Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/c2177822-97a9-3b3f-82cc-9b217b150b34.roa
File:                     c2177822-97a9-3b3f-82cc-9b217b150b34.roa (raw, json)
Hash identifier:          1tWw6+MqTzsByciyB9yRPWAiAyr+xxJl1/4BYx/JoA8=
Subject key identifier:   D6:5B:56:96:5F:29:7C:33:03:98:C5:75:93:1C:0B:A0:69:6A:10:F4
Certificate issuer:       /CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Certificate serial:       010D0C9F432858479C111CADB9DC08CBD58773E0
Authority key identifier: FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/c2177822-97a9-3b3f-82cc-9b217b150b34.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     834
IP address blocks:        23.146.40.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:1c:ad:b9:dc:08:cb:d5:87:73:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731a926c-9fe5-4269-8549-a15eec9d00d2
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=c9d504a3-0b1a-4884-9d24-9a01ca079c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:07:dd:fa:19:ca:2d:16:57:2d:42:3a:c5:56:
                    5b:52:fc:df:68:0c:62:a3:db:05:36:96:51:e2:5c:
                    69:0e:96:5f:50:6f:11:37:64:97:5d:60:0a:f7:49:
                    0b:c5:91:51:e9:7f:ac:18:b6:e8:62:cd:ce:18:bf:
                    d2:6d:41:9b:f1:fc:f5:f5:64:54:ff:80:bd:09:14:
                    c9:fb:88:68:1b:df:66:33:79:11:77:ed:1b:d6:c4:
                    48:06:69:63:32:0c:ff:9a:76:46:10:f4:3f:0d:91:
                    70:b1:9d:c0:8e:fc:df:de:90:43:32:68:7b:5f:99:
                    cc:de:38:af:89:e8:c8:14:9b:be:e7:94:aa:4f:2d:
                    e2:f8:67:7e:10:c3:47:f4:79:d6:e2:cb:74:c7:ef:
                    24:d8:cc:62:7f:c5:e5:06:b9:7b:1a:76:4e:1b:e8:
                    8f:0b:f2:5e:85:62:b1:60:66:ab:ed:37:36:d7:0f:
                    71:9d:10:72:e8:37:2e:95:c0:cd:b6:75:0d:7b:e5:
                    86:82:78:f4:a5:6e:76:b8:98:68:c8:6d:b7:10:a6:
                    8c:cf:f1:2b:1a:53:77:99:36:8c:d5:8a:5c:e7:30:
                    54:38:84:de:8f:a2:f5:07:bb:0b:7a:36:97:12:a3:
                    2a:0e:07:16:39:94:d6:ce:29:4c:dd:bb:6f:8e:1a:
                    7e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5B:56:96:5F:29:7C:33:03:98:C5:75:93:1C:0B:A0:69:6A:10:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/c2177822-97a9-3b3f-82cc-9b217b150b34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:21:b9:7c:bd:3c:14:39:46:16:82:0e:7b:c0:25:2b:50:c8:
         e7:89:60:ca:95:b2:a8:87:c0:df:fb:bf:5e:c6:46:10:32:8b:
         cd:98:da:b2:80:bd:57:db:4a:a0:85:1a:eb:e9:e2:38:b0:71:
         cb:7e:24:4b:dd:99:a9:7f:11:86:b1:ec:3f:a0:aa:b0:09:fa:
         ee:ca:a3:1a:5b:66:4f:9d:b4:99:10:3a:c1:6f:2f:95:17:49:
         bd:19:46:32:40:1f:8c:b8:46:a6:bc:f9:9a:04:ad:25:aa:67:
         74:8d:cb:c6:35:8a:f8:98:b4:52:93:35:e1:93:57:65:c9:9f:
         a4:86:35:97:ad:61:a4:5f:d2:21:f3:37:a2:26:c4:17:ba:cd:
         06:94:cb:97:7a:39:da:29:8b:66:52:01:47:3d:99:03:7e:15:
         19:d7:76:97:17:35:a0:16:89:70:41:c9:a2:b2:e3:13:2e:df:
         65:53:26:8a:e9:66:89:0f:b1:3c:14:a0:8d:09:96:05:47:c7:
         0f:41:6d:9e:91:bf:d8:ef:65:c8:f7:65:62:46:64:a7:5a:7e:
         9a:27:ac:c8:0e:09:73:cd:e2:64:ab:33:d0:a1:22:11:85:65:
         fb:f4:e0:5b:a1:87:84:be:3f:e1:99:fa:10:75:e2:2a:2d:3d:
         4a:85:d5:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEecERytudwIy9WHc+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMxYTkyNmMtOWZlNS00MjY5LTg1NDktYTE1ZWVjOWQw
MGQyMB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
YzlkNTA0YTMtMGIxYS00ODg0LTlkMjQtOWEwMWNhMDc5YzQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQfd+hnKLRZXLUI6xVZbUvzfaAxio9sFNpZR
4lxpDpZfUG8RN2SXXWAK90kLxZFR6X+sGLboYs3OGL/SbUGb8fz19WRU/4C9CRTJ
+4hoG99mM3kRd+0b1sRIBmljMgz/mnZGEPQ/DZFwsZ3Ajvzf3pBDMmh7X5nM3jiv
iejIFJu+55SqTy3i+Gd+EMNH9HnW4st0x+8k2Mxif8XlBrl7GnZOG+iPC/JehWKx
YGar7Tc21w9xnRBy6DculcDNtnUNe+WGgnj0pW52uJhoyG23EKaMz/ErGlN3mTaM
1Ypc5zBUOITej6L1B7sLejaXEqMqDgcWOZTWzilM3btvjhp+UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZbVpZfKXwzA5jFdZMcC6BpahD0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MzFh
OTI2Yy05ZmU1LTQyNjktODU0OS1hMTVlZWM5ZDAwZDIvYzIxNzc4MjItOTdhOS0z
YjNmLTgyY2MtOWIyMTdiMTUwYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzMxYTkyNmMtOWZlNS00MjY5LTg1
NDktYTE1ZWVjOWQwMGQyLzczMWE5MjZjLTlmZTUtNDI2OS04NTQ5LWExNWVlYzlk
MDBkMi5jcmwwHwYDVR0jBBgwFoAU/joYbJVWQwBw8KR+SNQjRFuezRIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83MzFhOTI2Yy05ZmU1LTQyNjktODU0OS1hMTVl
ZWM5ZDAwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5IoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABohuXy9PBQ5RhaCDnvAJStQyOeJYMqVsqiHwN/7v17GRhAyi82Y2rKA
vVfbSqCFGuvp4jiwcct+JEvdmal/EYax7D+gqrAJ+u7KoxpbZk+dtJkQOsFvL5UX
Sb0ZRjJAH4y4Rqa8+ZoErSWqZ3SNy8Y1iviYtFKTNeGTV2XJn6SGNZetYaRf0iHz
N6ImxBe6zQaUy5d6Odopi2ZSAUc9mQN+FRnXdpcXNaAWiXBByaKy4xMu32VTJorp
ZokPsTwUoI0JlgVHxw9BbZ6Rv9jvZcj3ZWJGZKdafponrMgOCXPN4mSrM9ChIhGF
Zfv04Fuhh4S+P+GZ+hB14iotPUqF1dg=
-----END CERTIFICATE-----