Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/66c5f434-bcc6-3fa5-8b9e-e369b864eaa9.roa
File:                     66c5f434-bcc6-3fa5-8b9e-e369b864eaa9.roa (raw, json)
Hash identifier:          S21pfHM+x9baaVE5L1bAkX2bcMTTsDwyxFIdMBDoWEE=
Subject key identifier:   6A:E9:3A:5D:A7:34:9F:56:7C:DD:56:34:B9:D9:4D:AC:2E:0F:97:62
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F43285841E4476E8372D49A879C9CA860
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/66c5f434-bcc6-3fa5-8b9e-e369b864eaa9.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Thu 10 Aug 2023 06:53:35 +0000
asID:                     834
IP address blocks:        172.96.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:6e:83:72:d4:9a:87:9c:9c:a8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 10 06:53:35 2023 GMT
        Subject: CN=33220349-04e9-4983-8619-262ec3b693f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:91:80:30:ef:44:0c:1b:03:86:7b:23:7e:
                    3e:48:7b:02:09:e0:6f:00:59:31:ea:b1:aa:d8:3a:
                    41:b6:a0:1a:39:eb:f1:fc:73:69:97:d6:cd:75:2c:
                    62:13:dd:81:1a:d5:db:da:aa:98:4a:67:09:b8:a4:
                    4b:c3:05:25:61:67:2b:e3:7b:1b:dd:b4:97:f4:db:
                    d6:be:3b:7e:c1:e7:52:b7:76:db:22:2d:03:5b:1a:
                    fc:8a:aa:4c:e3:2c:fe:2a:c7:bf:a5:fa:60:99:92:
                    92:d3:1c:4f:a5:bd:e9:1c:3a:84:a3:77:53:67:7b:
                    83:f5:17:38:2c:57:13:cf:3d:bd:c5:a2:7b:f0:ce:
                    1c:b8:80:90:06:53:18:e3:60:d3:fd:f3:31:c3:f8:
                    61:20:a3:af:16:92:b0:4a:61:a1:e1:19:44:f9:d8:
                    91:db:d3:39:53:e8:da:e0:ee:58:f5:4a:59:94:29:
                    57:86:5c:65:83:b0:7a:f5:0a:e0:05:b0:78:49:63:
                    ee:db:7e:df:6e:11:c0:fc:1e:40:f9:15:f0:48:0a:
                    6d:d4:ab:8e:d2:ac:e3:91:88:8b:7f:d2:3c:59:ae:
                    d1:ab:59:f0:e9:e6:b1:86:66:07:88:c6:05:58:03:
                    c2:5e:fc:d7:56:da:77:94:de:26:aa:56:5d:c2:5b:
                    6e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E9:3A:5D:A7:34:9F:56:7C:DD:56:34:B9:D9:4D:AC:2E:0F:97:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/66c5f434-bcc6-3fa5-8b9e-e369b864eaa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fc:8f:64:6a:f5:93:b2:c1:c6:09:5e:3f:5f:4f:56:9d:be:
         7f:4e:f0:9f:e9:ef:a1:09:4e:cd:ce:c5:44:05:68:b0:88:ba:
         70:0c:66:10:76:dc:34:ac:64:65:e3:c7:72:99:c2:12:69:a1:
         8c:85:6f:0b:65:26:ba:8f:95:38:0a:bc:30:4e:85:98:44:87:
         ad:d0:a1:45:fc:e6:33:a1:37:89:27:6f:7a:53:e6:f4:c5:27:
         96:a6:66:94:49:35:32:d5:3e:6a:a6:24:89:7b:46:a9:c2:11:
         47:d9:b2:70:f3:8f:eb:81:e1:77:be:6b:7c:5b:2b:a0:9b:a1:
         3f:26:db:6e:c0:99:e2:fb:c7:f3:af:7f:25:58:6e:82:d3:67:
         6a:fe:64:87:0b:ce:e5:9f:a4:85:e0:e0:79:05:a2:3f:03:12:
         95:10:26:0e:43:44:ba:a4:e8:b8:8d:a3:9d:99:5f:6f:c2:4e:
         36:06:3c:ff:17:85:fc:67:8a:5f:9a:44:35:0b:13:08:ff:7b:
         02:91:77:0f:0c:b2:02:59:b8:22:99:6b:29:3e:e0:64:dc:57:
         19:87:be:23:ba:d6:91:a9:4d:fb:df:c3:53:e2:45:21:eb:89:
         a9:19:2f:cb:1c:da:93:73:ea:28:ff:ba:84:95:79:6e:46:ed:
         38:60:a3:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkR26DctSah5ycqGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx
ZDc0MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgxMDA2NTMzNVowLzEtMCsGA1UEAxMk
MzMyMjAzNDktMDRlOS00OTgzLTg2MTktMjYyZWMzYjY5M2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWeRgDDvRAwbA4Z7I34+SHsCCeBvAFkx6rGq
2DpBtqAaOevx/HNpl9bNdSxiE92BGtXb2qqYSmcJuKRLwwUlYWcr43sb3bSX9NvW
vjt+wedSt3bbIi0DWxr8iqpM4yz+Kse/pfpgmZKS0xxPpb3pHDqEo3dTZ3uD9Rc4
LFcTzz29xaJ78M4cuICQBlMY42DT/fMxw/hhIKOvFpKwSmGh4RlE+diR29M5U+ja
4O5Y9UpZlClXhlxlg7B69QrgBbB4SWPu237fbhHA/B5A+RXwSApt1KuO0qzjkYiL
f9I8Wa7Rq1nw6eaxhmYHiMYFWAPCXvzXVtp3lN4mqlZdwltuqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGrpOl2nNJ9WfN1WNLnZTawuD5diMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4
Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvNjZjNWY0MzQtYmNjNi0z
ZmE1LThiOWUtZTM2OWI4NjRlYWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi
ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey
MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0
NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADf8j2Rq9ZOywcYJXj9fT1advn9O8J/p76EJTs3OxUQFaLCIunAMZhB2
3DSsZGXjx3KZwhJpoYyFbwtlJrqPlTgKvDBOhZhEh63QoUX85jOhN4knb3pT5vTF
J5amZpRJNTLVPmqmJIl7RqnCEUfZsnDzj+uB4Xe+a3xbK6CboT8m227AmeL7x/Ov
fyVYboLTZ2r+ZIcLzuWfpIXg4HkFoj8DEpUQJg5DRLqk6LiNo52ZX2/CTjYGPP8X
hfxnil+aRDULEwj/ewKRdw8MsgJZuCKZayk+4GTcVxmHviO61pGpTfvfw1PiRSHr
iakZL8sc2pNz6ij/uoSVeW5G7Thgowk=
-----END CERTIFICATE-----