Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f4140216-cdc1-3d4c-872c-5a3bbb4a391b.roa
File:                     f4140216-cdc1-3d4c-872c-5a3bbb4a391b.roa (raw, json)
Hash identifier:          l7Zh+aQa6wYnE7L8tUHdc52rjXidpl7qW9asjgEu+i8=
Subject key identifier:   76:4A:35:AB:1C:95:D3:93:AD:72:C1:00:19:92:74:E7:6B:4C:62:8B
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328583AA7A972906FC4D7203FB91700
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f4140216-cdc1-3d4c-872c-5a3bbb4a391b.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.17.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a9:72:90:6f:c4:d7:20:3f:b9:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=65926d9e-3a4b-4fca-a1a0-9e08d86f0e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:5c:f8:f6:e0:06:07:12:72:77:64:cc:52:
                    a8:f0:46:bc:f6:96:2f:2f:87:eb:90:c5:e0:85:2b:
                    ba:52:90:4d:ef:05:98:29:26:c5:e8:66:6d:4d:78:
                    21:8d:1e:af:2a:2c:14:4a:f2:d1:7c:1c:3f:1b:0b:
                    13:54:86:d9:91:c4:89:9e:28:17:0a:b8:09:2b:43:
                    c0:b4:32:7e:fd:6b:ee:54:24:5e:2e:99:c6:80:1d:
                    3a:e8:c9:9e:d7:3f:79:4d:2b:95:83:ba:5b:d0:b5:
                    9c:23:a7:0d:2e:56:e6:69:bb:ed:1d:87:6b:a2:ef:
                    61:f8:9b:80:54:27:7f:79:02:3c:81:28:22:90:4b:
                    65:55:7d:b7:e1:a0:a5:10:76:43:83:d3:53:29:97:
                    2e:ca:47:bf:f8:9c:05:02:26:5a:d5:77:e3:4c:ef:
                    00:79:54:42:d3:4d:a8:b9:79:76:30:ec:cd:bd:ee:
                    16:2e:b8:22:23:05:78:f6:b9:d8:ee:a7:25:c0:be:
                    ee:97:6d:c7:46:4a:41:91:fd:82:ff:d0:a7:a7:02:
                    19:1e:68:f1:d9:73:c8:ab:1c:ee:90:df:b7:42:b4:
                    f4:98:3a:92:06:5b:9c:68:20:68:1f:db:f9:8a:87:
                    13:f4:48:21:7b:87:54:58:b6:c4:56:bc:6f:8b:9b:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4A:35:AB:1C:95:D3:93:AD:72:C1:00:19:92:74:E7:6B:4C:62:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f4140216-cdc1-3d4c-872c-5a3bbb4a391b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:1f:bb:86:54:57:a5:18:77:b9:41:5a:f9:21:07:a8:80:f8:
         3c:bb:2d:4f:d1:e5:b2:7c:ca:f4:7e:58:c2:7a:4b:4f:da:b5:
         1f:cd:92:36:4e:77:b6:a1:db:90:50:ae:e1:09:e3:e9:97:6b:
         fa:f3:a5:28:81:3d:72:a6:8e:fa:3a:46:09:03:c4:18:3a:11:
         86:28:04:c8:d9:fc:d2:26:ae:8f:a1:ec:65:a9:14:f0:51:ea:
         b5:4c:12:28:9f:35:7d:88:52:8b:ca:62:b8:4f:cc:d7:45:cf:
         59:d0:4f:42:69:87:d5:09:6b:9b:36:8c:35:69:16:91:3c:ea:
         77:fa:ee:0a:09:32:6f:4b:66:26:19:00:35:0f:c0:ce:cc:5b:
         a6:81:10:bd:ca:bd:07:d5:5d:d7:eb:3c:35:fc:54:f8:25:ee:
         fe:9c:f6:32:00:2b:6f:9a:b0:ef:17:81:79:75:e5:2d:c3:09:
         08:2b:6a:c7:b2:a5:42:19:b7:ce:72:3e:5c:dc:3e:58:84:45:
         8f:14:77:70:eb:d3:cb:c2:0d:b4:42:22:aa:c9:60:cf:8f:09:
         07:7e:64:25:d2:4f:78:a9:78:19:23:a8:9b:bb:f8:54:63:69:
         cf:8e:74:5a:3d:c1:a7:37:1c:b8:6b:e3:d4:58:56:af:71:e8:
         05:a8:e3:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnqXKQb8TXID+5FwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NjU5MjZkOWUtM2E0Yi00ZmNhLWExYTAtOWUwOGQ4NmYwZTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdhc+PbgBgcScndkzFKo8Ea89pYvL4frkMXg
hSu6UpBN7wWYKSbF6GZtTXghjR6vKiwUSvLRfBw/GwsTVIbZkcSJnigXCrgJK0PA
tDJ+/WvuVCReLpnGgB066Mme1z95TSuVg7pb0LWcI6cNLlbmabvtHYdrou9h+JuA
VCd/eQI8gSgikEtlVX234aClEHZDg9NTKZcuyke/+JwFAiZa1XfjTO8AeVRC002o
uXl2MOzNve4WLrgiIwV49rnY7qclwL7ul23HRkpBkf2C/9CnpwIZHmjx2XPIqxzu
kN+3QrT0mDqSBlucaCBoH9v5iocT9Eghe4dUWLbEVrxvi5v2EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHZKNascldOTrXLBABmSdOdrTGKLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvZjQxNDAyMTYtY2RjMS0z
ZDRjLTg3MmMtNWEzYmJiNGEzOTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBcRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMfu4ZUV6UYd7lBWvkhB6iA+Dy7LU/R5bJ8yvR+WMJ6S0/atR/NkjZO
d7ah25BQruEJ4+mXa/rzpSiBPXKmjvo6RgkDxBg6EYYoBMjZ/NImro+h7GWpFPBR
6rVMEiifNX2IUovKYrhPzNdFz1nQT0Jph9UJa5s2jDVpFpE86nf67goJMm9LZiYZ
ADUPwM7MW6aBEL3KvQfVXdfrPDX8VPgl7v6c9jIAK2+asO8XgXl15S3DCQgrasey
pUIZt85yPlzcPliERY8Ud3Dr08vCDbRCIqrJYM+PCQd+ZCXST3ipeBkjqJu7+FRj
ac+OdFo9wac3HLhr49RYVq9x6AWo454=
-----END CERTIFICATE-----