Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/090a8def-8706-35e2-a964-e75f35690534.roa
File:                     090a8def-8706-35e2-a964-e75f35690534.roa (raw, json)
Hash identifier:          PVMnCU75tWfeYBU1NbEBAtfLbGMacn438M0LZZwI0QQ=
Subject key identifier:   48:4C:0E:82:41:66:6E:58:6F:88:85:54:65:17:7C:8C:C3:64:2F:B1
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F43285841E44762CD9F54481384A9BD4E
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/090a8def-8706-35e2-a964-e75f35690534.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sun 16 Jul 2023 16:59:50 +0000
asID:                     54919
IP address blocks:        163.123.200.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:62:cd:9f:54:48:13:84:a9:bd:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jul 16 16:59:50 2023 GMT
        Subject: CN=3d3a1622-724f-4a3e-b04c-2e31bbf14379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:5d:4f:ed:80:32:2f:45:a5:79:34:f1:17:
                    0f:68:35:5c:26:48:b0:da:16:40:3f:4e:15:ed:7e:
                    3a:41:0f:f5:ef:ec:ea:2d:3e:a3:89:e5:1b:12:04:
                    ed:06:28:08:b6:0f:4a:1e:59:cd:a4:23:a2:3a:c0:
                    45:a8:03:f3:51:3c:f6:a8:92:4d:d4:ec:01:90:a3:
                    d9:3e:8b:eb:e6:12:f5:79:c3:be:a7:b2:af:bf:22:
                    04:04:f8:e5:d7:70:d6:ae:6c:32:bf:e1:e5:c3:cb:
                    8b:7f:67:65:9a:d0:b9:50:cd:cb:8a:57:be:62:46:
                    f7:74:eb:ba:b4:09:69:dc:01:33:c4:69:0b:69:16:
                    57:15:b5:2c:95:f5:7b:0f:a9:cf:26:be:cc:bf:1b:
                    cf:1e:73:68:aa:01:45:62:eb:5e:96:9b:2e:d5:54:
                    bd:0f:84:d8:03:28:af:ed:2f:58:32:b9:73:dc:70:
                    ec:66:01:f2:08:c9:bc:04:48:a9:6d:23:07:af:21:
                    b0:51:6e:4e:e6:aa:47:69:1b:1f:0e:60:b5:dd:26:
                    a3:65:98:9c:b7:4c:cd:b4:a3:fd:ba:31:65:df:bc:
                    f9:d1:45:b2:67:37:84:49:2f:02:cf:e4:d7:2d:81:
                    0b:51:08:66:6e:d6:6b:63:21:bb:7c:47:b1:b4:99:
                    89:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4C:0E:82:41:66:6E:58:6F:88:85:54:65:17:7C:8C:C3:64:2F:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/090a8def-8706-35e2-a964-e75f35690534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:da:27:04:30:96:5c:ea:d3:28:ff:f6:b6:d2:61:8b:3a:db:
         fa:5b:92:74:bc:af:6c:d6:2b:3c:95:a8:d8:57:e9:82:9d:5b:
         e4:2c:e6:fd:35:a7:e2:e0:82:f7:c9:e3:31:a9:54:2a:98:b5:
         c3:ff:81:d6:b0:b1:3d:8e:c1:09:ec:4a:d6:04:84:6a:e4:58:
         d4:e8:08:b8:a5:0d:41:00:51:70:a0:01:f0:5e:d4:69:b1:6b:
         70:a2:27:a1:77:18:1e:aa:b2:f9:62:a2:f1:69:f9:38:75:a6:
         55:f1:29:47:3f:ad:d7:3d:d7:4a:8a:c9:c5:3d:7c:57:9e:f2:
         bc:2b:5c:12:d2:78:a3:8f:23:6a:da:51:6d:c8:e1:60:d3:6d:
         9c:f9:1d:65:20:72:94:28:a7:74:fd:4b:27:6f:be:6f:f0:fe:
         79:e4:9a:6a:6c:25:5a:42:3c:02:1f:51:26:9d:31:06:c6:50:
         e3:58:6b:97:7a:5b:87:44:75:c4:c6:9f:31:15:2a:fa:86:88:
         47:dd:bc:b3:cb:0c:b1:af:93:f5:b4:a5:22:20:74:cc:15:78:
         8d:58:db:6d:df:94:aa:27:84:79:1b:9c:17:fa:04:ef:f4:9e:
         cb:1e:ae:2d:ae:e5:53:eb:f2:81:3e:3a:7f:c9:15:fe:64:44:
         25:b2:8a:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkR2LNn1RIE4SpvU4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw
YzhiMB4XDTIzMDUxNTE3MDQ1MloXDTIzMDcxNjE2NTk1MFowLzEtMCsGA1UEAxMk
M2QzYTE2MjItNzI0Zi00YTNlLWIwNGMtMmUzMWJiZjE0Mzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBhdT+2AMi9FpXk08RcPaDVcJkiw2hZAP04V
7X46QQ/17+zqLT6jieUbEgTtBigItg9KHlnNpCOiOsBFqAPzUTz2qJJN1OwBkKPZ
Povr5hL1ecO+p7KvvyIEBPjl13DWrmwyv+Hlw8uLf2dlmtC5UM3Lile+Ykb3dOu6
tAlp3AEzxGkLaRZXFbUslfV7D6nPJr7MvxvPHnNoqgFFYutelpsu1VS9D4TYAyiv
7S9YMrlz3HDsZgHyCMm8BEipbSMHryGwUW5O5qpHaRsfDmC13SajZZict0zNtKP9
ujFl37z50UWyZzeESS8Cz+TXLYELUQhmbtZrYyG7fEextJmJDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEhMDoJBZm5Yb4iFVGUXfIzDZC+xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz
ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvMDkwYThkZWYtODcwNi0z
NWUyLWE5NjQtZTc1ZjM1NjkwNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk
NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi
MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0
NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo3vIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFXaJwQwllzq0yj/9rbSYYs62/pbknS8r2zWKzyVqNhX6YKdW+Qs5v01
p+LggvfJ4zGpVCqYtcP/gdawsT2OwQnsStYEhGrkWNToCLilDUEAUXCgAfBe1Gmx
a3CiJ6F3GB6qsvliovFp+Th1plXxKUc/rdc910qKycU9fFee8rwrXBLSeKOPI2ra
UW3I4WDTbZz5HWUgcpQop3T9Sydvvm/w/nnkmmpsJVpCPAIfUSadMQbGUONYa5d6
W4dEdcTGnzEVKvqGiEfdvLPLDLGvk/W0pSIgdMwVeI1Y223flKonhHkbnBf6BO/0
nsseri2u5VPr8oE+On/JFf5kRCWyioI=
-----END CERTIFICATE-----