Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6ec97a9b-1748-3797-a262-73aadacd4857.roa
File:                     6ec97a9b-1748-3797-a262-73aadacd4857.roa (raw, json)
Hash identifier:          94HwIhoCZiEipAS6PLfkHnuJ5lglNjOYFXWrU+wGbkI=
Subject key identifier:   40:C2:C4:FC:F2:D1:96:84:C7:21:4C:26:10:1D:4D:C7:76:6E:2E:4E
Certificate issuer:       /CN=6b2c5d67-bf55-4550-be59-c1aa5e63fd2f
Certificate serial:       010D0C9F43285841E46DDD538B49B7362EF75E00
Authority key identifier: D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6ec97a9b-1748-3797-a262-73aadacd4857.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sun 09 Jul 2023 13:50:23 +0000
asID:                     61317
IP address blocks:        74.80.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:dd:53:8b:49:b7:36:2e:f7:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c5d67-bf55-4550-be59-c1aa5e63fd2f
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul  9 13:50:23 2023 GMT
        Subject: CN=db521421-8fe0-448e-9451-930243395a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:23:b8:e7:37:9d:d6:93:87:43:70:2c:2c:
                    27:b8:4e:5b:28:02:a2:bd:69:b5:2c:91:38:66:e2:
                    19:0f:e4:69:16:f3:39:6d:f7:e9:2e:4f:e8:19:82:
                    f0:79:76:09:34:77:83:32:69:a0:91:62:5b:4f:73:
                    7e:89:4f:a9:e7:30:9d:6a:dd:03:ee:bf:b7:60:86:
                    18:c6:7f:1a:22:32:71:ec:2c:5a:49:5e:0f:69:b0:
                    58:77:05:f1:8a:f9:65:dc:a6:d5:2f:80:da:29:a0:
                    13:af:d0:1b:a5:04:86:04:1d:4b:76:0a:21:6d:fe:
                    af:e6:50:d0:0c:22:69:6f:7e:25:c6:d6:94:b4:79:
                    bb:d6:58:be:b9:ad:ba:98:02:3c:7f:9b:e8:98:40:
                    ee:dc:f7:23:1f:3a:9f:a0:79:b7:b3:65:76:78:50:
                    10:f8:8b:3a:db:9d:07:2c:c5:f8:b3:47:f7:82:af:
                    00:e4:22:94:46:27:6b:8d:25:b3:14:18:b8:e9:a3:
                    2a:d6:6b:31:21:76:29:be:af:ea:41:f1:41:f5:0a:
                    64:6a:dd:29:0b:a9:b0:59:34:b7:31:62:96:de:f4:
                    ab:6a:64:10:77:26:24:8e:34:2c:cd:74:2e:54:f7:
                    7d:e9:cb:81:a5:16:10:17:95:6f:2e:f6:71:c2:39:
                    a9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C2:C4:FC:F2:D1:96:84:C7:21:4C:26:10:1D:4D:C7:76:6E:2E:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6ec97a9b-1748-3797-a262-73aadacd4857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.crl

            X509v3 Authority Key Identifier:
                keyid:D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:fd:e7:0a:d0:d5:19:88:a0:62:1a:e5:9d:33:cf:54:16:db:
         bd:3e:c6:95:62:67:3a:f1:9e:93:af:f7:96:f1:80:f7:fb:46:
         2d:12:50:d8:5e:f2:9c:f9:3a:9c:cf:1c:11:8e:bc:34:7a:2e:
         f2:fc:35:e0:dc:9a:84:ac:15:0b:42:66:01:75:b5:0c:1b:8a:
         b6:72:fa:31:65:ea:75:8c:31:fd:cb:b5:7a:a5:07:d6:13:27:
         0f:1f:c5:85:18:41:e9:25:d3:24:c1:2c:84:1e:33:f2:cd:20:
         fe:25:15:89:8d:e2:87:81:80:7e:05:0b:de:3b:19:10:df:3d:
         8c:00:20:76:df:29:d6:da:84:49:a8:85:43:18:bc:79:05:e8:
         c4:05:ec:35:92:17:16:b0:b2:72:1a:3c:56:62:2a:e8:7c:5a:
         5a:08:d2:7c:47:10:a6:7a:01:58:58:62:a4:3f:88:34:42:e7:
         b2:d3:06:1f:1e:14:23:e1:c0:79:d8:f3:4c:ef:3e:02:65:8a:
         47:ab:f7:3a:93:d6:60:97:0f:a8:65:76:7b:73:f2:ef:da:f6:
         69:13:ec:b3:f8:25:62:51:68:36:97:20:7e:61:42:1a:70:64:
         d6:98:84:86:5c:ee:cf:8b:4d:af:49:fc:57:c6:a2:14:66:f1:
         96:aa:04:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbd1Ti0m3Ni73XgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmIyYzVkNjctYmY1NS00NTUwLWJlNTktYzFhYTVlNjNm
ZDJmMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDcwOTEzNTAyM1owLzEtMCsGA1UEAxMk
ZGI1MjE0MjEtOGZlMC00NDhlLTk0NTEtOTMwMjQzMzk1YTE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXkjuOc3ndaTh0NwLCwnuE5bKAKivWm1LJE4
ZuIZD+RpFvM5bffpLk/oGYLweXYJNHeDMmmgkWJbT3N+iU+p5zCdat0D7r+3YIYY
xn8aIjJx7CxaSV4PabBYdwXxivll3KbVL4DaKaATr9AbpQSGBB1Ldgohbf6v5lDQ
DCJpb34lxtaUtHm71li+ua26mAI8f5vomEDu3PcjHzqfoHm3s2V2eFAQ+Is6250H
LMX4s0f3gq8A5CKURidrjSWzFBi46aMq1msxIXYpvq/qQfFB9Qpkat0pC6mwWTS3
MWKW3vSramQQdyYkjjQszXQuVPd96cuBpRYQF5VvLvZxwjmpyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEDCxPzy0ZaExyFMJhAdTcd2bi5OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjJj
NWQ2Ny1iZjU1LTQ1NTAtYmU1OS1jMWFhNWU2M2ZkMmYvNmVjOTdhOWItMTc0OC0z
Nzk3LWEyNjItNzNhYWRhY2Q0ODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIyYzVkNjctYmY1NS00NTUwLWJl
NTktYzFhYTVlNjNmZDJmLzZiMmM1ZDY3LWJmNTUtNDU1MC1iZTU5LWMxYWE1ZTYz
ZmQyZi5jcmwwHwYDVR0jBBgwFoAU0SXgqnpruPPsxgmPReU+0LuatDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82YjJjNWQ2Ny1iZjU1LTQ1NTAtYmU1OS1jMWFh
NWU2M2ZkMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlD/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACz95wrQ1RmIoGIa5Z0zz1QW270+xpViZzrxnpOv95bxgPf7Ri0SUNhe
8pz5OpzPHBGOvDR6LvL8NeDcmoSsFQtCZgF1tQwbirZy+jFl6nWMMf3LtXqlB9YT
Jw8fxYUYQekl0yTBLIQeM/LNIP4lFYmN4oeBgH4FC947GRDfPYwAIHbfKdbahEmo
hUMYvHkF6MQF7DWSFxawsnIaPFZiKuh8WloI0nxHEKZ6AVhYYqQ/iDRC57LTBh8e
FCPhwHnY80zvPgJliker9zqT1mCXD6hldntz8u/a9mkT7LP4JWJRaDaXIH5hQhpw
ZNaYhIZc7s+LTa9J/FfGohRm8ZaqBEI=
-----END CERTIFICATE-----