Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/988e6af9-08f3-3e89-a456-593d0599b849.roa
File:                     988e6af9-08f3-3e89-a456-593d0599b849.roa (raw, json)
Hash identifier:          eshem8vT0D3d9l4pwVa7OIx6NRgPzsjRvX+UBNjJR80=
Subject key identifier:   EC:92:7D:76:5F:39:BD:DC:28:76:25:CF:14:CE:91:0D:C5:D2:BA:9C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584503C01B01A8E9506D7CDB3900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/988e6af9-08f3-3e89-a456-593d0599b849.roa
Signing time:             Mon 26 Feb 2024 02:00:26 +0000
ROA not before:           Mon 26 Feb 2024 02:00:26 +0000
ROA not after:            Sun 26 May 2024 01:00:26 +0000
asID:                     834
IP address blocks:        173.214.186.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:03:c0:1b:01:a8:e9:50:6d:7c:db:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 26 02:00:26 2024 GMT
            Not After : May 26 01:00:26 2024 GMT
        Subject: CN=bf4b6c4f-9cbb-4dd4-8070-4dd9a97340c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dc:49:50:49:72:53:d0:6c:8f:ea:7a:12:a3:
                    8f:56:7f:df:f4:6c:3b:76:ec:2d:83:8f:13:f6:9a:
                    96:48:71:db:3d:c4:f2:48:de:8e:9f:a1:6c:15:53:
                    d5:cd:3c:b1:2f:e9:62:62:2d:2b:74:d5:ee:4c:a1:
                    8e:62:c6:6c:52:49:89:7b:06:35:b4:11:ef:fa:e7:
                    73:48:29:b8:a2:40:f1:1d:23:bd:21:35:91:dc:88:
                    2f:91:96:2b:ee:5f:e6:da:c7:bb:05:8d:bf:37:e2:
                    8c:45:9e:0b:1e:b6:e9:b5:eb:b5:4d:56:1f:84:71:
                    07:0a:29:fc:65:02:3a:64:f3:10:a1:65:d8:a0:1c:
                    f7:c0:ae:ea:e2:a2:2a:f9:b8:33:c0:00:dd:7a:d2:
                    cf:3f:0c:06:3a:32:00:55:10:28:7e:12:66:38:24:
                    2b:f8:60:8e:df:25:db:c5:e3:f9:1b:cd:6f:ec:68:
                    ec:7d:48:ed:86:b9:cd:65:61:a0:d6:95:6a:49:96:
                    94:cf:53:28:d5:4d:15:0e:ae:6b:8c:6f:59:80:f9:
                    58:34:17:30:89:42:96:8f:11:ba:c0:41:13:f0:9c:
                    d8:3c:39:a6:1c:19:ef:cd:fd:3d:4c:75:b0:19:c5:
                    ec:7e:6b:0c:27:b4:9e:2c:af:4c:7a:c0:87:76:6a:
                    53:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:92:7D:76:5F:39:BD:DC:28:76:25:CF:14:CE:91:0D:C5:D2:BA:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/988e6af9-08f3-3e89-a456-593d0599b849.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:58:a9:4b:6a:f7:31:1f:5a:08:6e:17:c5:1c:6f:8d:a6:48:
         8b:9a:1c:54:1c:3d:e5:9b:27:49:87:91:b5:58:58:e3:91:a2:
         ec:02:e0:2e:4b:8d:90:a2:87:88:dd:9b:a2:53:64:94:8e:d6:
         10:6d:9c:dc:88:f4:21:94:c0:ba:3c:fb:f5:da:78:64:e4:a9:
         64:0f:d7:da:b0:17:d8:4e:ae:33:8a:8c:bf:15:01:43:8f:0c:
         08:96:e0:ea:a0:74:f8:ed:8a:34:ac:a8:40:8b:fd:11:82:01:
         62:b8:8f:c8:1d:9e:d8:c6:d5:7e:e0:9c:78:ad:08:59:d9:7b:
         15:24:ab:c6:7d:df:b1:49:89:f2:61:e3:37:b9:d5:17:a6:90:
         41:c8:ef:8e:56:63:60:8e:8a:5a:dd:f9:f1:f2:c9:70:98:3c:
         0c:5c:1c:d7:c3:b9:18:6e:08:7b:b5:ef:10:67:63:75:e1:1c:
         33:f7:89:de:09:0c:30:d8:77:1b:2b:4a:7f:17:7e:4b:75:fc:
         8f:ef:22:10:ce:be:48:68:1c:46:0b:b7:66:2d:d6:ba:9e:3f:
         ad:2c:84:8f:41:a6:1c:fb:8d:33:82:f9:f3:02:50:bf:be:ce:
         81:cf:f8:50:ab:85:ff:19:d8:78:ab:5b:e2:00:97:21:76:4b:
         3c:fe:e6:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUDwBsBqOlQbXzbOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDIyNjAyMDAyNloXDTI0MDUyNjAxMDAyNlowLzEtMCsGA1UEAxMk
YmY0YjZjNGYtOWNiYi00ZGQ0LTgwNzAtNGRkOWE5NzM0MGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNxJUElyU9Bsj+p6EqOPVn/f9Gw7duwtg48T
9pqWSHHbPcTySN6On6FsFVPVzTyxL+liYi0rdNXuTKGOYsZsUkmJewY1tBHv+udz
SCm4okDxHSO9ITWR3IgvkZYr7l/m2se7BY2/N+KMRZ4LHrbpteu1TVYfhHEHCin8
ZQI6ZPMQoWXYoBz3wK7q4qIq+bgzwADdetLPPwwGOjIAVRAofhJmOCQr+GCO3yXb
xeP5G81v7GjsfUjthrnNZWGg1pVqSZaUz1Mo1U0VDq5rjG9ZgPlYNBcwiUKWjxG6
wEET8JzYPDmmHBnvzf09THWwGcXsfmsMJ7SeLK9MesCHdmpTTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOySfXZfOb3cKHYlzxTOkQ3F0rqcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOTg4ZTZhZjktMDhmMy0z
ZTg5LWE0NTYtNTkzZDA1OTliODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArda6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpYqUtq9zEfWghuF8Ucb42mSIuaHFQcPeWbJ0mHkbVYWOORouwC4C5L
jZCih4jdm6JTZJSO1hBtnNyI9CGUwLo8+/XaeGTkqWQP19qwF9hOrjOKjL8VAUOP
DAiW4OqgdPjtijSsqECL/RGCAWK4j8gdntjG1X7gnHitCFnZexUkq8Z937FJifJh
4ze51RemkEHI745WY2COilrd+fHyyXCYPAxcHNfDuRhuCHu17xBnY3XhHDP3id4J
DDDYdxsrSn8Xfkt1/I/vIhDOvkhoHEYLt2Yt1rqeP60shI9Bphz7jTOC+fMCUL++
zoHP+FCrhf8Z2HirW+IAlyF2Szz+5uM=
-----END CERTIFICATE-----