 05:00:00 2022 GMT
        Subject: CN=c5fb9036-8417-483a-af14-15db491b9ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:91:97:69:43:38:8e:f5:8a:2f:cf:59:1c:
                    da:9b:56:3f:ce:2d:6a:0c:02:e5:1b:63:a6:80:17:
                    6a:d8:6a:0d:67:96:43:cc:4a:65:30:32:db:30:5f:
                    56:05:4b:71:05:36:ef:3c:9a:30:5b:78:a7:01:55:
                    b6:ab:17:9b:20:bb:a6:a3:4f:9c:b7:6c:21:b1:a4:
                    3e:69:a1:b2:6d:b8:e7:3e:f5:2e:f1:3c:e3:7d:b1:
                    e8:e2:90:cd:6f:22:35:8b:4e:d9:64:86:89:79:de:
                    48:74:44:3f:1e:33:07:c3:bb:b0:51:ea:8d:ec:3b:
                    5f:16:e4:58:e2:b5:1c:d5:3a:95:60:25:c6:68:f5:
                    30:99:b3:cb:35:85:83:58:5d:ed:87:a2:c4:03:db:
                    b7:e6:ec:84:a4:13:73:1f:27:e6:ba:e2:88:40:dc:
                    4d:95:19:53:5c:9c:cb:80:e5:6d:50:8f:fc:af:35:
                    f4:18:3e:a7:0f:42:6d:71:82:3b:e0:d6:00:bc:10:
                    fc:26:a4:b4:64:64:3b:44:a8:10:0c:ee:e0:f8:90:
                    e6:01:ff:9c:a2:d1:1b:0a:0c:c6:45:7f:2f:af:43:
                    43:14:3f:98:1e:c6:68:25:22:0f:eb:7b:28:48:65:
                    bc:ef:55:03:79:1f:e1:30:a9:ab:fb:c7:fa:bf:a5:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:27:12:ED:17:28:8B:D7:0A:54:A1:8D:83:7F:66:F1:2E:61:BD:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/29348786-4882-3790-911f-4240189724bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl

            X509v3 Authority Key Identifier:
                keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:ec:53:a5:2a:63:a0:fc:d5:37:53:98:81:8f:a4:5d:45:2e:
         3f:dd:ab:dc:9b:d2:87:d0:a0:53:dd:25:57:67:f0:9c:15:36:
         70:c2:6c:6f:a2:44:d7:3a:c5:f9:06:73:eb:47:34:81:2e:05:
         d4:53:85:5c:54:9b:81:af:7b:8b:ed:f9:fe:dd:47:6d:ed:0b:
         ae:4a:fc:d6:dc:08:fe:57:00:9a:9e:e7:a6:90:77:c9:6f:0e:
         11:ca:a2:0c:e7:53:38:ce:5e:a0:e7:ee:89:57:6f:48:60:93:
         8c:06:de:e8:89:e3:9b:95:91:5f:2f:ca:e5:40:a1:67:58:00:
         9a:7c:06:70:fb:43:b4:27:ca:91:fc:54:26:bd:62:d2:ee:10:
         1e:ed:c3:0d:89:80:be:2c:5e:5c:7d:d2:53:02:d8:f3:0b:a0:
         cf:7a:b4:a3:6a:0a:7d:b2:bd:d4:94:7c:8a:55:be:f8:9f:10:
         9a:6c:fe:5b:85:1d:41:40:ef:ab:e9:a7:78:e6:ea:a1:49:c0:
         87:dc:21:00:d5:7f:be:b0:a4:f1:b7:ed:48:b2:0c:d5:32:3c:
         c7:81:45:b6:5e:db:a1:2e:4a:42:b3:95:2e:70:ee:5f:32:67:
         13:c8:2a:49:eb:d4:ca:00:09:0f:37:71:3d:94:a6:a6:b2:84:
         a2:d8:69:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2dho7jjAH2Aea+0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2
MzhiMB4XDTIyMDQxODA0MDAwMFoXDTIyMTIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
YzVmYjkwMzYtODQxNy00ODNhLWFmMTQtMTVkYjQ5MWI5ZWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V+Rl2lDOI71ii/PWRzam1Y/zi1qDALlG2Om
gBdq2GoNZ5ZDzEplMDLbMF9WBUtxBTbvPJowW3inAVW2qxebILumo0+ct2whsaQ+
aaGybbjnPvUu8TzjfbHo4pDNbyI1i07ZZIaJed5IdEQ/HjMHw7uwUeqN7DtfFuRY
4rUc1TqVYCXGaPUwmbPLNYWDWF3th6LEA9u35uyEpBNzHyfmuuKIQNxNlRlTXJzL
gOVtUI/8rzX0GD6nD0JtcYI74NYAvBD8JqS0ZGQ7RKgQDO7g+JDmAf+cotEbCgzG
RX8vr0NDFD+YHsZoJSIP63soSGW871UDeR/hMKmr+8f6v6WauwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDQnEu0XKIvXClShjYN/ZvEuYb3eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MTdj
MDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvMjkzNDg3ODYtNDg4Mi0z
NzkwLTkxMWYtNDI0MDE4OTcyNGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDE3YzA2ZDAtMzIwMy00NGZkLWIx
NjQtMGFlZDUwZjU2MzhiLzQxN2MwNmQwLTMyMDMtNDRmZC1iMTY0LTBhZWQ1MGY1
NjM4Yi5jcmwwHwYDVR0jBBgwFoAUAM6gxUxaaLPRCSpmePODyUIHxf0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVk
NTBmNTYzOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANzsU6UqY6D81TdTmIGPpF1FLj/dq9yb0ofQoFPdJVdn8JwVNnDCbG+i
RNc6xfkGc+tHNIEuBdRThVxUm4Gve4vt+f7dR23tC65K/NbcCP5XAJqe56aQd8lv
DhHKogznUzjOXqDn7olXb0hgk4wG3uiJ45uVkV8vyuVAoWdYAJp8BnD7Q7QnypH8
VCa9YtLuEB7tww2JgL4sXlx90lMC2PMLoM96tKNqCn2yvdSUfIpVvvifEJps/luF
HUFA76vpp3jm6qFJwIfcIQDVf76wpPG37UiyDNUyPMeBRbZe26EuSkKzlS5w7l8y
ZxPIKknr1MoACQ83cT2UpqayhKLYaeY=
-----END CERTIFICATE-----