Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1f736f55-c29c-3a24-b48b-69b266a80d55.roa
File:                     1f736f55-c29c-3a24-b48b-69b266a80d55.roa (raw, json)
Hash identifier:          gc3/X+gxwlGuQcdhzOgPvqcgwe9AnO5UbNLcqE50FOw=
Subject key identifier:   1F:5F:24:6F:2E:86:4C:A3:61:87:34:4D:2E:16:52:65:F5:A8:95:E0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858463F8E4147F77F5E70AD850200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1f736f55-c29c-3a24-b48b-69b266a80d55.roa
Signing time:             Tue 18 Jun 2024 04:55:34 +0000
ROA not before:           Tue 18 Jun 2024 04:55:34 +0000
ROA not after:            Mon 16 Sep 2024 04:55:34 +0000
asID:                     400866
IP address blocks:        206.206.83.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:3f:8e:41:47:f7:7f:5e:70:ad:85:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 18 04:55:34 2024 GMT
            Not After : Sep 16 04:55:34 2024 GMT
        Subject: CN=1d94c447-9b2a-4ba0-8d44-2325c71acd88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:ed:69:84:fd:67:26:e6:66:af:57:05:c8:
                    9d:67:09:11:54:fb:92:91:d9:f0:20:26:36:0e:69:
                    86:5d:9b:23:cf:36:80:61:00:6a:94:92:20:f3:2c:
                    eb:cb:0e:2d:8e:b4:9e:d0:c9:4e:87:2d:cd:76:08:
                    67:b5:3a:13:01:53:ec:d6:d7:5c:bb:29:98:1c:bb:
                    c1:93:75:2c:e7:c7:12:51:69:ef:41:84:59:75:e0:
                    b2:4b:9f:9b:f5:ef:96:3d:b8:14:2e:d1:d4:ab:c4:
                    94:cd:ff:f7:b6:13:5b:73:6c:0c:cb:ac:2f:72:5d:
                    d2:91:17:c3:22:ad:3b:31:86:f9:e8:b3:97:8f:0c:
                    df:1c:64:3d:79:2b:9e:77:ff:86:8e:66:16:84:19:
                    02:f8:b2:84:ef:b4:2b:09:6c:1b:ce:e2:fd:90:6f:
                    c9:91:a6:79:ec:c3:a6:6d:0d:83:c1:1a:e2:fd:44:
                    81:84:d1:93:9e:45:15:1f:cf:09:9f:9c:24:33:5e:
                    cd:ab:0b:bf:0d:55:8d:d9:0b:9f:e0:ef:8e:6b:d4:
                    28:0a:43:a0:aa:8e:a1:18:fc:27:b4:6e:a4:58:a0:
                    5b:27:1f:2f:f2:24:ec:75:c1:61:e4:5a:93:7f:8e:
                    42:2e:c6:da:59:c7:a2:40:2a:cb:27:a4:d0:62:48:
                    a3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5F:24:6F:2E:86:4C:A3:61:87:34:4D:2E:16:52:65:F5:A8:95:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1f736f55-c29c-3a24-b48b-69b266a80d55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:3d:61:45:77:9f:0c:a2:35:ac:44:47:b5:d9:5d:85:de:01:
         e7:e4:65:fc:53:01:2a:6a:14:05:ab:12:ad:2a:99:c6:16:23:
         35:c0:df:ed:9e:f3:d5:c1:62:0e:c0:bb:cc:d8:27:c3:0e:fa:
         0b:46:8c:3a:f6:df:92:95:a6:ed:bd:b4:07:9c:38:64:4b:fe:
         89:2b:8b:e1:85:2d:e5:de:0c:1b:6d:fb:a1:bf:9d:2e:5a:0e:
         54:27:e5:0a:40:7d:fe:c7:f7:16:5b:02:f8:de:e8:72:a1:67:
         40:08:01:80:66:44:60:a3:62:70:e1:d9:72:da:f8:60:fc:cf:
         dc:8c:bc:90:d6:02:15:aa:ae:33:3a:27:e1:47:98:ae:3a:3a:
         8a:72:33:38:41:87:9e:e0:d7:28:58:0d:7d:2d:ba:c1:5b:d3:
         45:8c:09:c6:3e:0b:42:de:41:75:be:05:a5:af:19:3b:e7:66:
         39:12:0d:18:61:27:f0:9b:f3:a2:18:76:1c:12:ef:39:21:95:
         65:b7:2b:fd:76:35:72:37:ba:12:b2:c7:eb:3a:40:66:94:69:
         c8:ae:69:c0:84:ec:0e:e3:de:c9:14:ee:15:30:ef:a7:68:9e:
         53:4e:fd:03:c9:25:d5:74:b3:67:66:e6:6d:00:56:77:cf:1b:
         8c:75:3f:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEY/jkFH939ecK2FAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDYxODA0NTUzNFoXDTI0MDkxNjA0NTUzNFowLzEtMCsGA1UEAxMk
MWQ5NGM0NDctOWIyYS00YmEwLThkNDQtMjMyNWM3MWFjZDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCjtaYT9ZybmZq9XBcidZwkRVPuSkdnwICY2
DmmGXZsjzzaAYQBqlJIg8yzryw4tjrSe0MlOhy3NdghntToTAVPs1tdcuymYHLvB
k3Us58cSUWnvQYRZdeCyS5+b9e+WPbgULtHUq8SUzf/3thNbc2wMy6wvcl3SkRfD
Iq07MYb56LOXjwzfHGQ9eSued/+GjmYWhBkC+LKE77QrCWwbzuL9kG/JkaZ57MOm
bQ2DwRri/USBhNGTnkUVH88Jn5wkM17Nqwu/DVWN2Quf4O+Oa9QoCkOgqo6hGPwn
tG6kWKBbJx8v8iTsdcFh5FqTf45CLsbaWceiQCrLJ6TQYkijxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB9fJG8uhkyjYYc0TS4WUmX1qJXgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMWY3MzZmNTUtYzI5Yy0z
YTI0LWI0OGItNjliMjY2YTgwZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE09YUV3nwyiNaxER7XZXYXeAefkZfxTASpqFAWrEq0qmcYWIzXA3+2e
89XBYg7Au8zYJ8MO+gtGjDr235KVpu29tAecOGRL/okri+GFLeXeDBtt+6G/nS5a
DlQn5QpAff7H9xZbAvje6HKhZ0AIAYBmRGCjYnDh2XLa+GD8z9yMvJDWAhWqrjM6
J+FHmK46OopyMzhBh57g1yhYDX0tusFb00WMCcY+C0LeQXW+BaWvGTvnZjkSDRhh
J/Cb86IYdhwS7zkhlWW3K/12NXI3uhKyx+s6QGaUaciuacCE7A7j3skU7hUw76do
nlNO/QPJJdV0s2dm5m0AVnfPG4x1Pxo=
-----END CERTIFICATE-----