Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/d774d089-d5b3-3475-85ba-b9515c51e4a7.roa
File:                     d774d089-d5b3-3475-85ba-b9515c51e4a7.roa (raw, json)
Hash identifier:          KVEuxYYwRRsA04Sahc7NpGmR4za5tf4K711jJAu5OAA=
Subject key identifier:   92:8F:C2:92:11:54:29:F6:6C:5E:16:78:C2:EC:7F:B1:49:40:4C:09
Certificate issuer:       /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial:       010D0C9F4328583C3EA0CFB6A4B76ECC3E5A9700
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/d774d089-d5b3-3475-85ba-b9515c51e4a7.roa
Signing time:             Mon 13 Dec 2021 05:00:00 +0000
ROA not before:           Mon 13 Dec 2021 05:00:00 +0000
ROA not after:            Sun 17 Apr 2022 04:00:00 +0000
asID:                     13706
IP address blocks:        147.124.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:3e:a0:cf:b6:a4:b7:6e:cc:3e:5a:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
        Validity
            Not Before: Dec 13 05:00:00 2021 GMT
            Not After : Apr 17 04:00:00 2022 GMT
        Subject: CN=1f6cbae1-dc19-4018-9f8e-d708bf67bbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f2:8d:43:5f:a9:64:08:be:5b:0d:54:9b:6a:
                    af:9b:b3:cb:81:4c:f3:ca:55:e3:a0:ac:b9:11:02:
                    10:7e:ae:ee:44:d3:f0:88:c5:e2:c0:88:e8:b8:cd:
                    84:a9:92:8e:d1:c8:59:52:70:97:9b:f9:46:aa:8c:
                    75:7d:6d:ca:1e:9e:91:5f:33:85:f7:21:5d:0e:25:
                    bc:91:ed:90:ee:1e:71:8e:a9:58:7c:dc:c7:83:28:
                    ea:30:93:ae:f5:23:3b:85:0b:22:9f:90:ed:52:83:
                    96:1b:b9:a6:e4:ff:28:3e:5c:ff:d3:d4:3c:1d:7f:
                    8b:ca:ef:15:1b:c2:08:d3:f8:c3:a1:c2:d8:04:1c:
                    a7:ef:d2:37:04:f6:94:1f:15:2e:f7:bc:78:55:12:
                    ba:38:0e:d7:95:bb:4a:77:9d:92:86:45:89:b3:20:
                    89:f4:7f:e7:a6:90:82:4e:0e:8b:b3:4c:e5:2a:3f:
                    9f:4e:c0:13:5a:66:6b:5c:9b:26:08:e3:67:16:09:
                    92:a5:19:60:a8:0a:c1:e7:01:b3:ae:b0:af:5e:74:
                    9d:51:75:b4:cb:6a:87:e9:2a:49:9c:56:a9:9a:bd:
                    d6:e7:99:b0:7c:73:6d:8f:a5:93:83:08:7d:c2:e3:
                    2e:c1:ac:d3:7d:97:51:c3:17:67:00:95:99:7d:97:
                    23:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8F:C2:92:11:54:29:F6:6C:5E:16:78:C2:EC:7F:B1:49:40:4C:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/d774d089-d5b3-3475-85ba-b9515c51e4a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl

            X509v3 Authority Key Identifier:
                keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:6c:dd:90:96:ba:67:7b:ef:6b:1c:c6:51:90:a7:fe:ff:a4:
         36:07:f9:7f:3d:6f:26:46:e6:96:ca:39:a8:f1:48:be:b8:54:
         03:76:13:d1:e4:d1:3b:72:50:8a:b7:d7:57:62:46:7e:95:4e:
         45:67:9a:d5:3d:e8:99:75:02:87:a8:80:07:e7:e3:29:d4:84:
         8d:b1:fc:63:d5:cd:36:da:69:19:d9:49:1a:8a:0c:fc:eb:b4:
         38:87:de:dc:57:da:e6:89:52:aa:d1:59:7e:d5:00:81:53:46:
         57:58:29:a4:d9:54:68:5a:9a:ec:17:59:af:ea:3f:52:5c:7e:
         00:d9:4b:6d:80:52:bf:5b:a4:d0:37:c6:34:89:bd:10:74:f9:
         5c:ad:cb:9b:eb:df:c0:8b:8b:5e:db:4f:4e:13:ab:3b:36:d4:
         c6:2a:48:b9:5c:4f:a3:b0:e9:e8:46:7b:61:51:50:37:ac:c1:
         9d:3a:dd:39:93:89:20:53:10:e3:53:e3:57:51:d7:fa:62:50:
         c8:3e:80:f8:76:af:4e:82:c4:41:16:7a:91:8c:bd:28:e2:bf:
         d7:87:a7:b1:58:70:92:db:57:5d:ec:1a:68:ff:13:73:70:3d:
         cc:0d:12:06:92:1e:87:c0:51:90:df:d0:96:8f:28:7b:e7:7b:
         35:4d:83:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDw+oM+2pLduzD5alwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2
MzhiMB4XDTIxMTIxMzA1MDAwMFoXDTIyMDQxNzA0MDAwMFowLzEtMCsGA1UEAxMk
MWY2Y2JhZTEtZGMxOS00MDE4LTlmOGUtZDcwOGJmNjdiYmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/KNQ1+pZAi+Ww1Um2qvm7PLgUzzylXjoKy5
EQIQfq7uRNPwiMXiwIjouM2EqZKO0chZUnCXm/lGqox1fW3KHp6RXzOF9yFdDiW8
ke2Q7h5xjqlYfNzHgyjqMJOu9SM7hQsin5DtUoOWG7mm5P8oPlz/09Q8HX+Lyu8V
G8II0/jDocLYBByn79I3BPaUHxUu97x4VRK6OA7XlbtKd52ShkWJsyCJ9H/nppCC
Tg6Ls0zlKj+fTsATWmZrXJsmCONnFgmSpRlgqArB5wGzrrCvXnSdUXW0y2qH6SpJ
nFapmr3W55mwfHNtj6WTgwh9wuMuwazTfZdRwxdnAJWZfZcjHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJKPwpIRVCn2bF4WeMLsf7FJQEwJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MTdj
MDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvZDc3NGQwODktZDViMy0z
NDc1LTg1YmEtYjk1MTVjNTFlNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDE3YzA2ZDAtMzIwMy00NGZkLWIx
NjQtMGFlZDUwZjU2MzhiLzQxN2MwNmQwLTMyMDMtNDRmZC1iMTY0LTBhZWQ1MGY1
NjM4Yi5jcmwwHwYDVR0jBBgwFoAUAM6gxUxaaLPRCSpmePODyUIHxf0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVk
NTBmNTYzOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFts3ZCWumd772scxlGQp/7/pDYH+X89byZG5pbKOajxSL64VAN2E9Hk
0TtyUIq311diRn6VTkVnmtU96Jl1AoeogAfn4ynUhI2x/GPVzTbaaRnZSRqKDPzr
tDiH3txX2uaJUqrRWX7VAIFTRldYKaTZVGhamuwXWa/qP1JcfgDZS22AUr9bpNA3
xjSJvRB0+Vyty5vr38CLi17bT04Tqzs21MYqSLlcT6Ow6ehGe2FRUDeswZ063TmT
iSBTEONT41dR1/piUMg+gPh2r06CxEEWepGMvSjiv9eHp7FYcJLbV13sGmj/E3Nw
PcwNEgaSHofAUZDf0JaPKHvnezVNg1c=
-----END CERTIFICATE-----