Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/be2fd6eb-5b38-38d9-986f-d138119beae9.roa
File:                     be2fd6eb-5b38-38d9-986f-d138119beae9.roa (raw, json)
Hash identifier:          +rHKNM/6Ga2mtNQ6aHvfVOeNhqymGfBKITHS10ysutk=
Subject key identifier:   65:BC:C8:AE:BC:1E:7F:9E:C8:33:92:D8:E9:04:70:07:74:87:60:AF
Certificate issuer:       /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial:       010D0C9F43285842A3091523CF72637A66BF4480
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/be2fd6eb-5b38-38d9-986f-d138119beae9.roa
Signing time:             Sun 23 Jul 2023 01:00:17 +0000
ROA not before:           Sun 23 Jul 2023 01:00:17 +0000
ROA not after:            Sat 21 Oct 2023 01:00:17 +0000
asID:                     14618
IP address blocks:        149.72.106.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a3:09:15:23:cf:72:63:7a:66:bf:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
        Validity
            Not Before: Jul 23 01:00:17 2023 GMT
            Not After : Oct 21 01:00:17 2023 GMT
        Subject: CN=d4ba869a-1d83-4f53-aab4-0c12885a6b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:ad:81:12:bb:81:b1:42:90:ae:d5:80:7a:
                    30:69:76:00:73:56:ff:aa:64:1a:a7:65:75:95:0f:
                    a6:99:c6:58:b3:82:69:02:33:71:85:5a:dc:5b:e4:
                    ba:97:86:f3:77:48:ae:1c:82:5e:46:6b:65:41:7f:
                    fd:ba:a6:3f:fc:f4:6c:bb:ac:c9:f5:93:71:59:f0:
                    0e:dc:3a:d8:02:33:60:34:42:e2:92:9d:d1:e3:82:
                    09:c6:d2:07:11:7b:69:62:57:53:f1:3c:f3:5a:42:
                    9a:3b:64:e7:8c:0d:68:fe:ca:c0:ce:b3:0b:9e:6e:
                    0f:89:67:79:1b:b4:b5:82:f0:f6:6d:70:ee:32:e0:
                    ca:c5:bb:66:f3:06:e5:fd:2e:fe:4b:b2:99:52:ac:
                    e4:6f:71:b0:9c:fa:92:8d:24:62:60:8f:4a:68:d7:
                    b1:96:1a:9a:82:39:ac:b0:12:6d:8b:d4:d3:17:58:
                    c0:34:de:a5:6f:24:9d:62:25:82:de:f5:4a:80:26:
                    2c:01:0c:7e:9a:e0:c5:0a:4b:23:19:66:f6:2c:18:
                    8b:10:a9:52:c6:c6:68:67:f4:c4:b6:fa:ff:c0:da:
                    51:ee:76:8a:a8:bd:f8:71:c3:f3:ef:5f:ab:b7:ba:
                    67:0b:18:81:1a:78:9e:f2:4a:b1:dc:98:db:13:c4:
                    f9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BC:C8:AE:BC:1E:7F:9E:C8:33:92:D8:E9:04:70:07:74:87:60:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/be2fd6eb-5b38-38d9-986f-d138119beae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl

            X509v3 Authority Key Identifier:
                keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.72.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:1a:d9:18:cd:91:61:a4:aa:4e:61:01:1a:8f:0b:2a:1c:33:
         f2:f7:69:17:90:32:91:25:bf:17:b6:e0:c9:5b:d7:7a:51:8d:
         b3:b6:32:31:26:3c:7e:61:0d:4e:44:e8:90:a9:20:77:dc:31:
         42:59:b0:0f:5f:d7:9f:22:8f:90:b7:fa:b8:cb:e5:12:7e:6c:
         9f:da:35:a2:fd:4d:de:69:4a:56:69:5c:88:15:74:87:a6:00:
         b3:a2:61:5c:b6:f1:d6:46:49:0b:d3:37:2b:8d:73:5c:e5:71:
         40:c6:0b:04:a6:7e:d0:4f:54:c8:8b:22:67:e0:ca:0f:c7:69:
         16:ef:68:3e:00:a8:9d:9d:19:bf:9e:2d:79:29:e4:9a:fc:55:
         25:36:74:ff:c4:1d:ce:4b:6c:d0:54:b9:a7:a8:44:7f:01:40:
         a9:17:a4:47:e2:45:33:30:d4:f9:15:c8:23:25:4a:ac:ef:ae:
         73:b6:28:e7:0d:2e:bd:32:05:16:df:dd:36:4c:15:c2:2d:b9:
         53:c6:31:30:59:bf:10:3a:5b:ec:30:ec:28:91:cb:7e:67:e2:
         52:df:1c:7f:83:78:e0:ca:5f:bd:b9:3b:47:e9:e8:ad:46:e3:
         44:44:4d:a2:45:e6:7c:38:2d:1b:7a:c7:7e:d6:2f:a3:4c:87:
         a7:b3:7b:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKjCRUjz3Jjema/RIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3
YzBiMB4XDTIzMDcyMzAxMDAxN1oXDTIzMTAyMTAxMDAxN1owLzEtMCsGA1UEAxMk
ZDRiYTg2OWEtMWQ4My00ZjUzLWFhYjQtMGMxMjg4NWE2YjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHutgRK7gbFCkK7VgHowaXYAc1b/qmQap2V1
lQ+mmcZYs4JpAjNxhVrcW+S6l4bzd0iuHIJeRmtlQX/9uqY//PRsu6zJ9ZNxWfAO
3DrYAjNgNELikp3R44IJxtIHEXtpYldT8TzzWkKaO2TnjA1o/srAzrMLnm4PiWd5
G7S1gvD2bXDuMuDKxbtm8wbl/S7+S7KZUqzkb3GwnPqSjSRiYI9KaNexlhqagjms
sBJti9TTF1jANN6lbySdYiWC3vVKgCYsAQx+muDFCksjGWb2LBiLEKlSxsZoZ/TE
tvr/wNpR7naKqL34ccPz71+rt7pnCxiBGnie8kqx3JjbE8T5JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGW8yK68Hn+eyDOS2OkEcAd0h2CvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl
MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvYmUyZmQ2ZWItNWIzOC0z
OGQ5LTk4NmYtZDEzODExOWJlYWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3
OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli
N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy
MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlUhqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK8a2RjNkWGkqk5hARqPCyocM/L3aReQMpElvxe24Mlb13pRjbO2MjEm
PH5hDU5E6JCpIHfcMUJZsA9f158ij5C3+rjL5RJ+bJ/aNaL9Td5pSlZpXIgVdIem
ALOiYVy28dZGSQvTNyuNc1zlcUDGCwSmftBPVMiLImfgyg/HaRbvaD4AqJ2dGb+e
LXkp5Jr8VSU2dP/EHc5LbNBUuaeoRH8BQKkXpEfiRTMw1PkVyCMlSqzvrnO2KOcN
Lr0yBRbf3TZMFcItuVPGMTBZvxA6W+ww7CiRy35n4lLfHH+DeODKX725O0fp6K1G
40RETaJF5nw4LRt6x37WL6NMh6eze8c=
-----END CERTIFICATE-----