Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/a93d009c-d282-31c8-a445-1889a95067cd.roa
File:                     a93d009c-d282-31c8-a445-1889a95067cd.roa (raw, json)
Hash identifier:          pQLSA0pWGz86/Yje04uME/VJ3quY8lZdq3k9RQ2HOrc=
Subject key identifier:   25:57:29:1E:39:7F:69:FA:DB:49:E0:EB:5D:7C:C9:5A:CC:E9:20:4A
Certificate issuer:       /CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
Certificate serial:       010D0C9F43285841E471BB7DAB154FC51C478CC0
Authority key identifier: E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/a93d009c-d282-31c8-a445-1889a95067cd.roa
Signing time:             Mon 15 May 2023 18:31:13 +0000
ROA not before:           Mon 15 May 2023 18:31:13 +0000
ROA not after:            Thu 10 Aug 2023 07:52:56 +0000
asID:                     44547
IP address blocks:        136.175.20.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:71:bb:7d:ab:15:4f:c5:1c:47:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
        Validity
            Not Before: May 15 18:31:13 2023 GMT
            Not After : Aug 10 07:52:56 2023 GMT
        Subject: CN=6d355070-0bbc-4b4b-a6e9-03ec6fce6ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ea:46:96:9c:6c:49:ee:26:3a:47:bf:fd:cb:
                    05:b1:10:e7:5b:8e:11:2f:e6:19:39:e8:2c:66:fe:
                    22:36:ea:7f:1d:4c:ab:09:e0:88:44:67:15:50:aa:
                    a9:38:62:e7:cb:fa:90:d5:f9:1f:f4:a9:03:6b:5a:
                    8d:e6:19:2c:a4:62:e8:74:59:e7:46:16:4a:4d:0d:
                    07:1d:7e:22:62:5e:62:d9:99:07:d5:db:f7:25:a4:
                    cb:3b:79:ff:64:03:31:d1:86:b1:2a:a1:e2:ef:14:
                    5f:72:d2:69:66:24:47:3e:47:0e:00:2c:82:99:be:
                    44:d3:71:14:cc:74:30:8f:e9:f5:8b:5f:f4:6f:d1:
                    a6:60:e7:1f:61:25:e3:af:1e:39:6e:9d:6b:3a:f0:
                    e3:cd:91:59:1b:2e:6c:99:86:c0:41:f3:42:75:7f:
                    74:44:3a:56:8a:0d:8c:73:91:c7:de:a7:01:bb:59:
                    f6:e2:82:4f:d2:ef:72:46:19:94:78:84:ae:da:97:
                    0a:27:34:11:bb:b3:67:8e:ad:c8:aa:28:d2:98:cb:
                    b9:31:ae:21:db:59:ca:2f:4a:cb:4e:bd:42:3a:b6:
                    4e:d3:d2:5a:c9:cc:cd:e3:d1:2a:f7:d4:e3:15:ab:
                    3c:10:6b:ce:a9:32:4c:40:14:17:70:35:35:a3:c9:
                    55:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:57:29:1E:39:7F:69:FA:DB:49:E0:EB:5D:7C:C9:5A:CC:E9:20:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/a93d009c-d282-31c8-a445-1889a95067cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl

            X509v3 Authority Key Identifier:
