Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/17d4d9a1-4df6-3211-b93d-20b5b94f768d.roa
File:                     17d4d9a1-4df6-3211-b93d-20b5b94f768d.roa (raw, json)
Hash identifier:          JVZJ1ddHFGg4sjqxdgyW8g7JljqS6zYGBMVcGLzJq5s=
Subject key identifier:   A7:DD:72:CD:CE:C8:21:D0:EE:B0:FC:3D:74:97:07:53:BF:2B:58:52
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285846FFBADC93F6D7B61932D02E00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/17d4d9a1-4df6-3211-b93d-20b5b94f768d.roa
Signing time:             Mon 26 Aug 2024 01:00:32 +0000
ROA not before:           Mon 26 Aug 2024 01:00:32 +0000
ROA not after:            Sun 24 Nov 2024 02:00:32 +0000
asID:                     203963
IP address blocks:        149.19.197.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ff:ba:dc:93:f6:d7:b6:19:32:d0:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug 26 01:00:32 2024 GMT
            Not After : Nov 24 02:00:32 2024 GMT
        Subject: CN=5f82182b-ac91-42fe-bf17-b037472d102f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7f:b6:92:40:a2:5e:bd:8e:f6:ae:b5:c4:8b:
                    76:3f:06:82:b9:78:4b:19:19:47:7d:58:d7:aa:90:
                    c7:ac:cb:5d:c8:c7:09:da:78:35:c5:83:c9:17:9a:
                    e2:ab:c1:46:b7:c4:9e:04:cf:2f:dc:43:e1:1a:ca:
                    da:f2:91:cd:27:a5:21:e6:29:0d:88:db:6e:68:ab:
                    6d:44:66:85:6a:69:65:8f:37:c3:2f:f4:4f:85:77:
                    23:c3:1d:98:8c:81:19:3d:16:62:fe:29:8b:ae:54:
                    f9:51:7c:65:5e:f6:d4:27:c3:e6:27:25:68:dc:40:
                    ce:96:80:2f:9b:7c:08:c1:b6:fb:19:0d:a4:33:3d:
                    9c:c2:5c:d6:5c:ad:05:54:56:fc:d0:00:bb:7b:16:
                    15:5b:f0:44:a2:49:31:c7:b9:18:55:ea:cb:f6:5d:
                    63:41:56:c7:f4:11:6c:18:18:04:25:89:60:8d:c2:
                    cf:ab:71:b6:ac:8f:1a:56:1f:4c:92:92:70:13:33:
                    e4:e7:ab:8d:7b:79:80:ca:8a:ff:af:8f:91:79:54:
                    26:07:3e:9f:91:8e:bd:d6:4c:a0:57:41:f2:9c:44:
                    f8:45:74:ec:a1:63:b5:e3:66:d4:19:dc:cf:78:4d:
                    83:e5:22:9c:c9:09:3c:0d:30:82:94:22:b0:18:30:
                    a0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DD:72:CD:CE:C8:21:D0:EE:B0:FC:3D:74:97:07:53:BF:2B:58:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/17d4d9a1-4df6-3211-b93d-20b5b94f768d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:32:0a:dd:2c:7d:24:22:f3:d0:58:85:76:ba:bd:03:cf:3d:
         83:48:f9:54:5d:99:c0:bf:bb:ff:80:9e:aa:96:bd:f7:53:a8:
         2d:9d:c5:8b:1a:2a:52:e4:b0:21:21:45:c5:6f:dd:fa:37:fb:
         83:c0:b2:f9:ba:e7:a2:9f:0f:37:f8:f1:1b:55:78:2e:e9:4a:
         fe:b2:0f:21:72:67:1f:c7:39:13:1a:93:ff:82:f8:77:a3:0b:
         36:71:8e:f7:4a:af:69:76:d6:53:44:d0:30:89:9b:8d:0c:1e:
         80:9a:e5:0c:ed:a4:cb:77:49:51:40:96:35:49:74:18:4f:7b:
         79:2e:78:9f:b6:ca:76:c8:be:48:20:e3:39:71:6d:3d:62:c6:
         e7:11:88:01:9d:3a:e5:02:cb:5d:54:04:31:2c:c0:7f:1e:cc:
         26:5f:b0:93:d4:c9:7d:2d:87:ff:27:fc:49:bb:fc:16:76:3e:
         84:69:38:78:05:8b:5e:ca:6a:4b:48:e6:fe:36:fb:2e:c8:c8:
         8d:62:14:83:1c:02:e5:16:b4:2a:c4:e4:71:a3:e8:ca:1d:63:
         cb:e8:ed:40:d9:1e:21:d5:ea:58:76:71:06:16:a5:0f:72:25:
         2c:1b:58:43:ec:05:f9:08:ff:7b:ac:68:e4:86:8d:c6:44:10:
         f7:e1:5f:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb/utyT9te2GTLQLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI0MDgyNjAxMDAzMloXDTI0MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk
NWY4MjE4MmItYWM5MS00MmZlLWJmMTctYjAzNzQ3MmQxMDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn+2kkCiXr2O9q61xIt2PwaCuXhLGRlHfVjX
qpDHrMtdyMcJ2ng1xYPJF5riq8FGt8SeBM8v3EPhGsra8pHNJ6Uh5ikNiNtuaKtt
RGaFamlljzfDL/RPhXcjwx2YjIEZPRZi/imLrlT5UXxlXvbUJ8PmJyVo3EDOloAv
m3wIwbb7GQ2kMz2cwlzWXK0FVFb80AC7exYVW/BEokkxx7kYVerL9l1jQVbH9BFs
GBgEJYlgjcLPq3G2rI8aVh9MkpJwEzPk56uNe3mAyor/r4+ReVQmBz6fkY691kyg
V0HynET4RXTsoWO142bUGdzPeE2D5SKcyQk8DTCClCKwGDCgfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKfdcs3OyCHQ7rD8PXSXB1O/K1hSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMTdkNGQ5YTEtNGRmNi0z
MjExLWI5M2QtMjBiNWI5NGY3NjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRPFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIQyCt0sfSQi89BYhXa6vQPPPYNI+VRdmcC/u/+AnqqWvfdTqC2dxYsa
KlLksCEhRcVv3fo3+4PAsvm656KfDzf48RtVeC7pSv6yDyFyZx/HORMak/+C+Hej
CzZxjvdKr2l21lNE0DCJm40MHoCa5QztpMt3SVFAljVJdBhPe3kueJ+2ynbIvkgg
4zlxbT1ixucRiAGdOuUCy11UBDEswH8ezCZfsJPUyX0th/8n/Em7/BZ2PoRpOHgF
i17KaktI5v42+y7IyI1iFIMcAuUWtCrE5HGj6ModY8vo7UDZHiHV6lh2cQYWpQ9y
JSwbWEPsBfkI/3usaOSGjcZEEPfhX4k=
-----END CERTIFICATE-----