Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/8586d36e-a1ff-31ab-8263-745c392667b3.roa
File:                     8586d36e-a1ff-31ab-8263-745c392667b3.roa (raw, json)
Hash identifier:          us9wA4uUc77AcgXmPURE0z38/1uwAAQehgNcK+fXLss=
Subject key identifier:   1C:8B:0C:D8:20:8A:9B:BA:99:05:90:42:A4:EA:C1:7A:F2:64:38:43
Certificate issuer:       /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
Certificate serial:       010D0C9F432858428CB39F937D84E643E19C0B00
Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/8586d36e-a1ff-31ab-8263-745c392667b3.roa
Signing time:             Sat 15 Jul 2023 01:00:17 +0000
ROA not before:           Sat 15 Jul 2023 01:00:17 +0000
ROA not after:            Fri 13 Oct 2023 01:00:17 +0000
asID:                     133846
IP address blocks:        23.146.88.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:8c:b3:9f:93:7d:84:e6:43:e1:9c:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
        Validity
            Not Before: Jul 15 01:00:17 2023 GMT
            Not After : Oct 13 01:00:17 2023 GMT
        Subject: CN=ba7aed3e-bf82-4f68-8306-6f2c348dfe30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:69:89:73:b3:94:6c:2d:6e:ad:a4:a0:93:4b:
                    bd:53:fd:41:4e:10:3b:43:d6:44:27:18:89:8b:33:
                    f7:98:ce:94:35:6f:9e:16:95:89:d8:5c:39:4f:d8:
                    8e:2c:4d:6e:84:b9:6a:98:74:f2:dd:ad:c0:c5:ae:
                    ab:24:7b:ec:40:b8:08:49:ee:18:c3:15:1d:a1:73:
                    74:29:6e:53:c1:21:43:54:8d:ad:f1:c0:41:b5:8b:
                    c7:33:87:7f:09:ea:d9:13:58:3f:9d:93:34:c7:b9:
                    74:53:99:b5:90:31:c5:5c:cf:cf:0a:9d:66:98:13:
                    b5:ca:71:48:23:19:cb:69:72:da:27:a0:4d:e6:5d:
                    d4:2b:85:44:1a:69:86:55:2f:47:5c:fa:b4:2c:8e:
                    20:e7:07:d8:15:d4:83:8d:b3:f9:c5:2a:43:e6:b9:
                    e9:2e:5b:ab:08:51:2f:1d:7e:a5:35:43:e6:a0:bd:
                    f8:47:90:66:56:86:78:7d:68:21:0f:7e:5d:d7:a5:
                    11:77:f8:dc:63:2f:67:85:a3:3b:3d:1e:27:30:aa:
                    b2:cb:21:c4:50:d3:c2:0f:18:b1:a7:e8:8c:58:85:
                    c0:5a:2d:ce:d7:46:70:92:96:f2:1b:e6:1b:fb:92:
                    f3:1c:51:d6:61:10:a1:6c:6a:86:c0:e9:0b:bf:d1:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8B:0C:D8:20:8A:9B:BA:99:05:90:42:A4:EA:C1:7A:F2:64:38:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/8586d36e-a1ff-31ab-8263-745c392667b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7a:69:5b:1d:b8:2b:68:a2:ce:00:a5:8a:63:23:36:60:52:
         e4:23:3b:bb:75:d1:6a:ee:70:04:69:55:9d:99:6b:6e:23:cd:
         e0:3b:5f:33:93:f3:f7:dd:9b:f2:de:f8:2f:c5:44:f7:bd:c1:
         e4:63:21:61:87:42:d6:9f:e0:f7:e6:53:46:d2:95:d8:6b:6f:
         e2:41:c4:92:dc:af:56:d6:06:81:fe:f0:33:9c:ac:bc:6c:4f:
         5c:36:9a:fc:12:8a:a9:86:2a:54:b7:d1:03:aa:06:a4:96:f6:
         2a:37:27:80:d3:c1:ed:25:3b:09:18:c3:a5:e7:14:c6:94:f9:
         26:8c:ff:d5:6e:c0:c2:c1:58:be:56:91:66:36:5f:0a:5e:b1:
         01:ff:e3:e2:7e:82:cd:43:81:f7:ab:19:fd:1f:eb:9b:9b:02:
         af:4d:54:ab:54:3c:5b:0d:5d:bc:b0:a8:6b:7d:7f:a1:36:ae:
         fb:31:8a:80:88:dc:6f:0e:cf:cd:dd:7a:fd:26:0c:6a:e2:19:
         71:47:b6:74:88:70:5a:56:91:d3:dd:27:60:45:90:87:2b:8d:
         7f:78:b3:93:bb:97:e5:90:69:e8:02:57:a6:c0:dc:ed:78:e5:
         0d:3d:41:49:70:3a:1e:3b:b6:91:d2:33:77:34:7c:5b:0f:54:
         cd:43:a9:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKMs5+TfYTmQ+GcCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc0YmIyZjEtNTk2Ni00YzRhLWE1ZTQtYWNlNTllMWZh
MjdlMB4XDTIzMDcxNTAxMDAxN1oXDTIzMTAxMzAxMDAxN1owLzEtMCsGA1UEAxMk
YmE3YWVkM2UtYmY4Mi00ZjY4LTgzMDYtNmYyYzM0OGRmZTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWmJc7OUbC1uraSgk0u9U/1BThA7Q9ZEJxiJ
izP3mM6UNW+eFpWJ2Fw5T9iOLE1uhLlqmHTy3a3Axa6rJHvsQLgISe4YwxUdoXN0
KW5TwSFDVI2t8cBBtYvHM4d/CerZE1g/nZM0x7l0U5m1kDHFXM/PCp1mmBO1ynFI
IxnLaXLaJ6BN5l3UK4VEGmmGVS9HXPq0LI4g5wfYFdSDjbP5xSpD5rnpLlurCFEv
HX6lNUPmoL34R5BmVoZ4fWghD35d16URd/jcYy9nhaM7PR4nMKqyyyHEUNPCDxix
p+iMWIXAWi3O10ZwkpbyG+Yb+5LzHFHWYRChbGqGwOkLv9FgPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFByLDNggipu6mQWQQqTqwXryZDhDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzRi
YjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1OWUxZmEyN2UvODU4NmQzNmUtYTFmZi0z
MWFiLTgyNjMtNzQ1YzM5MjY2N2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTc0YmIyZjEtNTk2Ni00YzRhLWE1
ZTQtYWNlNTllMWZhMjdlL2E3NGJiMmYxLTU5NjYtNGM0YS1hNWU0LWFjZTU5ZTFm
YTI3ZS5jcmwwHwYDVR0jBBgwFoAUjywaXYc3fEchHhd6esViwQde3lgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hNzRiYjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1
OWUxZmEyN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5JYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADp6aVsduCtoos4ApYpjIzZgUuQjO7t10WrucARpVZ2Za24jzeA7XzOT
8/fdm/Le+C/FRPe9weRjIWGHQtaf4PfmU0bSldhrb+JBxJLcr1bWBoH+8DOcrLxs
T1w2mvwSiqmGKlS30QOqBqSW9io3J4DTwe0lOwkYw6XnFMaU+SaM/9VuwMLBWL5W
kWY2XwpesQH/4+J+gs1DgferGf0f65ubAq9NVKtUPFsNXbywqGt9f6E2rvsxioCI
3G8Oz83dev0mDGriGXFHtnSIcFpWkdPdJ2BFkIcrjX94s5O7l+WQaegCV6bA3O14
5Q09QUlwOh47tpHSM3c0fFsPVM1DqQg=
-----END CERTIFICATE-----