Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/49d78ae8-4fe7-37ce-b0c1-bd34d6615a28.roa
File:                     49d78ae8-4fe7-37ce-b0c1-bd34d6615a28.roa (raw, json)
Hash identifier:          MTn3gfLaH+KCPrp9Ps+mX7m84AQp+5EZKbDy7iCiXJc=
Subject key identifier:   0F:21:5A:BC:0D:E1:1C:92:66:3A:AF:D3:64:87:5C:CA:37:8E:F6:11
Certificate issuer:       /CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
Certificate serial:       010D0C9F4328584447453C0408DEC944FE2F1A00
Authority key identifier: 0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/49d78ae8-4fe7-37ce-b0c1-bd34d6615a28.roa
Signing time:             Wed 20 Dec 2023 13:41:02 +0000
ROA not before:           Wed 20 Dec 2023 13:41:02 +0000
ROA not after:            Tue 19 Mar 2024 12:41:02 +0000
asID:                     400384
IP address blocks:        141.195.125.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:47:45:3c:04:08:de:c9:44:fe:2f:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
        Validity
            Not Before: Dec 20 13:41:02 2023 GMT
            Not After : Mar 19 12:41:02 2024 GMT
        Subject: CN=b14de597-722f-4f83-8327-9007e0d06fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:66:19:21:85:cf:73:e8:38:ca:b0:88:af:37:
                    c6:cf:82:6f:11:c3:c6:08:9f:ca:da:e4:2c:bd:31:
                    e3:21:6f:ea:10:85:ba:6d:97:95:49:7c:ca:d5:05:
                    8a:cd:41:f5:fe:63:99:9a:49:6d:17:25:0f:9c:dc:
                    c4:b7:bc:c9:6f:8c:3e:81:64:36:40:4e:46:e2:d0:
                    9d:99:24:bc:87:9e:70:8f:7d:05:ce:c1:56:e2:8a:
                    8f:a8:0b:83:78:cc:7e:96:5a:cc:d7:71:a9:0d:ac:
                    65:e4:8c:46:6c:7f:13:5e:7a:09:29:55:db:48:84:
                    19:7f:99:7f:f6:44:9e:41:df:a4:6d:76:9e:7e:5f:
                    8b:37:94:35:2e:50:37:b6:2d:ce:96:94:78:e9:e4:
                    64:01:2c:77:9c:44:c2:8e:cc:f0:2f:97:51:35:76:
                    ab:c6:c6:8d:62:47:3d:ae:f0:06:b8:cd:a9:95:27:
                    0d:1f:f2:1b:54:9e:79:0b:ac:b2:c6:04:ec:08:aa:
                    3b:a3:87:17:4d:71:d5:22:fc:20:1a:60:84:d7:28:
                    25:4e:8b:f1:e8:f7:c3:b9:bc:77:53:c1:72:15:df:
                    49:22:c9:5a:6b:71:77:7d:03:3b:58:96:0c:c5:35:
                    a3:a7:68:22:ca:c9:93:cd:42:21:85:8c:03:04:ae:
                    71:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:21:5A:BC:0D:E1:1C:92:66:3A:AF:D3:64:87:5C:CA:37:8E:F6:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/49d78ae8-4fe7-37ce-b0c1-bd34d6615a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl

            X509v3 Authority Key Identifier:
