Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/dc72c135-c1c1-386c-86a8-9ab54062a1a8.roa
File:                     dc72c135-c1c1-386c-86a8-9ab54062a1a8.roa (raw, json)
Hash identifier:          NN1iP+1gd0Zh61XVd4ytWctby5Nxf8Sl4hIu+sFay7g=
Subject key identifier:   2E:5E:E2:46:10:2E:82:FC:7F:59:09:BE:34:B4:2A:63:E5:0C:79:07
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328583C4219CED7A833C58248F22F00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/dc72c135-c1c1-386c-86a8-9ab54062a1a8.roa
Signing time:             Tue 14 Dec 2021 05:00:00 +0000
ROA not before:           Tue 14 Dec 2021 05:00:00 +0000
ROA not after:            Sun 17 Mar 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        207.126.144.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:42:19:ce:d7:a8:33:c5:82:48:f2:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Dec 14 05:00:00 2021 GMT
            Not After : Mar 17 04:00:00 2024 GMT
        Subject: CN=eb224649-1aa9-4c33-99b6-485786ca8c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:7f:d1:b8:d3:c8:65:52:74:07:6a:59:a5:
                    de:00:b5:47:5a:33:76:80:0c:2d:f4:c7:ba:50:e5:
                    04:1d:16:77:07:6b:15:be:b4:82:b4:36:49:7e:9c:
                    25:2a:69:ea:33:19:7d:28:91:96:c6:86:00:60:8d:
                    bd:39:c1:96:dd:17:00:f5:94:cc:11:a7:0c:ae:da:
                    a0:30:9e:6a:fe:c4:d4:e5:49:5f:d6:25:fd:f8:a1:
                    f8:2f:3c:5c:ed:c3:1a:df:73:35:d2:5c:d2:f1:b4:
                    0c:c9:c6:b7:c5:ab:c6:68:5e:ba:9c:86:d3:92:2b:
                    ef:6c:a5:6f:1c:1f:10:45:07:02:d5:79:46:76:be:
                    c8:27:35:64:fd:2a:dc:72:46:f2:ba:61:ac:48:02:
                    c0:54:12:cd:e4:0d:c8:3d:01:2f:33:4e:82:0c:d1:
                    e4:a2:06:e4:3b:2d:40:cd:16:96:2a:0b:c5:78:66:
                    85:63:bf:32:78:e9:81:21:d2:04:24:57:aa:3d:b1:
                    1b:73:96:13:c8:02:32:f5:ca:2a:41:47:b6:ed:be:
                    21:0b:75:b9:dc:d4:60:70:00:eb:93:13:da:b0:db:
                    80:98:cf:cf:ca:78:36:26:e5:16:1b:ea:c8:c4:5f:
                    f6:f9:c6:c0:b4:f7:d0:5d:ec:1f:d1:a8:10:d9:f5:
                    f1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5E:E2:46:10:2E:82:FC:7F:59:09:BE:34:B4:2A:63:E5:0C:79:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/dc72c135-c1c1-386c-86a8-9ab54062a1a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:76:36:50:37:e5:91:91:ea:f3:e8:26:79:06:09:81:19:cb:
         ef:1f:f4:3f:a9:3b:92:d8:a6:95:a0:13:40:be:a4:4d:d0:59:
         70:c8:46:84:ea:29:0d:28:ab:6e:73:30:3b:1b:9f:c1:ce:66:
         24:05:35:ba:9a:c3:a5:5d:6f:68:8c:c5:75:cf:03:fb:87:24:
         6b:f6:40:a5:4f:34:2d:e1:1f:38:92:bc:79:bd:4b:44:b0:a3:
         c7:98:3d:d6:fa:4e:13:db:34:24:59:82:c9:1b:85:eb:95:61:
         ad:bb:48:d6:f6:7a:b8:70:bd:2b:ba:65:d2:aa:83:e2:20:4b:
         fe:ee:b0:fe:0a:de:7b:38:e1:82:0d:49:5d:e9:30:07:cd:34:
         f5:2b:ff:bd:4f:e4:8e:4e:29:6f:81:a5:86:75:f5:77:a2:4c:
         cf:28:72:8d:1b:22:05:b9:41:39:30:b8:f7:1c:f9:f3:8a:ad:
         05:7f:eb:9e:d5:c2:41:09:b4:f6:d7:cf:29:54:e8:41:37:f7:
         c9:eb:f3:8f:b5:f6:bb:17:0c:ad:f9:0e:a1:a3:3b:2e:85:80:
         36:34:f1:a6:9e:9d:43:ea:0b:b8:a2:1d:27:fb:ea:fb:b9:69:
         54:b5:53:6b:1d:fb:45:81:90:58:f8:b2:5f:7c:56:75:ac:00:
         1d:ba:1f:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxCGc7XqDPFgkjyLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTIxMTIxNDA1MDAwMFoXDTI0MDMxNzA0MDAwMFowLzEtMCsGA1UEAxMk
ZWIyMjQ2NDktMWFhOS00YzMzLTk5YjYtNDg1Nzg2Y2E4YzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwZ/0bjTyGVSdAdqWaXeALVHWjN2gAwt9Me6
UOUEHRZ3B2sVvrSCtDZJfpwlKmnqMxl9KJGWxoYAYI29OcGW3RcA9ZTMEacMrtqg
MJ5q/sTU5Ulf1iX9+KH4Lzxc7cMa33M10lzS8bQMyca3xavGaF66nIbTkivvbKVv
HB8QRQcC1XlGdr7IJzVk/SrcckbyumGsSALAVBLN5A3IPQEvM06CDNHkogbkOy1A
zRaWKgvFeGaFY78yeOmBIdIEJFeqPbEbc5YTyAIy9coqQUe27b4hC3W53NRgcADr
kxPasNuAmM/Pyng2JuUWG+rIxF/2+cbAtPfQXewf0agQ2fXxdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5e4kYQLoL8f1kJvjS0KmPlDHkHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvZGM3MmMxMzUtYzFjMS0z
ODZjLTg2YTgtOWFiNTQwNjJhMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz36QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFF2NlA35ZGR6vPoJnkGCYEZy+8f9D+pO5LYppWgE0C+pE3QWXDIRoTq
KQ0oq25zMDsbn8HOZiQFNbqaw6Vdb2iMxXXPA/uHJGv2QKVPNC3hHziSvHm9S0Sw
o8eYPdb6ThPbNCRZgskbheuVYa27SNb2erhwvSu6ZdKqg+IgS/7usP4K3ns44YIN
SV3pMAfNNPUr/71P5I5OKW+BpYZ19XeiTM8oco0bIgW5QTkwuPcc+fOKrQV/657V
wkEJtPbXzylU6EE398nr84+19rsXDK35DqGjOy6FgDY08aaenUPqC7iiHSf76vu5
aVS1U2sd+0WBkFj4sl98VnWsAB26H6Y=
-----END CERTIFICATE-----