Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/7075b636-181a-3e50-ae5e-e2637d91bd44.roa
File:                     7075b636-181a-3e50-ae5e-e2637d91bd44.roa (raw, json)
Hash identifier:          4drqpr2X5nJwgeC+mmzb4/J/udlsr7guJ8xUvZyJy1E=
Subject key identifier:   DC:4A:FA:6E:FE:45:9D:86:96:67:36:B3:FA:77:EF:48:DD:33:3B:FA
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328583D0D0C4351C5928B8B0B7081FE
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/7075b636-181a-3e50-ae5e-e2637d91bd44.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Wed 14 Dec 2022 05:00:00 +0000
asID:                     203724
IP address blocks:        161.69.103.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0d:0c:43:51:c5:92:8b:8b:0b:70:81:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Dec 14 05:00:00 2022 GMT
        Subject: CN=4019f1f5-cc41-475a-8a78-9dd1c9fe905f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f2:a0:2c:c6:16:fc:d1:69:9c:a1:a9:b0:b3:
                    86:6f:11:53:3b:d2:47:21:b7:07:9f:ba:03:e2:e9:
                    5e:12:9b:19:6d:23:2a:50:fe:a2:89:3b:82:64:23:
                    cd:ec:53:27:85:26:2a:28:d6:a1:7c:09:b1:db:f9:
                    a9:58:40:b8:06:a7:a4:4e:58:a1:c7:53:e5:71:7b:
                    8e:73:cd:4e:f7:b3:12:fb:8f:5c:69:65:85:90:be:
                    05:b0:32:a5:a2:9d:12:8b:b8:7b:80:41:33:08:85:
                    b7:92:8e:db:9f:63:93:69:13:cf:c6:a0:4f:7d:1e:
                    13:e4:cb:84:59:e4:4b:fc:8e:b4:84:3d:0e:8f:c1:
                    e4:3c:a6:30:ae:b7:85:ad:92:e1:3a:50:80:23:41:
                    97:3e:52:5c:d1:b9:b9:84:b2:ba:49:77:08:dc:d4:
                    c0:d6:e9:9a:e7:99:21:5c:fa:f9:fe:9c:13:31:f8:
                    0c:fb:d0:90:63:94:40:a4:91:ca:7a:d0:85:aa:9b:
                    86:7e:ab:c7:e5:62:a2:55:44:fa:35:2f:41:20:5a:
                    b4:ee:48:f8:10:ca:ab:00:d8:a8:c3:cf:7a:5e:16:
                    fa:23:a4:24:ba:9b:d2:dc:7e:72:26:3f:eb:e2:71:
                    b9:a9:56:9f:60:01:74:91:15:1d:ed:e6:0d:13:92:
                    6b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4A:FA:6E:FE:45:9D:86:96:67:36:B3:FA:77:EF:48:DD:33:3B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/7075b636-181a-3e50-ae5e-e2637d91bd44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c6:09:23:4c:cf:c8:4f:22:0d:a3:ee:65:2e:7b:98:c0:8e:
         cd:55:9c:73:85:85:79:d9:15:7e:58:c9:2a:a9:82:dd:2c:44:
         34:57:f1:f9:45:46:43:de:af:5c:98:7b:87:dc:f3:e9:b9:f0:
         13:cf:5d:ee:11:28:ba:67:e5:e2:71:c1:48:ee:aa:19:ab:33:
         d4:04:27:31:4a:fc:14:b6:9a:a8:71:49:e3:85:a9:80:95:2e:
         62:ca:be:33:5d:4a:de:0c:07:2b:3f:7c:68:5b:ae:3b:ed:de:
         33:fe:cd:0e:80:6b:7c:6f:61:79:d9:df:1b:31:38:87:34:1a:
         c3:0f:33:f7:f9:6c:9f:27:6e:21:3c:36:f0:4c:22:b5:09:ce:
         9a:99:c5:0f:7f:8f:a3:6a:15:da:f5:6b:1d:7b:87:6d:8d:e5:
         0e:33:c6:32:1a:ab:6a:4a:20:61:6e:16:38:6d:49:85:87:fd:
         44:cb:c8:e8:9c:3f:b2:02:72:47:2e:8a:51:4c:ce:6b:00:17:
         4f:bf:0e:00:ac:1a:87:86:3e:59:83:fb:8e:f1:2c:bf:65:e3:
         3a:d9:ea:12:4c:b8:9f:cd:9a:e3:3c:58:6a:1c:71:96:51:8e:
         64:0a:be:e7:77:06:77:76:b1:43:b9:05:55:18:01:14:97:2c:
         42:22:ed:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0NDENRxZKLiwtwgf4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTIyMDIyNTA1MDAwMFoXDTIyMTIxNDA1MDAwMFowLzEtMCsGA1UEAxMk
NDAxOWYxZjUtY2M0MS00NzVhLThhNzgtOWRkMWM5ZmU5MDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PKgLMYW/NFpnKGpsLOGbxFTO9JHIbcHn7oD
4uleEpsZbSMqUP6iiTuCZCPN7FMnhSYqKNahfAmx2/mpWEC4BqekTlihx1PlcXuO
c81O97MS+49caWWFkL4FsDKlop0Si7h7gEEzCIW3ko7bn2OTaRPPxqBPfR4T5MuE
WeRL/I60hD0Oj8HkPKYwrreFrZLhOlCAI0GXPlJc0bm5hLK6SXcI3NTA1uma55kh
XPr5/pwTMfgM+9CQY5RApJHKetCFqpuGfqvH5WKiVUT6NS9BIFq07kj4EMqrANio
w896Xhb6I6QkupvS3H5yJj/r4nG5qVafYAF0kRUd7eYNE5JrhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNxK+m7+RZ2Glmc2s/p370jdMzv6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNzA3NWI2MzYtMTgxYS0z
ZTUwLWFlNWUtZTI2MzdkOTFiZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTGCSNMz8hPIg2j7mUue5jAjs1VnHOFhXnZFX5YySqpgt0sRDRX8flF
RkPer1yYe4fc8+m58BPPXe4RKLpn5eJxwUjuqhmrM9QEJzFK/BS2mqhxSeOFqYCV
LmLKvjNdSt4MBys/fGhbrjvt3jP+zQ6Aa3xvYXnZ3xsxOIc0GsMPM/f5bJ8nbiE8
NvBMIrUJzpqZxQ9/j6NqFdr1ax17h22N5Q4zxjIaq2pKIGFuFjhtSYWH/UTLyOic
P7ICckcuilFMzmsAF0+/DgCsGoeGPlmD+47xLL9l4zrZ6hJMuJ/NmuM8WGoccZZR
jmQKvud3Bnd2sUO5BVUYARSXLEIi7UE=
-----END CERTIFICATE-----