Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/6d703db3-dcf9-371a-bb8b-81f6d559be3b.roa
File:                     6d703db3-dcf9-371a-bb8b-81f6d559be3b.roa (raw, json)
Hash identifier:          YZAhWhTaeeU//Mut1CLiUnq30S1BQSIJDs9lLanS27E=
Subject key identifier:   2E:58:6C:55:E2:F7:C8:66:4A:E4:6B:F8:14:45:1B:A8:D1:E0:D7:FF
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285841E4474BEC3F28C389A4EA87C0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/6d703db3-dcf9-371a-bb8b-81f6d559be3b.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Thu 01 Jun 2023 03:31:20 +0000
asID:                     4451
IP address blocks:        69.74.235.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:4b:ec:3f:28:c3:89:a4:ea:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jun  1 03:31:20 2023 GMT
        Subject: CN=883e6a75-3dd0-4ef7-b4dc-9fc30014d6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:6f:fc:2c:fd:cd:62:3d:a3:66:93:39:ec:00:
                    82:b6:ae:13:ef:5c:15:3e:52:ae:3d:f9:8f:bb:77:
                    dc:ec:d9:9e:17:a6:00:b2:00:0e:18:b7:ed:a8:e0:
                    e4:60:83:fc:b3:d7:40:a6:12:d2:3e:24:92:fa:18:
                    78:68:a9:7b:fa:2e:24:8d:83:06:88:fb:f2:8b:39:
                    b3:01:c6:fe:e2:9a:e0:13:e8:d0:0e:8e:e3:74:58:
                    a9:45:8a:3a:36:c5:2c:91:84:77:1d:7e:78:fe:4a:
                    9c:60:46:91:71:93:5a:f3:77:91:4c:4d:40:54:04:
                    f7:4f:e3:24:74:ad:c3:fd:57:2d:6d:80:b4:0b:19:
                    56:56:e9:b0:ff:02:6f:e1:5e:1d:a9:db:ee:66:d1:
                    a8:f0:bd:53:86:00:ed:25:2a:79:60:77:c0:b2:24:
                    4e:7b:cf:16:0a:08:fa:c1:18:ff:a1:58:df:8f:1f:
                    f0:f0:fa:ac:65:70:af:06:7f:42:9e:1f:ef:e9:9e:
                    f9:3a:06:ec:c6:44:7c:9d:02:55:12:44:01:d9:79:
                    6a:86:b0:b7:78:27:45:95:cd:de:08:f3:4c:fe:f5:
                    3f:9b:d9:72:03:c3:88:a8:d1:1b:3b:34:ea:3c:a6:
                    4e:74:9b:8f:41:c2:cb:99:b2:7e:e3:bf:0e:0c:9b:
                    74:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:58:6C:55:E2:F7:C8:66:4A:E4:6B:F8:14:45:1B:A8:D1:E0:D7:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/6d703db3-dcf9-371a-bb8b-81f6d559be3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:1f:55:09:c8:58:79:9a:88:f9:56:00:b0:75:d1:60:a9:fc:
         5f:de:30:89:a3:a1:b8:65:f1:22:75:62:d2:40:92:bb:18:ea:
         73:de:ee:cf:4f:fe:b1:85:6b:20:bb:3a:3a:6f:db:86:b7:40:
         f3:7f:b6:78:86:63:39:a0:2a:f7:1d:88:86:68:73:0c:40:8f:
         95:ff:35:06:14:6e:d9:0b:66:a0:57:9d:86:37:4e:f7:dc:f5:
         f8:f1:b0:26:ae:0e:98:a0:a5:c8:b9:81:9d:c8:7e:71:9f:00:
         d0:8b:57:81:0d:df:e1:ea:3c:5f:27:45:0a:64:7f:22:18:b6:
         1f:2c:b5:7e:7b:95:be:35:66:6b:67:eb:6d:de:02:90:1a:32:
         93:b0:d5:38:25:76:57:98:4e:d2:ab:3d:e9:66:b2:a7:b6:09:
         68:a4:70:28:73:ec:a2:d3:66:bc:15:18:8e:3d:6a:59:4f:8a:
         1c:c0:90:43:7b:54:2d:e4:61:82:40:5d:c6:ea:1c:87:51:63:
         6a:af:77:b2:31:be:65:9b:42:e0:c6:57:d0:ed:cd:ed:1e:bb:
         9b:16:2d:0c:1c:2d:0f:b8:39:d0:45:ee:bd:42:08:af:df:02:
         27:c2:9c:44:e4:97:af:af:27:5a:62:d3:96:82:f1:38:46:e7:
         e6:ad:a7:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkR0vsPyjDiaTqh8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDYwMTAzMzEyMFowLzEtMCsGA1UEAxMk
ODgzZTZhNzUtM2RkMC00ZWY3LWI0ZGMtOWZjMzAwMTRkNmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9G/8LP3NYj2jZpM57ACCtq4T71wVPlKuPfmP
u3fc7NmeF6YAsgAOGLftqODkYIP8s9dAphLSPiSS+hh4aKl7+i4kjYMGiPvyizmz
Acb+4prgE+jQDo7jdFipRYo6NsUskYR3HX54/kqcYEaRcZNa83eRTE1AVAT3T+Mk
dK3D/VctbYC0CxlWVumw/wJv4V4dqdvuZtGo8L1ThgDtJSp5YHfAsiROe88WCgj6
wRj/oVjfjx/w8PqsZXCvBn9Cnh/v6Z75OgbsxkR8nQJVEkQB2XlqhrC3eCdFlc3e
CPNM/vU/m9lyA8OIqNEbOzTqPKZOdJuPQcLLmbJ+478ODJt0mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5YbFXi98hmSuRr+BRFG6jR4Nf/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvNmQ3MDNkYjMtZGNmOS0z
NzFhLWJiOGItODFmNmQ1NTliZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUrrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJwfVQnIWHmaiPlWALB10WCp/F/eMImjobhl8SJ1YtJAkrsY6nPe7s9P
/rGFayC7Ojpv24a3QPN/tniGYzmgKvcdiIZocwxAj5X/NQYUbtkLZqBXnYY3Tvfc
9fjxsCauDpigpci5gZ3IfnGfANCLV4EN3+HqPF8nRQpkfyIYth8stX57lb41Zmtn
623eApAaMpOw1TgldleYTtKrPelmsqe2CWikcChz7KLTZrwVGI49allPihzAkEN7
VC3kYYJAXcbqHIdRY2qvd7IxvmWbQuDGV9Dtze0eu5sWLQwcLQ+4OdBF7r1CCK/f
AifCnETkl6+vJ1pi05aC8ThG5+atpyw=
-----END CERTIFICATE-----