Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6001fc9c-adf7-3984-9a15-047e138b7ab8.roa
File:                     6001fc9c-adf7-3984-9a15-047e138b7ab8.roa (raw, json)
Hash identifier:          h6UOz5jJ4BktFpBonScQ3ERdQkWhoP3cY9hurYi6fVs=
Subject key identifier:   DF:FF:68:19:36:07:59:64:64:18:B6:84:3C:1C:82:ED:BB:12:DF:B9
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285841E46DE69965C4A57A999B7300
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6001fc9c-adf7-3984-9a15-047e138b7ab8.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Mon 10 Jul 2023 12:14:58 +0000
asID:                     19437
IP address blocks:        140.228.28.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:e6:99:65:c4:a5:7a:99:9b:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 10 12:14:58 2023 GMT
        Subject: CN=fc0e865d-373b-4bf8-b556-ab6a3aa65b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:19:fd:fa:33:0e:96:d4:7d:1a:ba:19:07:0e:
                    ef:1a:72:4a:ad:0c:0b:f1:42:24:f9:61:6f:13:56:
                    e2:13:5c:7a:6d:b6:78:9b:8d:ce:1d:b2:cd:1c:5b:
                    84:2b:03:c7:8a:0a:c0:05:92:0b:d1:75:2d:86:b4:
                    79:62:37:2d:5e:97:87:c5:a5:bd:ac:2a:55:c0:df:
                    e0:46:fb:14:ae:12:2e:30:25:db:b4:46:73:0c:24:
                    f2:ec:19:a9:00:00:07:63:37:e3:b8:7f:4c:d7:4a:
                    78:da:a0:02:04:30:0d:95:c0:56:14:0d:f6:13:cb:
                    c5:8d:3e:82:76:74:b7:4a:e0:2c:04:99:8c:f7:85:
                    bc:83:3c:2b:90:39:03:d0:52:b4:95:53:bc:13:a3:
                    67:73:6c:2a:a4:6b:9e:ab:6a:9d:99:a6:07:3a:16:
                    be:38:56:ba:d6:b9:22:78:fe:66:4f:5e:8a:96:c1:
                    69:cf:1c:72:56:8c:08:11:dd:a9:62:50:a5:76:50:
                    48:b2:df:80:73:1b:cd:9a:b3:49:9a:11:d5:de:5d:
                    2b:e6:26:21:6e:13:f0:2c:2b:4f:f5:ac:31:71:cb:
                    38:15:87:f5:74:c3:a7:ab:95:24:a7:4c:b5:91:d0:
                    7b:5a:5d:14:e3:c7:8b:0f:0a:b3:e6:e3:a1:5b:57:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FF:68:19:36:07:59:64:64:18:B6:84:3C:1C:82:ED:BB:12:DF:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6001fc9c-adf7-3984-9a15-047e138b7ab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:cb:a1:d8:e1:fa:80:d4:f5:20:8a:65:94:11:8c:dc:83:5f:
         17:8f:61:c4:aa:47:26:59:4a:4b:fe:a3:1d:af:4b:67:60:06:
         93:e2:ee:99:19:6b:1c:90:f2:37:be:75:7f:e8:2a:f0:47:cf:
         85:12:ce:cf:f9:03:1e:24:a8:5b:b3:b8:e5:47:b6:44:88:37:
         58:00:fd:32:07:2f:7d:05:5a:4d:1f:0d:41:46:76:24:bb:c0:
         d0:ec:22:6d:e3:a8:78:0c:1f:26:58:a6:92:fa:cc:23:b7:f3:
         17:4e:7c:74:ce:65:33:e0:22:6a:86:ff:dc:af:d4:82:63:b0:
         b5:1a:35:0a:40:22:f6:c6:94:cf:17:b3:a1:4c:ee:de:e6:d3:
         c4:42:1d:aa:18:10:64:e5:af:52:37:d1:60:85:bb:4c:80:6d:
         c9:e6:75:d9:97:3f:ed:c2:a3:09:9b:0a:8f:21:eb:01:8f:a0:
         3e:83:08:f9:0e:96:bc:52:cf:0a:ff:cc:eb:41:0c:79:6d:0c:
         07:28:22:fc:04:26:a4:06:63:26:77:4f:0d:32:cc:72:f9:fe:
         d0:08:35:4b:ea:90:40:a1:3e:e8:70:ae:74:05:eb:b1:c6:34:
         7c:3f:1d:32:9d:9a:7c:a6:a2:cc:70:97:d8:2a:3b:c7:35:64:
         52:7a:28:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbeaZZcSlepmbcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDcxMDEyMTQ1OFowLzEtMCsGA1UEAxMk
ZmMwZTg2NWQtMzczYi00YmY4LWI1NTYtYWI2YTNhYTY1YjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRn9+jMOltR9GroZBw7vGnJKrQwL8UIk+WFv
E1biE1x6bbZ4m43OHbLNHFuEKwPHigrABZIL0XUthrR5YjctXpeHxaW9rCpVwN/g
RvsUrhIuMCXbtEZzDCTy7BmpAAAHYzfjuH9M10p42qACBDANlcBWFA32E8vFjT6C
dnS3SuAsBJmM94W8gzwrkDkD0FK0lVO8E6Nnc2wqpGueq2qdmaYHOha+OFa61rki
eP5mT16KlsFpzxxyVowIEd2pYlCldlBIst+AcxvNmrNJmhHV3l0r5iYhbhPwLCtP
9awxccs4FYf1dMOnq5Ukp0y1kdB7Wl0U48eLDwqz5uOhW1cFSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN//aBk2B1lkZBi2hDwcgu27Et+5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNjAwMWZjOWMtYWRmNy0z
OTg0LTlhMTUtMDQ3ZTEzOGI3YWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvLodjh+oDU9SCKZZQRjNyDXxePYcSqRyZZSkv+ox2vS2dgBpPi7pkZ
axyQ8je+dX/oKvBHz4USzs/5Ax4kqFuzuOVHtkSIN1gA/TIHL30FWk0fDUFGdiS7
wNDsIm3jqHgMHyZYppL6zCO38xdOfHTOZTPgImqG/9yv1IJjsLUaNQpAIvbGlM8X
s6FM7t7m08RCHaoYEGTlr1I30WCFu0yAbcnmddmXP+3CowmbCo8h6wGPoD6DCPkO
lrxSzwr/zOtBDHltDAcoIvwEJqQGYyZ3Tw0yzHL5/tAINUvqkEChPuhwrnQF67HG
NHw/HTKdmnymosxwl9gqO8c1ZFJ6KLk=
-----END CERTIFICATE-----