Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d9320815-2987-3c86-a6a4-067f25150df9.roa
File:                     d9320815-2987-3c86-a6a4-067f25150df9.roa (raw, json)
Hash identifier:          P4KPOXTJo0zhNr45rTnVuF6q7YNkUV1tu9iwEYS2D9E=
Subject key identifier:   A3:FD:21:45:89:D0:BC:50:9C:06:B9:13:4B:86:60:24:0F:58:A1:89
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F432858450E76458D21949A56327E3280
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d9320815-2987-3c86-a6a4-067f25150df9.roa
Signing time:             Thu 29 Feb 2024 22:05:42 +0000
ROA not before:           Thu 29 Feb 2024 22:05:42 +0000
ROA not after:            Wed 29 May 2024 21:05:42 +0000
asID:                     21530
IP address blocks:        216.66.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:76:45:8d:21:94:9a:56:32:7e:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Feb 29 22:05:42 2024 GMT
            Not After : May 29 21:05:42 2024 GMT
        Subject: CN=d01357cf-658f-4be6-b6ca-70677e3abe62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:42:89:7d:3e:36:16:9b:2b:cf:0b:b7:45:c9:
                    99:3a:80:fb:ab:62:dd:c4:ab:db:2b:dd:73:bf:ed:
                    eb:41:c3:e7:d0:58:fa:2b:c2:7b:bf:9c:7c:d6:b9:
                    4c:be:1a:44:80:e8:92:0c:dc:cd:a6:cc:5c:1d:24:
                    6e:dd:e1:e4:97:34:b4:60:a5:b3:94:eb:30:1b:33:
                    74:54:0a:ac:98:07:06:86:fd:2f:58:c0:1b:bf:e8:
                    c7:88:05:44:09:d0:8d:97:1b:54:74:bf:fa:79:1c:
                    c9:b8:8d:f4:c2:40:a6:2c:f8:82:19:72:2e:aa:ed:
                    a3:2e:6d:2f:16:09:70:c7:3e:f1:25:d8:ba:5c:e0:
                    9c:ba:e7:47:16:c2:01:c4:1e:e4:77:d0:b1:0e:70:
                    ec:c1:c0:2b:41:98:a1:28:ad:31:08:3b:a0:da:3e:
                    d9:e2:34:15:b4:98:2f:31:19:7b:b6:d6:48:63:76:
                    a6:c7:ca:6b:89:e7:e4:07:79:1f:93:86:41:13:5e:
                    e1:d5:e8:e3:ac:00:87:1a:a1:bd:42:82:61:33:85:
                    6f:33:73:5e:8c:43:95:45:1c:55:7e:6e:9b:a0:b2:
                    2d:f8:bf:79:cf:20:b9:87:4a:af:8e:94:4a:7d:65:
                    aa:1a:89:8c:ac:49:d1:d4:e3:df:38:0e:72:e3:41:
                    1b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FD:21:45:89:D0:BC:50:9C:06:B9:13:4B:86:60:24:0F:58:A1:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d9320815-2987-3c86-a6a4-067f25150df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:69:28:7b:41:d0:f0:37:d9:37:69:c4:5b:93:5b:f7:6a:b8:
         ee:ba:e4:ff:fc:50:38:ba:a7:0f:48:ce:9c:e1:7b:40:de:01:
         c8:73:00:76:48:ea:5e:46:1f:33:c9:8f:34:6f:40:a9:7b:57:
         d9:30:b9:58:82:da:61:b2:de:dd:83:e6:77:02:90:63:3e:07:
         f7:07:2d:d0:5c:5e:48:fa:bb:0c:cc:8a:c0:b4:b4:4d:1d:2c:
         f7:6b:a6:f1:18:5c:9d:f7:84:12:4f:3b:56:9f:df:43:9b:a6:
         98:e4:cc:71:a5:de:ad:2f:9a:3d:74:f8:fa:ea:a9:a7:6a:2e:
         71:c6:69:34:97:d4:93:d4:68:e6:78:31:9d:22:6a:f4:22:fb:
         17:c6:be:04:ca:f8:12:70:8f:35:89:b1:ce:5c:64:13:2f:33:
         0e:38:02:4f:bd:a4:29:1a:d6:e1:6e:56:b0:2d:ef:f9:96:25:
         e0:db:b5:2f:ac:5e:c5:fc:41:c9:3e:ef:ba:f8:59:28:05:6b:
         2a:e0:77:33:b7:08:9f:23:3c:a9:b7:db:dd:24:72:53:c1:c0:
         58:83:7b:1c:a7:10:f2:fa:17:3a:d1:6b:60:b2:a7:2c:00:f9:
         67:20:6d:bb:4e:87:4f:17:f0:59:ed:e2:dd:b0:33:17:5f:07:
         9b:77:f8:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUOdkWNIZSaVjJ+MoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0
ZDUyMB4XDTI0MDIyOTIyMDU0MloXDTI0MDUyOTIxMDU0MlowLzEtMCsGA1UEAxMk
ZDAxMzU3Y2YtNjU4Zi00YmU2LWI2Y2EtNzA2NzdlM2FiZTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEKJfT42Fpsrzwu3RcmZOoD7q2LdxKvbK91z
v+3rQcPn0Fj6K8J7v5x81rlMvhpEgOiSDNzNpsxcHSRu3eHklzS0YKWzlOswGzN0
VAqsmAcGhv0vWMAbv+jHiAVECdCNlxtUdL/6eRzJuI30wkCmLPiCGXIuqu2jLm0v
Fglwxz7xJdi6XOCcuudHFsIBxB7kd9CxDnDswcArQZihKK0xCDug2j7Z4jQVtJgv
MRl7ttZIY3amx8priefkB3kfk4ZBE17h1ejjrACHGqG9QoJhM4VvM3NejEOVRRxV
fm6boLIt+L95zyC5h0qvjpRKfWWqGomMrEnR1OPfOA5y40EbWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKP9IUWJ0LxQnAa5E0uGYCQPWKGJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl
ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvZDkzMjA4MTUtMjk4Ny0z
Yzg2LWE2YTQtMDY3ZjI1MTUwZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5
ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4
NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4
MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ELSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI9pKHtB0PA32TdpxFuTW/dquO665P/8UDi6pw9Izpzhe0DeAchzAHZI
6l5GHzPJjzRvQKl7V9kwuViC2mGy3t2D5ncCkGM+B/cHLdBcXkj6uwzMisC0tE0d
LPdrpvEYXJ33hBJPO1af30ObppjkzHGl3q0vmj10+PrqqadqLnHGaTSX1JPUaOZ4
MZ0iavQi+xfGvgTK+BJwjzWJsc5cZBMvMw44Ak+9pCka1uFuVrAt7/mWJeDbtS+s
XsX8Qck+77r4WSgFayrgdzO3CJ8jPKm3290kclPBwFiDexynEPL6FzrRa2CypywA
+WcgbbtOh08X8Fnt4t2wMxdfB5t3+BY=
-----END CERTIFICATE-----