Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/41761009-d5ab-34f6-86a1-0c4979d8062a.roa
File:                     41761009-d5ab-34f6-86a1-0c4979d8062a.roa (raw, json)
Hash identifier:          4dkJzjQ2B3FWeh0n+TVgfvDC5aYOOrJdktM8iIu3jy0=
Subject key identifier:   28:DE:56:15:CA:58:E0:FB:21:69:4E:AC:02:2E:5E:61:D4:FD:BC:32
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F43285843156ECD8540E64E7BA81F5000
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/41761009-d5ab-34f6-86a1-0c4979d8062a.roa
Signing time:             Sat 02 Sep 2023 00:27:26 +0000
ROA not before:           Sat 02 Sep 2023 00:27:26 +0000
ROA not after:            Fri 01 Dec 2023 01:27:26 +0000
asID:                     17378
IP address blocks:        2607:fc38::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:15:6e:cd:85:40:e6:4e:7b:a8:1f:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Sep  2 00:27:26 2023 GMT
            Not After : Dec  1 01:27:26 2023 GMT
        Subject: CN=c00245fa-f6a5-4be4-8178-0a03e5945a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:7f:5f:ba:e6:ff:46:3c:30:04:69:0e:b1:
                    78:e7:0b:0b:5b:0b:5d:d0:d3:f4:8f:03:b1:74:59:
                    07:df:ef:ac:08:59:f6:dc:74:0c:6b:0d:c8:9e:78:
                    50:af:37:0a:30:65:56:03:79:9f:07:38:f6:25:24:
                    51:99:92:80:e9:49:78:dd:2d:b2:31:c1:11:dd:02:
                    ef:91:9d:e2:e7:4d:a4:8f:70:f6:69:0e:79:ca:43:
                    95:df:93:de:40:16:e5:7d:a9:58:c1:6f:74:1f:65:
                    5f:79:ed:c7:6b:f1:18:eb:36:e2:2a:7f:fb:ab:97:
                    05:64:36:66:66:4f:15:fd:a7:a3:0a:14:44:1e:a6:
                    b3:45:8a:00:8c:20:11:19:1d:fe:7e:63:96:6f:48:
                    bf:92:f2:71:5a:10:39:45:33:59:cc:19:8d:fd:21:
                    20:a0:3d:03:c7:4f:cd:8f:9b:8d:24:4a:1e:d4:99:
                    b6:96:8d:e3:fc:3f:55:ce:b1:0d:5f:65:20:84:a9:
                    f1:91:d8:d2:34:e5:bc:fe:eb:84:9b:02:db:57:7e:
                    a3:d2:a9:92:1c:23:7e:c9:67:62:4e:49:58:d2:2d:
                    d8:e8:34:63:e4:b1:60:5e:43:6f:11:8a:a6:de:f9:
                    0c:44:41:18:c0:1d:8d:d9:f6:f6:f2:85:01:3c:06:
                    30:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DE:56:15:CA:58:E0:FB:21:69:4E:AC:02:2E:5E:61:D4:FD:BC:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/41761009-d5ab-34f6-86a1-0c4979d8062a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc38::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:fe:bf:25:a0:83:8d:4e:0a:f2:cb:fa:ba:16:77:c2:f2:e7:
         03:07:e0:94:b9:a4:d7:f1:fa:e0:f6:b6:3d:e2:4e:ed:0d:f5:
         80:65:e7:62:3f:74:05:35:dd:ba:ad:4a:bc:74:5e:a9:f5:e3:
         2f:09:eb:bc:c6:5c:b9:fe:d6:52:7e:c8:95:65:99:9f:2d:90:
         58:1b:c6:7c:0d:22:3c:20:79:4c:4f:ec:52:d7:8f:90:6b:3f:
         59:f0:dd:ec:d1:e6:14:fb:59:24:69:7d:d7:a5:74:75:37:83:
         47:a7:b9:86:22:f8:81:83:44:e7:ba:02:a8:c4:b0:f8:f8:99:
         67:0c:f4:b6:e4:bf:b3:8d:ca:21:c8:9a:f6:2f:f0:77:36:8c:
         1d:50:f4:73:33:97:80:dc:51:b4:60:48:6a:b9:d4:22:82:d0:
         e1:0a:d9:21:46:2b:7c:ea:90:66:67:62:3c:6a:f0:45:26:9f:
         64:2a:d2:19:d1:ca:27:a2:ca:46:c8:e3:d0:6d:96:3a:4b:17:
         6b:37:f2:c2:1c:ee:a3:1c:bb:7c:c8:46:91:cc:2a:55:a1:31:
         b0:44:52:91:f8:dd:ec:ff:b6:1c:ed:0d:41:f9:bf:67:77:eb:
         ee:93:3a:1e:ac:bd:c0:b2:13:d5:dd:0b:ea:fa:cf:37:ba:5e:
         f8:ff:55:b6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEMVbs2FQOZOe6gfUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTIzMDkwMjAwMjcyNloXDTIzMTIwMTAxMjcyNlowLzEtMCsGA1UEAxMk
YzAwMjQ1ZmEtZjZhNS00YmU0LTgxNzgtMGEwM2U1OTQ1YTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9p/X7rm/0Y8MARpDrF45wsLWwtd0NP0jwOx
dFkH3++sCFn23HQMaw3InnhQrzcKMGVWA3mfBzj2JSRRmZKA6Ul43S2yMcER3QLv
kZ3i502kj3D2aQ55ykOV35PeQBblfalYwW90H2Vfee3Ha/EY6zbiKn/7q5cFZDZm
Zk8V/aejChREHqazRYoAjCARGR3+fmOWb0i/kvJxWhA5RTNZzBmN/SEgoD0Dx0/N
j5uNJEoe1Jm2lo3j/D9VzrENX2UghKnxkdjSNOW8/uuEmwLbV36j0qmSHCN+yWdi
TklY0i3Y6DRj5LFgXkNvEYqm3vkMREEYwB2N2fb28oUBPAYwPwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCjeVhXKWOD7IWlOrAIuXmHU/bwyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvNDE3NjEwMDktZDVhYi0z
NGY2LTg2YTEtMGM0OTc5ZDgwNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf8ODBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAf/r8loIONTgryy/q6FnfC8ucDB+CUuaTX8frg9rY94k7tDfWAZedi
P3QFNd26rUq8dF6p9eMvCeu8xly5/tZSfsiVZZmfLZBYG8Z8DSI8IHlMT+xS14+Q
az9Z8N3s0eYU+1kkaX3XpXR1N4NHp7mGIviBg0TnugKoxLD4+JlnDPS25L+zjcoh
yJr2L/B3NowdUPRzM5eA3FG0YEhqudQigtDhCtkhRit86pBmZ2I8avBFJp9kKtIZ
0conospGyOPQbZY6SxdrN/LCHO6jHLt8yEaRzCpVoTGwRFKR+N3s/7Yc7Q1B+b9n
d+vukzoerL3AshPV3Qvq+s83ul74/1W2
-----END CERTIFICATE-----