Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/956aaf15-e375-3894-92ad-c41fd60d7d70.roa
File:                     956aaf15-e375-3894-92ad-c41fd60d7d70.roa (raw, json)
Hash identifier:          7r5zIQAkyEqjeTcM8ZvnWZkmbcOhjlyRZZw/bGGiMj8=
Subject key identifier:   3D:FF:24:D2:D2:E5:D6:B3:D5:02:F6:8B:37:24:89:1F:2D:F1:28:BF
Certificate issuer:       /CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
Certificate serial:       010D0C9F43285841E46D69BF214E235C0936B440
Authority key identifier: 64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/956aaf15-e375-3894-92ad-c41fd60d7d70.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Wed 28 Jun 2023 12:58:54 +0000
asID:                     31849
IP address blocks:        199.30.104.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:69:bf:21:4e:23:5c:09:36:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 28 12:58:54 2023 GMT
        Subject: CN=7eb8e916-1803-4e27-997b-1c574b6e5eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:70:c1:e9:0f:33:b8:52:5a:c2:66:3d:aa:
                    59:ac:a1:b9:22:cc:c9:00:bf:f7:36:76:1b:4c:cb:
                    00:af:60:b5:f3:56:79:74:93:52:04:12:2b:62:1b:
                    df:5d:34:c1:71:ab:da:bd:f6:eb:a1:0c:39:d9:4e:
                    cf:42:78:35:9b:9f:9f:cb:41:bf:a7:12:4e:b0:5f:
                    7c:f8:7d:f0:4b:89:e9:70:46:7f:7a:c7:42:ab:e1:
                    77:cf:bd:01:e8:c6:76:5f:6c:57:d5:54:d3:05:f4:
                    86:93:97:8b:d3:82:1b:0b:12:bc:fc:e6:d9:48:06:
                    58:40:c2:92:3b:fb:77:31:5b:bc:4d:38:33:44:36:
                    68:13:7d:f4:6f:51:c8:7f:87:df:53:5b:0e:9e:a8:
                    c4:44:af:41:46:87:78:8d:a3:3a:6a:f1:cc:f9:76:
                    d0:0b:e1:f6:6c:20:11:75:a2:e0:60:6c:ae:1b:bf:
                    4e:6d:9a:28:d7:00:8e:fe:0a:0d:71:f4:b7:62:63:
                    16:f4:0b:97:48:27:01:a9:11:c3:bc:a7:c8:f4:d0:
                    2e:87:98:0a:2b:71:e2:d1:e7:ce:b9:b0:a5:ed:cc:
                    b6:0e:b9:02:37:3a:46:d3:ef:1f:37:c6:d5:dd:9a:
                    39:2c:7e:26:6c:b7:b9:21:76:a5:f0:21:b9:56:95:
                    f3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FF:24:D2:D2:E5:D6:B3:D5:02:F6:8B:37:24:89:1F:2D:F1:28:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/956aaf15-e375-3894-92ad-c41fd60d7d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl

            X509v3 Authority Key Identifier:
                keyid:64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:77:50:ac:4f:3f:4b:64:e5:01:3f:13:01:67:72:42:ae:0c:
         4d:0a:29:36:d1:58:7c:48:1f:09:dd:e4:00:b2:2c:57:c3:1e:
         da:f1:f7:66:63:2d:22:98:11:5e:8f:fb:b7:c0:33:97:9d:10:
         63:09:e4:46:4e:e4:e6:1e:6b:6a:34:30:6b:2e:8c:7b:b2:f5:
         46:d1:6e:e3:5a:96:aa:a3:50:90:4d:97:82:16:37:1e:8d:f2:
         ee:a6:7d:9b:1c:62:c4:73:64:22:2b:00:8a:43:c2:f5:b1:d6:
         45:3b:04:ae:28:c1:61:fe:ee:ec:39:e7:6a:83:69:e9:22:e3:
         85:d6:dc:8c:86:6e:be:c0:f1:2e:59:3c:c5:a1:c7:2b:d4:64:
         3b:11:80:59:b6:7b:2e:1e:c2:63:eb:78:55:8b:1b:81:d6:2a:
         c8:d3:3f:fd:79:e1:f7:7c:8b:fd:5e:27:74:68:03:ba:10:fa:
         00:7a:ea:ab:9e:5d:93:1b:e8:f6:ed:68:b0:b8:e4:68:bc:4c:
         97:44:86:0c:d1:a2:67:00:91:c3:4b:f1:a3:b1:a6:1a:60:20:
         21:9b:57:e7:74:2a:72:ba:ca:17:9b:b0:88:68:88:8a:9d:1c:
         b0:4d:d9:ce:47:88:e5:d7:9b:fa:8e:2a:f7:32:55:f0:8b:c5:
         03:f3:31:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbWm/IU4jXAk2tEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4M2UtNjBlOTFmY2Q5
ZjQxMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDYyODEyNTg1NFowLzEtMCsGA1UEAxMk
N2ViOGU5MTYtMTgwMy00ZTI3LTk5N2ItMWM1NzRiNmU1ZWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyVwwekPM7hSWsJmPapZrKG5IszJAL/3NnYb
TMsAr2C181Z5dJNSBBIrYhvfXTTBcavavfbroQw52U7PQng1m5+fy0G/pxJOsF98
+H3wS4npcEZ/esdCq+F3z70B6MZ2X2xX1VTTBfSGk5eL04IbCxK8/ObZSAZYQMKS
O/t3MVu8TTgzRDZoE330b1HIf4ffU1sOnqjERK9BRod4jaM6avHM+XbQC+H2bCAR
daLgYGyuG79ObZoo1wCO/goNcfS3YmMW9AuXSCcBqRHDvKfI9NAuh5gKK3Hi0efO
ubCl7cy2DrkCNzpG0+8fN8bV3Zo5LH4mbLe5IXal8CG5VpXznwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD3/JNLS5daz1QL2izckiR8t8Si/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZm
MGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5MWZjZDlmNDEvOTU2YWFmMTUtZTM3NS0z
ODk0LTkyYWQtYzQxZmQ2MGQ3ZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4
M2UtNjBlOTFmY2Q5ZjQxL2E4NmYwZjZmLWRhNjctNGZmZi1hODNlLTYwZTkxZmNk
OWY0MS5jcmwwHwYDVR0jBBgwFoAUZKDSyOp4SNVqHvBQsMFRkE4g9AcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZmMGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5
MWZjZDlmNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx5oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGF3UKxPP0tk5QE/EwFnckKuDE0KKTbRWHxIHwnd5ACyLFfDHtrx92Zj
LSKYEV6P+7fAM5edEGMJ5EZO5OYea2o0MGsujHuy9UbRbuNalqqjUJBNl4IWNx6N
8u6mfZscYsRzZCIrAIpDwvWx1kU7BK4owWH+7uw552qDaeki44XW3IyGbr7A8S5Z
PMWhxyvUZDsRgFm2ey4ewmPreFWLG4HWKsjTP/154fd8i/1eJ3RoA7oQ+gB66que
XZMb6PbtaLC45Gi8TJdEhgzRomcAkcNL8aOxphpgICGbV+d0KnK6yhebsIhoiIqd
HLBN2c5HiOXXm/qOKvcyVfCLxQPzMfs=
-----END CERTIFICATE-----