Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5748a3ba-7815-3a08-82ab-bbb0712ab479.roa
File:                     5748a3ba-7815-3a08-82ab-bbb0712ab479.roa (raw, json)
Hash identifier:          UNBiM98XLH56HuwEzvX/4gWL4HROje8c1aHSp/Ius1g=
Subject key identifier:   52:BE:E5:A1:3E:68:7F:88:36:6E:BB:AE:CA:94:1E:76:9B:27:03:8B
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328583C4798A7BB1F071431C5813600
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5748a3ba-7815-3a08-82ab-bbb0712ab479.roa
Signing time:             Thu 16 Dec 2021 05:00:00 +0000
ROA not before:           Thu 16 Dec 2021 05:00:00 +0000
ROA not after:            Thu 15 Dec 2022 05:00:00 +0000
asID:                     203724
IP address blocks:        161.69.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:47:98:a7:bb:1f:07:14:31:c5:81:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Dec 16 05:00:00 2021 GMT
            Not After : Dec 15 05:00:00 2022 GMT
        Subject: CN=d6d9b4b6-0c31-4c32-accc-5dc9545c4876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:86:9a:4d:f9:ed:ab:2f:f4:00:7c:06:66:f1:
                    13:89:c5:45:fd:50:3a:90:5e:84:fb:ab:e8:dd:a2:
                    b3:64:0e:c0:18:78:78:6e:53:8f:e4:d7:35:0c:25:
                    c6:9e:a8:37:48:43:90:d9:7d:ea:44:21:3e:79:a8:
                    2a:58:6b:9f:47:77:10:bc:69:d4:a5:27:9d:7a:b7:
                    44:77:0c:25:07:a6:c2:19:d8:d7:df:14:16:c6:81:
                    83:59:4e:e4:3a:14:ab:0b:97:4d:c0:f4:f0:4b:87:
                    27:79:f8:73:ca:26:4b:1b:98:f6:6a:c7:80:25:ec:
                    c8:84:43:76:31:a5:16:b7:c4:99:5d:23:0a:3f:79:
                    98:ee:77:4a:e0:10:eb:aa:eb:ae:65:09:6b:df:cc:
                    21:21:55:8b:30:c3:67:41:99:35:23:35:98:f9:f2:
                    79:a8:7a:cf:02:12:af:30:74:d9:25:4d:d6:46:c6:
                    46:42:b7:df:42:c9:a3:8a:8b:d2:c6:42:76:7a:41:
                    4a:e5:b9:31:0c:bd:69:3e:95:ee:ef:6c:92:cd:6d:
                    85:1c:86:48:74:98:8e:99:c7:bb:74:0b:fc:8a:7a:
                    cf:c8:3c:55:d0:df:16:f2:0d:08:f8:2e:85:8b:f9:
                    ec:73:5e:a6:ec:95:4a:1d:82:af:65:53:bc:a9:45:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BE:E5:A1:3E:68:7F:88:36:6E:BB:AE:CA:94:1E:76:9B:27:03:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5748a3ba-7815-3a08-82ab-bbb0712ab479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:5d:3c:76:d1:c8:5b:3a:7a:b9:17:ef:f5:2a:b1:9b:7d:39:
         37:89:4f:7b:09:4c:69:43:c3:e5:3b:a8:5e:5a:1f:68:f1:41:
         a1:bc:04:5e:31:74:f5:9d:97:76:4d:cc:df:48:61:a9:8e:0a:
         ac:14:d7:2a:6c:80:32:50:46:9c:00:3c:60:41:1a:75:cd:0e:
         9d:98:2b:e3:e4:6c:69:4b:b8:53:e8:a1:99:e2:0c:11:51:1e:
         5f:5c:ac:b2:27:d9:36:1b:3e:78:8f:cc:98:93:a4:ad:ae:26:
         3e:1c:a3:4e:db:62:fa:af:ac:e1:be:aa:c5:d1:a3:93:0a:b0:
         eb:9b:1d:fb:30:55:4b:a1:0a:4c:7f:04:a0:6d:d0:c1:10:3d:
         e5:8d:dc:0b:36:58:27:0a:80:95:36:be:e3:d7:70:32:66:36:
         d3:c1:ec:19:d5:11:47:e2:0d:2b:e9:66:34:90:81:ae:74:b3:
         8c:4d:f4:2a:3e:d9:8c:2d:85:9c:6b:23:f2:21:b3:c7:ab:d0:
         5b:91:44:a5:88:0c:8b:bd:78:a1:d0:b6:ea:55:7c:87:fa:b4:
         d3:84:fd:c7:02:51:d1:e4:ab:75:86:52:f9:e3:28:95:8a:07:
         5f:3a:c0:c4:1b:5b:62:e5:d9:ce:48:da:83:f9:2f:6d:c4:3a:
         87:4e:b2:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxHmKe7HwcUMcWBNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTIxMTIxNjA1MDAwMFoXDTIyMTIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
ZDZkOWI0YjYtMGMzMS00YzMyLWFjY2MtNWRjOTU0NWM0ODc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oaaTfntqy/0AHwGZvETicVF/VA6kF6E+6vo
3aKzZA7AGHh4blOP5Nc1DCXGnqg3SEOQ2X3qRCE+eagqWGufR3cQvGnUpSederdE
dwwlB6bCGdjX3xQWxoGDWU7kOhSrC5dNwPTwS4cnefhzyiZLG5j2aseAJezIhEN2
MaUWt8SZXSMKP3mY7ndK4BDrquuuZQlr38whIVWLMMNnQZk1IzWY+fJ5qHrPAhKv
MHTZJU3WRsZGQrffQsmjiovSxkJ2ekFK5bkxDL1pPpXu72ySzW2FHIZIdJiOmce7
dAv8inrPyDxV0N8W8g0I+C6Fi/nsc16m7JVKHYKvZVO8qUW1vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFK+5aE+aH+INm67rsqUHnabJwOLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNTc0OGEzYmEtNzgxNS0z
YTA4LTgyYWItYmJiMDcxMmFiNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRdPHbRyFs6erkX7/UqsZt9OTeJT3sJTGlDw+U7qF5aH2jxQaG8BF4x
dPWdl3ZNzN9IYamOCqwU1ypsgDJQRpwAPGBBGnXNDp2YK+PkbGlLuFPooZniDBFR
Hl9crLIn2TYbPniPzJiTpK2uJj4co07bYvqvrOG+qsXRo5MKsOubHfswVUuhCkx/
BKBt0MEQPeWN3As2WCcKgJU2vuPXcDJmNtPB7BnVEUfiDSvpZjSQga50s4xN9Co+
2YwthZxrI/Ihs8er0FuRRKWIDIu9eKHQtupVfIf6tNOE/ccCUdHkq3WGUvnjKJWK
B186wMQbW2Ll2c5I2oP5L23EOodOsqw=
-----END CERTIFICATE-----