Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d99b16bf-23dc-36ba-8003-b7bf97d02842.roa
File:                     d99b16bf-23dc-36ba-8003-b7bf97d02842.roa (raw, json)
Hash identifier:          qfh2FvPR7wvQAgemCbAl4YDB8kPu0/nbnr/88L23tKI=
Subject key identifier:   E0:34:CF:91:EA:83:98:FD:E4:FB:3C:FD:F8:F8:F0:36:AA:8D:0C:98
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285842DAE33E19BA76047C0CCB6FE0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d99b16bf-23dc-36ba-8003-b7bf97d02842.roa
Signing time:             Sat 12 Aug 2023 01:09:21 +0000
ROA not before:           Sat 12 Aug 2023 01:09:21 +0000
ROA not after:            Fri 10 Nov 2023 02:09:21 +0000
asID:                     834
IP address blocks:        200.229.21.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:da:e3:3e:19:ba:76:04:7c:0c:cb:6f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug 12 01:09:21 2023 GMT
            Not After : Nov 10 02:09:21 2023 GMT
        Subject: CN=6ea73e50-852b-4e6b-9e24-47ed0a9dae55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2c:3b:a0:be:0c:fd:76:3b:32:3c:93:1b:59:
                    50:ae:0f:38:08:61:8d:a2:6f:96:43:00:59:7a:49:
                    9c:b3:41:91:fb:a7:f8:7b:51:ec:d6:93:94:e4:16:
                    2f:5f:94:8b:2c:81:e1:82:09:2f:36:8f:a6:67:04:
                    6c:08:df:05:09:f5:b8:b5:0a:9d:fb:6c:8b:b3:8b:
                    86:1a:39:fb:65:c1:b1:b3:f3:8e:66:ff:fe:fd:e0:
                    63:a1:fd:d5:52:51:86:14:c8:67:d9:76:41:fc:df:
                    ab:ff:2f:e2:63:ac:76:fb:48:0d:a6:51:3e:67:ba:
                    f0:6a:b3:44:ae:e7:a6:30:cf:0a:96:a8:cf:3b:1e:
                    ca:d9:67:b7:a9:b2:a8:50:40:59:43:3e:49:6a:8e:
                    e5:80:13:8f:94:10:24:81:bb:2d:23:88:75:72:8e:
                    db:7c:cb:55:a4:12:d8:7c:a6:c4:3e:48:89:05:5a:
                    23:f2:ef:d3:84:8e:22:ea:cb:04:68:1e:f0:3e:9a:
                    f7:97:05:dd:e6:66:61:b0:29:e1:3b:b4:8c:24:35:
                    2c:dd:d9:76:4c:72:95:71:51:0f:20:fe:8e:27:dc:
                    7d:10:b0:0e:67:2a:1f:7a:dc:fd:87:63:9c:92:c8:
                    b2:b5:64:45:fc:e4:cd:21:07:77:bc:f9:ee:28:43:
                    9b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:34:CF:91:EA:83:98:FD:E4:FB:3C:FD:F8:F8:F0:36:AA:8D:0C:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d99b16bf-23dc-36ba-8003-b7bf97d02842.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e9:e4:1e:60:7e:b6:9b:ad:97:64:2c:d3:a2:65:e1:42:38:
         97:16:3b:83:f9:1b:ae:d9:f9:42:cf:78:f0:d1:38:58:0e:92:
         bf:c8:56:4b:7e:f0:72:b6:2a:c7:ae:ae:69:67:cb:13:21:e1:
         3d:4f:79:78:0c:81:4a:b8:57:db:34:e7:de:72:08:a1:ab:de:
         6a:a7:1c:ed:1b:4e:4b:11:d6:12:9e:a5:7c:d1:c4:73:ca:a3:
         80:75:91:3c:a3:b8:ed:d2:f6:55:53:3f:70:d1:69:72:96:72:
         dd:35:f3:2d:f8:66:ac:cd:cc:29:9d:64:fe:2e:5a:23:f5:52:
         e8:59:e5:51:eb:d4:57:ea:02:cb:db:ab:9b:cb:a8:14:63:28:
         f2:14:d5:39:14:29:32:ff:9d:a7:64:2b:1f:1b:ab:b1:ba:b3:
         29:a9:9d:88:bf:ee:df:8f:2a:16:ee:7d:9e:26:04:e4:c3:36:
         16:da:90:91:c6:49:df:d8:5e:a2:63:3d:77:85:5b:1a:4f:87:
         67:36:7a:57:be:8b:b1:1e:08:a3:73:27:0f:e2:28:70:ad:38:
         d9:35:4b:13:e6:39:3f:e7:ea:b4:c4:88:b0:77:78:11:6b:c6:
         ba:dc:88:0d:2d:95:c2:d0:bf:44:2e:36:cd:a3:25:f1:5b:7e:
         2b:f7:50:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELa4z4ZunYEfAzLb+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTIzMDgxMjAxMDkyMVoXDTIzMTExMDAyMDkyMVowLzEtMCsGA1UEAxMk
NmVhNzNlNTAtODUyYi00ZTZiLTllMjQtNDdlZDBhOWRhZTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Cw7oL4M/XY7MjyTG1lQrg84CGGNom+WQwBZ
ekmcs0GR+6f4e1Hs1pOU5BYvX5SLLIHhggkvNo+mZwRsCN8FCfW4tQqd+2yLs4uG
Gjn7ZcGxs/OOZv/+/eBjof3VUlGGFMhn2XZB/N+r/y/iY6x2+0gNplE+Z7rwarNE
ruemMM8KlqjPOx7K2We3qbKoUEBZQz5Jao7lgBOPlBAkgbstI4h1co7bfMtVpBLY
fKbEPkiJBVoj8u/ThI4i6ssEaB7wPpr3lwXd5mZhsCnhO7SMJDUs3dl2THKVcVEP
IP6OJ9x9ELAOZyofetz9h2OcksiytWRF/OTNIQd3vPnuKEObaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOA0z5Hqg5j95Ps8/fj48DaqjQyYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZDk5YjE2YmYtMjNkYy0z
NmJhLTgwMDMtYjdiZjk3ZDAyODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbp5B5gfrabrZdkLNOiZeFCOJcWO4P5G67Z+ULPePDROFgOkr/IVkt+
8HK2KseurmlnyxMh4T1PeXgMgUq4V9s0595yCKGr3mqnHO0bTksR1hKepXzRxHPK
o4B1kTyjuO3S9lVTP3DRaXKWct018y34ZqzNzCmdZP4uWiP1UuhZ5VHr1FfqAsvb
q5vLqBRjKPIU1TkUKTL/nadkKx8bq7G6sympnYi/7t+PKhbufZ4mBOTDNhbakJHG
Sd/YXqJjPXeFWxpPh2c2ele+i7EeCKNzJw/iKHCtONk1SxPmOT/n6rTEiLB3eBFr
xrrciA0tlcLQv0QuNs2jJfFbfiv3UFg=
-----END CERTIFICATE-----