Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bde96389-8bd3-328b-83b4-782a4ed078f7.roa
File:                     bde96389-8bd3-328b-83b4-782a4ed078f7.roa (raw, json)
Hash identifier:          5g9+K7fGS7YTiL5OB0S1feDv7dO4ZWeHzvPEIpLkmq4=
Subject key identifier:   37:F0:B7:FA:32:AB:22:6B:ED:93:1A:2A:9A:9D:01:3A:C3:25:D2:8C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285841E4474089617A10EFE8DD8480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bde96389-8bd3-328b-83b4-782a4ed078f7.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sun 04 Jun 2023 11:00:03 +0000
asID:                     852
IP address blocks:        207.81.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:40:89:61:7a:10:ef:e8:dd:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jun  4 11:00:03 2023 GMT
        Subject: CN=7fe96ad5-14b2-42ad-9fa1-91789204bbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:94:71:88:58:0a:6f:5f:97:45:10:fd:b2:fd:
                    23:aa:fa:d1:6b:63:20:7b:73:25:e5:9c:40:78:d1:
                    10:81:c3:02:6d:6e:be:28:b0:87:a3:25:30:23:b3:
                    15:ae:b4:2b:5a:2f:9a:a5:b3:e4:06:58:00:2c:2b:
                    7c:c2:d1:c2:a2:8e:ed:3a:38:85:2d:ac:fb:84:3f:
                    02:3a:16:cc:ff:c3:19:82:e7:bb:4b:57:85:7e:85:
                    1a:a6:8b:58:c1:e9:1e:9e:85:1a:6b:66:03:6e:b2:
                    d4:a7:56:8d:f4:a2:72:4e:ae:91:bf:77:90:09:8f:
                    ab:12:a0:66:cf:d3:fa:85:58:fa:88:40:89:a6:e8:
                    7a:e8:6c:0e:fc:23:24:5f:f7:36:e6:f9:56:34:c5:
                    4f:8e:b5:91:77:86:1b:8a:a6:57:1e:7a:63:cb:dd:
                    77:a4:20:aa:77:8f:fd:94:9f:b2:51:29:7c:93:99:
                    a4:98:65:87:98:ec:00:79:9c:58:29:73:2d:44:e4:
                    7b:7b:3b:ac:a1:0c:c5:bf:65:b1:d6:e8:bd:9e:10:
                    40:fb:43:f8:fc:2a:05:a6:17:62:25:04:74:27:82:
                    39:40:f2:be:23:ca:d5:c5:38:19:d5:b4:ce:6a:6c:
                    64:8a:93:74:b1:b5:73:52:21:1b:92:f4:3a:e0:8f:
                    2b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F0:B7:FA:32:AB:22:6B:ED:93:1A:2A:9A:9D:01:3A:C3:25:D2:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bde96389-8bd3-328b-83b4-782a4ed078f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.81.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:ce:2c:92:d9:a4:a4:79:76:7b:e0:7b:04:72:f0:cc:1d:50:
         62:45:f4:6d:a2:20:57:07:6f:61:b4:d3:5c:80:51:68:72:16:
         26:c4:8a:95:73:c1:65:80:b7:8a:ee:83:b3:9c:a5:1e:3f:5c:
         05:a1:5a:da:7b:c5:1e:56:18:ba:ba:d5:eb:09:33:ef:7e:41:
         29:a6:1e:93:42:01:2e:b3:67:5c:16:d4:38:cf:c6:44:39:29:
         4e:50:c4:46:1d:fa:df:19:cb:52:a2:19:de:68:ac:d6:ba:be:
         39:65:88:d4:ab:7d:19:7e:61:68:51:af:48:c7:71:8c:0a:a8:
         ae:86:1c:d1:0c:ef:bc:45:70:99:6a:02:b0:05:25:bb:3d:91:
         44:5d:61:46:6a:37:2a:85:ca:3f:18:db:69:84:29:2a:a9:35:
         f5:b5:4e:b8:c2:b9:29:40:12:3f:03:5d:a0:4a:4d:ea:5a:be:
         59:92:0c:11:68:67:e9:33:3d:ce:f2:bc:fa:b9:76:d6:69:3b:
         c8:be:c1:9c:27:44:5a:8d:7f:dd:40:ec:c3:76:b3:77:46:19:
         e9:94:4a:06:81:0a:72:11:18:b1:8f:5f:28:d3:de:47:c3:7e:
         b3:29:a8:58:69:b9:68:75:da:dc:06:e9:be:ae:65:80:09:da:
         17:31:94:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkR0CJYXoQ7+jdhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDYwNDExMDAwM1owLzEtMCsGA1UEAxMk
N2ZlOTZhZDUtMTRiMi00MmFkLTlmYTEtOTE3ODkyMDRiYmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5RxiFgKb1+XRRD9sv0jqvrRa2Mge3Ml5ZxA
eNEQgcMCbW6+KLCHoyUwI7MVrrQrWi+apbPkBlgALCt8wtHCoo7tOjiFLaz7hD8C
OhbM/8MZgue7S1eFfoUapotYwekenoUaa2YDbrLUp1aN9KJyTq6Rv3eQCY+rEqBm
z9P6hVj6iECJpuh66GwO/CMkX/c25vlWNMVPjrWRd4YbiqZXHnpjy913pCCqd4/9
lJ+yUSl8k5mkmGWHmOwAeZxYKXMtROR7ezusoQzFv2Wx1ui9nhBA+0P4/CoFphdi
JQR0J4I5QPK+I8rVxTgZ1bTOamxkipN0sbVzUiEbkvQ64I8rAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDfwt/oyqyJr7ZMaKpqdATrDJdKMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmRlOTYzODktOGJkMy0z
MjhiLTgzYjQtNzgyYTRlZDA3OGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz1GSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN3OLJLZpKR5dnvgewRy8MwdUGJF9G2iIFcHb2G001yAUWhyFibEipVz
wWWAt4rug7OcpR4/XAWhWtp7xR5WGLq61esJM+9+QSmmHpNCAS6zZ1wW1DjPxkQ5
KU5QxEYd+t8Zy1KiGd5orNa6vjlliNSrfRl+YWhRr0jHcYwKqK6GHNEM77xFcJlq
ArAFJbs9kURdYUZqNyqFyj8Y22mEKSqpNfW1TrjCuSlAEj8DXaBKTepavlmSDBFo
Z+kzPc7yvPq5dtZpO8i+wZwnRFqNf91A7MN2s3dGGemUSgaBCnIRGLGPXyjT3kfD
frMpqFhpuWh12twG6b6uZYAJ2hcxlOg=
-----END CERTIFICATE-----