Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/f360dd19-9763-33f1-8283-af12304bdc29.roa
File:                     f360dd19-9763-33f1-8283-af12304bdc29.roa (raw, json)
Hash identifier:          cT6CyVCLOVp6Cr99Hsz9pKtBUmD2twpv2vI61iRfqTI=
Subject key identifier:   B0:48:07:4C:EE:00:04:46:F8:62:4B:84:AB:AC:9E:7B:F8:B4:0F:C5
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F43285844E1167F216B1B024632499660
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/f360dd19-9763-33f1-8283-af12304bdc29.roa
Signing time:             Tue 13 Feb 2024 16:01:21 +0000
ROA not before:           Tue 13 Feb 2024 16:01:21 +0000
ROA not after:            Mon 13 May 2024 15:01:21 +0000
asID:                     7018
IP address blocks:        199.119.137.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e1:16:7f:21:6b:1b:02:46:32:49:96:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: Feb 13 16:01:21 2024 GMT
            Not After : May 13 15:01:21 2024 GMT
        Subject: CN=17e089da-11c7-4c43-9307-d5cbc730a085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:0a:67:2e:a8:35:c4:c4:08:f4:bf:96:98:
                    e6:0e:4c:27:a6:fa:83:eb:97:9a:c4:e2:7d:d1:f0:
                    7b:1e:98:5e:57:50:fe:c7:50:1e:11:6d:b7:45:09:
                    a3:51:e2:ef:45:fc:61:31:a4:33:9c:60:e6:da:12:
                    b7:de:f8:1d:91:30:f8:39:a0:4f:31:18:f7:be:3f:
                    f4:57:3a:fe:d9:35:6a:a2:ef:d5:57:1f:e5:fa:d7:
                    4a:ae:8e:dd:33:53:6b:3a:ef:a2:ae:14:d2:b5:1a:
                    69:c1:c7:ee:8d:af:0f:9a:52:6b:8e:e5:52:3a:f1:
                    26:ab:75:ed:0d:e1:d0:92:12:84:d3:5f:4f:9c:c6:
                    63:b0:d0:e1:16:97:91:19:3e:b6:02:59:0a:67:18:
                    f3:6f:27:42:ca:aa:2b:49:20:01:b2:0c:3b:1e:ac:
                    10:4d:25:b1:5b:6f:25:8b:03:13:bb:64:30:11:a0:
                    68:01:39:34:20:d0:7e:00:93:05:22:5d:b2:ac:bd:
                    c2:d8:95:c0:d3:76:27:a9:d0:c1:01:29:63:df:ba:
                    fa:d0:6d:bf:fa:9c:19:5b:7b:84:3e:da:b0:86:ea:
                    98:0c:93:5f:85:1d:30:a7:96:e8:84:e3:8f:b1:86:
                    bd:cd:b5:c5:9e:13:6c:9c:ff:1c:bf:55:98:db:ce:
                    8d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:07:4C:EE:00:04:46:F8:62:4B:84:AB:AC:9E:7B:F8:B4:0F:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/f360dd19-9763-33f1-8283-af12304bdc29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ca:28:19:40:a3:dd:d9:de:7e:65:f6:25:12:ec:e6:90:ca:
         27:83:27:63:eb:fe:ec:ff:b1:95:bc:c6:c6:d2:af:0e:01:f0:
         d0:5c:d6:0d:0a:9a:dd:12:e0:e8:eb:fb:4e:19:74:86:ff:1c:
         61:2c:c5:a5:3b:ba:c8:46:8e:c1:36:03:e6:a2:aa:1c:5a:f3:
         c3:ef:39:99:7f:c3:cc:73:b1:32:51:75:b7:7f:81:2d:dc:33:
         58:ca:8a:2a:36:8c:2b:aa:0a:1d:19:7d:31:02:55:8d:00:86:
         f6:f8:eb:d6:80:44:cc:97:ab:0b:59:17:3a:e5:a2:e9:cc:f0:
         c0:8f:78:90:5f:69:fe:38:fe:d8:4c:d6:78:72:b7:12:2a:2b:
         2d:ec:81:4d:21:5b:75:69:ce:1f:ad:04:19:ee:10:46:64:67:
         c1:38:e1:6b:98:ef:72:d9:9b:31:cf:88:e7:53:7a:91:9c:ae:
         ed:6f:ba:ac:40:4c:8e:03:29:41:58:ed:00:71:60:08:42:32:
         e7:23:d1:e4:73:81:69:14:be:2e:ee:8b:f0:f7:63:ce:c1:a6:
         60:1c:4e:bc:0a:47:16:56:20:b5:ae:8c:3e:95:0c:78:35:48:
         3f:02:38:9b:15:34:c7:51:bb:74:49:ab:25:3d:e9:72:59:2f:
         70:31:bf:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEThFn8haxsCRjJJlmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDhmODUzNGYtNTdjZC00NWJhLWJmYTQtY2U2MDg0MjQ2
M2E0MB4XDTI0MDIxMzE2MDEyMVoXDTI0MDUxMzE1MDEyMVowLzEtMCsGA1UEAxMk
MTdlMDg5ZGEtMTFjNy00YzQzLTkzMDctZDVjYmM3MzBhMDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HMKZy6oNcTECPS/lpjmDkwnpvqD65eaxOJ9
0fB7HpheV1D+x1AeEW23RQmjUeLvRfxhMaQznGDm2hK33vgdkTD4OaBPMRj3vj/0
Vzr+2TVqou/VVx/l+tdKro7dM1NrOu+irhTStRppwcfuja8PmlJrjuVSOvEmq3Xt
DeHQkhKE019PnMZjsNDhFpeRGT62AlkKZxjzbydCyqorSSABsgw7HqwQTSWxW28l
iwMTu2QwEaBoATk0INB+AJMFIl2yrL3C2JXA03YnqdDBASlj37r60G2/+pwZW3uE
PtqwhuqYDJNfhR0wp5bohOOPsYa9zbXFnhNsnP8cv1WY286NOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLBIB0zuAARG+GJLhKusnnv4tA/FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4
NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYwODQyNDYzYTQvZjM2MGRkMTktOTc2My0z
M2YxLTgyODMtYWYxMjMwNGJkYzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDhmODUzNGYtNTdjZC00NWJhLWJm
YTQtY2U2MDg0MjQ2M2E0LzQ4Zjg1MzRmLTU3Y2QtNDViYS1iZmE0LWNlNjA4NDI0
NjNhNC5jcmwwHwYDVR0jBBgwFoAU6FPdCXJVOiBqm33uUEZSal9iZggwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYw
ODQyNDYzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPKKBlAo93Z3n5l9iUS7OaQyieDJ2Pr/uz/sZW8xsbSrw4B8NBc1g0K
mt0S4Ojr+04ZdIb/HGEsxaU7ushGjsE2A+aiqhxa88PvOZl/w8xzsTJRdbd/gS3c
M1jKiio2jCuqCh0ZfTECVY0Ahvb469aARMyXqwtZFzrlounM8MCPeJBfaf44/thM
1nhytxIqKy3sgU0hW3Vpzh+tBBnuEEZkZ8E44WuY73LZmzHPiOdTepGcru1vuqxA
TI4DKUFY7QBxYAhCMucj0eRzgWkUvi7ui/D3Y87BpmAcTrwKRxZWILWujD6VDHg1
SD8COJsVNMdRu3RJqyU96XJZL3Axv6E=
-----END CERTIFICATE-----