Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5a5dec9a-985c-3bae-8622-9302931d70ad.roa
File:                     5a5dec9a-985c-3bae-8622-9302931d70ad.roa (raw, json)
Hash identifier:          Q+EVSTq+2ZA5Dw4U9OsM0Y+0aaQyomHzSiXoWDucKzI=
Subject key identifier:   38:44:D5:1C:E5:5E:68:62:F4:F8:EB:18:58:40:B4:CE:AB:1F:9C:88
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858429278F418A0332871E748FC80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5a5dec9a-985c-3bae-8622-9302931d70ad.roa
Signing time:             Mon 17 Jul 2023 02:36:59 +0000
ROA not before:           Mon 17 Jul 2023 02:36:59 +0000
ROA not after:            Sun 15 Oct 2023 02:36:59 +0000
asID:                     834
IP address blocks:        173.211.127.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:92:78:f4:18:a0:33:28:71:e7:48:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 17 02:36:59 2023 GMT
            Not After : Oct 15 02:36:59 2023 GMT
        Subject: CN=b8a57298-3f76-43a7-a3bb-aa9179647455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6b:f0:95:cd:5f:72:40:a3:c5:1e:77:ab:7a:
                    f7:d3:a0:d5:04:1e:66:14:cf:c7:6c:25:1b:b0:61:
                    fa:3c:f4:5e:5a:2f:a8:4b:24:23:7a:de:6f:d9:45:
                    84:4a:81:13:b1:3e:1e:d8:3b:6d:5f:97:81:0c:1f:
                    ea:ed:6c:ea:47:f2:44:57:92:8f:39:10:6d:e6:5a:
                    a8:76:fd:96:19:28:57:ae:a7:1e:4f:79:93:a4:cb:
                    03:5d:1e:95:2b:dd:49:82:70:a6:a0:1c:37:0f:98:
                    bc:bf:9c:b1:8a:e2:64:15:4f:25:55:d7:35:87:2f:
                    b5:07:ee:24:cc:0d:71:51:e5:d0:08:03:aa:83:09:
                    70:99:73:58:95:a7:b4:64:47:40:42:d2:31:db:f7:
                    78:0d:93:13:92:02:a1:6a:e6:b1:05:aa:08:dc:72:
                    da:81:55:bd:18:a6:e9:25:8f:df:ed:10:6d:bc:ac:
                    86:ea:75:46:0e:9b:8e:24:c8:28:17:42:14:54:16:
                    4d:e8:53:b4:52:b7:e0:7d:e1:0a:d8:b0:ef:01:55:
                    3a:e0:da:d1:d4:b6:07:a4:68:c6:1a:74:43:3c:e8:
                    34:a1:50:df:c0:cc:85:13:97:5d:a3:b3:10:61:db:
                    50:88:ff:64:e9:4a:f6:fd:e9:4e:b5:e0:34:53:f8:
                    1e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:44:D5:1C:E5:5E:68:62:F4:F8:EB:18:58:40:B4:CE:AB:1F:9C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5a5dec9a-985c-3bae-8622-9302931d70ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:e3:e8:2b:0f:b9:62:e5:c8:e9:c7:a6:70:78:35:1a:f1:b9:
         91:a4:ba:8f:c8:72:01:26:9d:5d:2f:2c:2b:88:2a:4a:35:e5:
         dd:b3:49:b4:85:b9:12:be:28:f5:67:c4:63:1c:07:30:e2:46:
         2f:2f:f3:1e:76:b2:c9:9f:90:92:c6:02:d7:9d:cd:46:d3:43:
         11:07:e1:81:a5:bd:de:a7:6c:13:c0:05:5d:a5:b6:c0:1b:06:
         50:b8:05:1c:29:da:4d:ce:a6:03:3f:6d:80:7b:4e:fc:43:29:
         5e:52:de:94:da:f6:d7:22:a0:43:01:21:3e:60:23:87:7c:0f:
         f1:23:3c:c0:4c:ee:80:f9:dd:6d:5c:34:50:18:0a:ba:b3:dc:
         8a:ce:85:0f:32:32:7c:5e:c0:d7:2b:95:3c:e4:06:f6:ab:06:
         66:57:d1:13:38:a3:56:f8:f0:21:2d:a4:00:13:74:e0:02:a5:
         ca:f6:73:c9:15:19:0a:34:4c:91:fe:48:0d:3f:f7:f3:bd:0d:
         d4:da:f0:d5:87:99:00:f7:ca:60:43:af:7e:9a:b6:f4:3b:9c:
         31:8e:17:9a:b1:12:7a:54:76:ce:5a:11:fc:bb:e3:01:95:de:
         bd:92:8f:48:74:9f:15:0b:5a:e4:ec:43:e1:53:2b:17:ee:2a:
         a9:a5:af:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKSePQYoDMocedI/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIzMDcxNzAyMzY1OVoXDTIzMTAxNTAyMzY1OVowLzEtMCsGA1UEAxMk
YjhhNTcyOTgtM2Y3Ni00M2E3LWEzYmItYWE5MTc5NjQ3NDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGvwlc1fckCjxR53q3r306DVBB5mFM/HbCUb
sGH6PPReWi+oSyQjet5v2UWESoETsT4e2DttX5eBDB/q7WzqR/JEV5KPORBt5lqo
dv2WGShXrqceT3mTpMsDXR6VK91JgnCmoBw3D5i8v5yxiuJkFU8lVdc1hy+1B+4k
zA1xUeXQCAOqgwlwmXNYlae0ZEdAQtIx2/d4DZMTkgKhauaxBaoI3HLagVW9GKbp
JY/f7RBtvKyG6nVGDpuOJMgoF0IUVBZN6FO0UrfgfeEK2LDvAVU64NrR1LYHpGjG
GnRDPOg0oVDfwMyFE5ddo7MQYdtQiP9k6Ur2/elOteA0U/geewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDhE1RzlXmhi9PjrGFhAtM6rH5yIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNWE1ZGVjOWEtOTg1Yy0z
YmFlLTg2MjItOTMwMjkzMWQ3MGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdN/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHLj6CsPuWLlyOnHpnB4NRrxuZGkuo/IcgEmnV0vLCuIKko15d2zSbSF
uRK+KPVnxGMcBzDiRi8v8x52ssmfkJLGAtedzUbTQxEH4YGlvd6nbBPABV2ltsAb
BlC4BRwp2k3OpgM/bYB7TvxDKV5S3pTa9tcioEMBIT5gI4d8D/EjPMBM7oD53W1c
NFAYCrqz3IrOhQ8yMnxewNcrlTzkBvarBmZX0RM4o1b48CEtpAATdOACpcr2c8kV
GQo0TJH+SA0/9/O9DdTa8NWHmQD3ymBDr36atvQ7nDGOF5qxEnpUds5aEfy74wGV
3r2Sj0h0nxULWuTsQ+FTKxfuKqmlr7Q=
-----END CERTIFICATE-----