                keyid:0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:6f:91:37:ee:b8:e1:af:3c:52:24:84:4d:28:1d:cc:7f:69:
         f0:c6:ce:18:d1:11:11:df:21:b1:c0:ef:19:3a:2e:06:cf:32:
         b5:a6:21:ea:b8:f2:1d:07:5b:ba:78:f4:dc:a9:21:13:24:d9:
         f6:92:e2:4c:42:37:46:c5:75:92:b0:14:19:d8:b6:f9:97:04:
         db:d4:ce:99:cd:d7:da:4d:0f:71:6c:73:51:f1:42:45:bf:d4:
         1f:84:09:e6:bc:d9:45:be:4d:72:f0:70:15:16:14:d1:dc:6b:
         6d:0a:be:18:4d:d8:56:11:de:6c:96:81:d4:e3:1b:be:4a:49:
         68:a1:d3:82:7d:3e:9e:19:4b:46:ba:67:5a:3c:bb:55:f6:c3:
         33:e5:dd:03:bf:9b:6b:3a:d8:05:d4:15:51:ce:af:da:c4:88:
         dd:22:74:97:e5:fd:d0:77:ad:97:ee:b1:5f:08:49:e9:ae:f1:
         d8:b8:7c:7b:a3:56:70:7a:ed:3c:2a:ee:b8:14:d9:12:d5:fd:
         ae:59:2e:fd:93:94:19:77:5c:71:2e:51:b3:f1:e6:b8:3f:41:
         0f:e3:e9:3b:0e:8d:0a:a4:fa:68:c6:59:13:fc:ea:e0:94:a4:
         e6:58:40:96:15:de:6d:cf:aa:36:b8:ef:fd:d7:46:a1:c2:88:
         0e:57:ac:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERHRTwECN7JRP4vGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzc1OGIyZDctZGI5MC00ZTE2LWE1NWMtMWRlNjI5ZjJj
YTA4MB4XDTIzMTIyMDEzNDEwMloXDTI0MDMxOTEyNDEwMlowLzEtMCsGA1UEAxMk
YjE0ZGU1OTctNzIyZi00ZjgzLTgzMjctOTAwN2UwZDA2ZmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWYZIYXPc+g4yrCIrzfGz4JvEcPGCJ/K2uQs
vTHjIW/qEIW6bZeVSXzK1QWKzUH1/mOZmkltFyUPnNzEt7zJb4w+gWQ2QE5G4tCd
mSS8h55wj30FzsFW4oqPqAuDeMx+llrM13GpDaxl5IxGbH8TXnoJKVXbSIQZf5l/
9kSeQd+kbXaefl+LN5Q1LlA3ti3OlpR46eRkASx3nETCjszwL5dRNXarxsaNYkc9
rvAGuM2plScNH/IbVJ55C6yyxgTsCKo7o4cXTXHVIvwgGmCE1yglTovx6PfDubx3
U8FyFd9JIslaa3F3fQM7WJYMxTWjp2giysmTzUIhhYwDBK5xgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8hWrwN4RySZjqv02SHXMo3jvYRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNzU4
YjJkNy1kYjkwLTRlMTYtYTU1Yy0xZGU2MjlmMmNhMDgvNDlkNzhhZTgtNGZlNy0z
N2NlLWIwYzEtYmQzNGQ2NjE1YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzc1OGIyZDctZGI5MC00ZTE2LWE1
NWMtMWRlNjI5ZjJjYTA4L2M3NThiMmQ3LWRiOTAtNGUxNi1hNTVjLTFkZTYyOWYy
Y2EwOC5jcmwwHwYDVR0jBBgwFoAUDmCzSifD5DV2KMoQViGQ2iXNZdAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jNzU4YjJkNy1kYjkwLTRlMTYtYTU1Yy0xZGU2
MjlmMmNhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcN9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlvkTfuuOGvPFIkhE0oHcx/afDGzhjRERHfIbHA7xk6LgbPMrWmIeq4
8h0HW7p49NypIRMk2faS4kxCN0bFdZKwFBnYtvmXBNvUzpnN19pND3Fsc1HxQkW/
1B+ECea82UW+TXLwcBUWFNHca20KvhhN2FYR3myWgdTjG75KSWih04J9Pp4ZS0a6
Z1o8u1X2wzPl3QO/m2s62AXUFVHOr9rEiN0idJfl/dB3rZfusV8ISemu8di4fHuj
VnB67Twq7rgU2RLV/a5ZLv2TlBl3XHEuUbPx5rg/QQ/j6TsOjQqk+mjGWRP86uCU
pOZYQJYV3m3Pqja47/3XRqHCiA5XrNs=
-----END CERTIFICATE-----