Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/6e3ac6b6-f160-3cbc-92e9-d62a18e6a04f.roa
File:                     6e3ac6b6-f160-3cbc-92e9-d62a18e6a04f.roa (raw, json)
Hash identifier:          n25SwmUqzB+2yKOQRkjiKWbpGzFGTP8R3CsCXi3HXb4=
Subject key identifier:   B2:70:C1:D2:09:9B:EE:9B:30:D3:87:F7:79:5B:B5:11:4F:6F:7E:39
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F43285842ED10C95EB2E4DC6B589C94C0
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/6e3ac6b6-f160-3cbc-92e9-d62a18e6a04f.roa
Signing time:             Fri 18 Aug 2023 13:25:40 +0000
ROA not before:           Fri 18 Aug 2023 13:25:40 +0000
ROA not after:            Thu 16 Nov 2023 14:25:40 +0000
asID:                     834
IP address blocks:        64.113.9.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ed:10:c9:5e:b2:e4:dc:6b:58:9c:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Aug 18 13:25:40 2023 GMT
            Not After : Nov 16 14:25:40 2023 GMT
        Subject: CN=cebf5de6-7958-4465-8614-a817625334ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:23:00:92:d7:e0:3f:61:72:97:4e:d9:5e:a6:
                    07:6a:7b:1c:fd:db:8a:08:8d:f9:22:a9:88:0d:5a:
                    5c:c0:1a:d1:1f:bd:51:dc:72:5a:ba:5a:c3:a8:a6:
                    22:54:b4:5c:27:98:0a:2b:59:17:ce:73:4e:2c:a3:
                    dc:64:90:ec:6a:5a:82:92:ff:65:ac:89:30:bd:4b:
                    06:5b:44:e2:8c:ec:cf:69:43:e1:f2:da:73:ab:6d:
                    04:b6:d9:77:fd:1a:46:6b:b7:04:f0:39:bb:45:95:
                    51:f4:57:38:bc:53:ed:9d:11:e1:3a:c3:b4:5d:60:
                    af:eb:29:27:8d:a4:3e:aa:a3:b0:c6:0a:8c:39:11:
                    33:74:68:14:fc:93:0f:c3:92:71:fe:b4:8b:4e:51:
                    ad:23:ce:1d:b1:45:0e:f8:5f:70:e1:29:71:95:78:
                    98:3c:46:a6:51:9c:4d:e5:33:15:d2:33:52:27:7d:
                    df:b9:46:9b:cb:f9:bb:80:2a:fa:e0:5f:c2:43:9f:
                    8b:69:30:53:58:36:31:9b:34:e8:d1:a3:e5:5b:ad:
                    81:70:20:d9:25:8e:cf:7d:71:20:cd:a4:9d:4e:94:
                    ea:c7:9a:f5:84:75:c7:4c:b4:99:59:75:fd:9c:14:
                    be:8b:9a:ce:1b:3c:f5:98:a9:8c:9e:97:ac:16:82:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:70:C1:D2:09:9B:EE:9B:30:D3:87:F7:79:5B:B5:11:4F:6F:7E:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/6e3ac6b6-f160-3cbc-92e9-d62a18e6a04f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:5b:bd:19:d8:fc:af:6b:bb:fc:e4:c6:b7:d5:dd:df:a4:f8:
         11:bd:1f:78:cc:92:d7:1d:9a:cb:b0:72:8f:bf:5d:4a:83:06:
         4d:40:d5:cf:a3:6a:5f:ad:59:c8:b8:22:cd:70:1b:df:74:82:
         2e:38:7f:cb:00:0d:4b:4b:3d:ae:71:6a:93:43:1a:59:d3:71:
         5f:82:2a:ae:ce:5a:e5:d5:db:11:bf:17:7c:61:e4:a0:5a:1f:
         a7:d1:fa:c2:60:91:50:a8:48:6a:ca:ac:ea:db:cd:c7:c9:76:
         d5:28:c4:3b:ff:91:fa:da:3c:b3:32:df:c4:77:80:e6:57:b0:
         9f:6b:ac:d3:67:69:87:4a:86:c7:0f:6e:2c:3e:18:03:13:3c:
         2f:4b:37:6c:0f:3b:ea:3d:bb:d2:8e:57:2d:b4:98:fc:ca:28:
         de:fb:01:aa:8a:8a:fa:57:10:fc:6f:4f:0e:65:8d:bb:1f:1e:
         f1:91:68:9d:f2:bb:8f:0c:45:6a:43:2c:14:c6:e1:3d:ae:f0:
         34:92:c3:63:d4:fb:19:00:52:97:be:a8:d9:fc:0a:25:6e:91:
         30:91:3f:6e:df:28:bf:1a:cb:7b:27:a9:12:94:6b:e7:ae:16:
         dc:ce:ca:52:8f:de:02:40:89:eb:40:ec:f5:2d:b5:6b:f9:80:
         0f:96:66:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELtEMlesuTca1iclMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZjYxMzktNTk5My00OTQxLWE4MDMtM2ZmNDUwYTYx
NDllMB4XDTIzMDgxODEzMjU0MFoXDTIzMTExNjE0MjU0MFowLzEtMCsGA1UEAxMk
Y2ViZjVkZTYtNzk1OC00NDY1LTg2MTQtYTgxNzYyNTMzNGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiMAktfgP2Fyl07ZXqYHansc/duKCI35IqmI
DVpcwBrRH71R3HJaulrDqKYiVLRcJ5gKK1kXznNOLKPcZJDsalqCkv9lrIkwvUsG
W0TijOzPaUPh8tpzq20Ettl3/RpGa7cE8Dm7RZVR9Fc4vFPtnRHhOsO0XWCv6ykn
jaQ+qqOwxgqMOREzdGgU/JMPw5Jx/rSLTlGtI84dsUUO+F9w4SlxlXiYPEamUZxN
5TMV0jNSJ33fuUaby/m7gCr64F/CQ5+LaTBTWDYxmzTo0aPlW62BcCDZJY7PfXEg
zaSdTpTqx5r1hHXHTLSZWXX9nBS+i5rOGzz1mKmMnpesFoLYnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJwwdIJm+6bMNOH93lbtRFPb345MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNm
NjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0NTBhNjE0OWUvNmUzYWM2YjYtZjE2MC0z
Y2JjLTkyZTktZDYyYTE4ZTZhMDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRjZjYxMzktNTk5My00OTQxLWE4
MDMtM2ZmNDUwYTYxNDllLzVkY2Y2MTM5LTU5OTMtNDk0MS1hODAzLTNmZjQ1MGE2
MTQ5ZS5jcmwwHwYDVR0jBBgwFoAULLflCxT6PZa8DBcX1K4/3yZtZm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNmNjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0
NTBhNjE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHEJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVbvRnY/K9ru/zkxrfV3d+k+BG9H3jMktcdmsuwco+/XUqDBk1A1c+j
al+tWci4Is1wG990gi44f8sADUtLPa5xapNDGlnTcV+CKq7OWuXV2xG/F3xh5KBa
H6fR+sJgkVCoSGrKrOrbzcfJdtUoxDv/kfraPLMy38R3gOZXsJ9rrNNnaYdKhscP
biw+GAMTPC9LN2wPO+o9u9KOVy20mPzKKN77AaqKivpXEPxvTw5ljbsfHvGRaJ3y
u48MRWpDLBTG4T2u8DSSw2PU+xkAUpe+qNn8CiVukTCRP27fKL8ay3snqRKUa+eu
FtzOylKP3gJAietA7PUttWv5gA+WZsM=
-----END CERTIFICATE-----