                keyid:E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f6:82:96:e1:06:1c:48:48:7f:70:60:20:76:80:d0:5d:97:
         21:0f:f8:69:4f:6c:2c:e3:ba:99:c6:3d:cd:6a:9c:ed:a5:83:
         91:9d:62:8c:bd:a7:ab:6d:67:d2:4f:62:b1:d3:6f:d0:ec:9d:
         0a:33:8b:f1:fa:9b:10:44:9f:a0:ee:ad:4a:35:f2:02:0d:f2:
         46:0c:69:b8:a0:4d:06:0f:91:cd:4a:b9:08:12:a7:b6:92:0d:
         d1:a2:f6:72:67:8d:7e:76:04:fc:96:df:97:09:bd:5e:91:06:
         63:15:1c:86:a0:76:f0:a2:a2:4d:f2:2b:8f:8a:5f:cf:2a:af:
         41:54:b5:fa:ac:77:10:7d:73:ae:f0:c8:3b:3f:97:67:61:30:
         5b:da:02:c9:d4:00:cf:58:0f:01:ea:8d:af:9b:73:d9:42:5d:
         0b:71:dc:37:4f:b5:98:cc:de:02:99:82:d9:d8:3d:f1:f3:c4:
         c4:35:da:41:6e:55:36:10:a3:e3:28:26:9d:99:7a:1a:99:45:
         e8:b1:44:33:cd:67:60:27:31:01:95:9c:35:44:4c:d1:aa:7b:
         31:bf:b9:a1:1f:95:73:3b:b2:00:29:e2:43:34:05:34:2f:97:
         56:f4:22:88:7f:18:33:91:9f:c8:f3:bd:62:91:d3:20:5b:e7:
         8b:de:68:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkcbt9qxVPxRxHjMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ4MDExZmEtZjFhZS00NmM2LTk0NDEtMmY0ODZlMDRh
NmRlMB4XDTIzMDUxNTE4MzExM1oXDTIzMDgxMDA3NTI1NlowLzEtMCsGA1UEAxMk
NmQzNTUwNzAtMGJiYy00YjRiLWE2ZTktMDNlYzZmY2U2ZWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOpGlpxsSe4mOke//csFsRDnW44RL+YZOegs
Zv4iNup/HUyrCeCIRGcVUKqpOGLny/qQ1fkf9KkDa1qN5hkspGLodFnnRhZKTQ0H
HX4iYl5i2ZkH1dv3JaTLO3n/ZAMx0YaxKqHi7xRfctJpZiRHPkcOACyCmb5E03EU
zHQwj+n1i1/0b9GmYOcfYSXjrx45bp1rOvDjzZFZGy5smYbAQfNCdX90RDpWig2M
c5HH3qcBu1n24oJP0u9yRhmUeISu2pcKJzQRu7Nnjq3IqijSmMu5Ma4h21nKL0rL
Tr1COrZO09JayczN49Eq99TjFas8EGvOqTJMQBQXcDU1o8lVjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCVXKR45f2n620ng6118yVrM6SBKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZDgw
MTFmYS1mMWFlLTQ2YzYtOTQ0MS0yZjQ4NmUwNGE2ZGUvYTkzZDAwOWMtZDI4Mi0z
MWM4LWE0NDUtMTg4OWE5NTA2N2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGQ4MDExZmEtZjFhZS00NmM2LTk0
NDEtMmY0ODZlMDRhNmRlLzRkODAxMWZhLWYxYWUtNDZjNi05NDQxLTJmNDg2ZTA0
YTZkZS5jcmwwHwYDVR0jBBgwFoAU54hrAHQubHuwCUVp2sUyljNfs5kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZDgwMTFmYS1mMWFlLTQ2YzYtOTQ0MS0yZjQ4
NmUwNGE2ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiK8UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAET2gpbhBhxISH9wYCB2gNBdlyEP+GlPbCzjupnGPc1qnO2lg5GdYoy9
p6ttZ9JPYrHTb9DsnQozi/H6mxBEn6DurUo18gIN8kYMabigTQYPkc1KuQgSp7aS
DdGi9nJnjX52BPyW35cJvV6RBmMVHIagdvCiok3yK4+KX88qr0FUtfqsdxB9c67w
yDs/l2dhMFvaAsnUAM9YDwHqja+bc9lCXQtx3DdPtZjM3gKZgtnYPfHzxMQ12kFu
VTYQo+MoJp2ZehqZReixRDPNZ2AnMQGVnDVETNGqezG/uaEflXM7sgAp4kM0BTQv
l1b0Ioh/GDORn8jzvWKR0yBb54veaLE=
-----END CERTIFICATE-----