Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a08be18f-d0e6-34e9-9a0f-7c6d78e42b78.roa
File:                     a08be18f-d0e6-34e9-9a0f-7c6d78e42b78.roa (raw, json)
Hash identifier:          0nCJU2k06ZmBY7c3uQ2DiNQ4YTVavqPZJ3sEEN9m8mo=
Subject key identifier:   ED:5C:D5:1B:F3:F2:D3:0D:6F:AF:87:59:B3:28:70:57:DF:C1:C7:6F
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F43285841E446C18485590297F6437100
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a08be18f-d0e6-34e9-9a0f-7c6d78e42b78.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Fri 30 Jun 2023 21:55:33 +0000
asID:                     40676
IP address blocks:        104.193.224.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:c1:84:85:59:02:97:f6:43:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jun 30 21:55:33 2023 GMT
        Subject: CN=5577d816-1578-4523-9f37-af7be59b68b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fe:b4:35:d6:fb:6e:e0:9a:b0:de:d4:8e:04:
                    20:6e:ca:14:04:f9:4c:2c:42:cf:13:d0:6f:23:be:
                    e4:14:d1:70:a5:07:66:f2:85:7e:26:d4:af:b2:55:
                    17:20:9c:11:dd:f1:60:33:db:2c:c7:60:2d:a1:c6:
                    4b:90:54:2f:30:f1:ad:96:a3:81:0e:f7:66:44:0b:
                    9b:07:53:7d:42:5e:c3:41:7b:e4:98:de:9a:c6:5d:
                    ff:76:13:b5:0a:3c:65:99:e2:33:c2:2a:46:a2:b5:
                    56:9a:1f:18:4e:a3:e4:f3:f4:0e:cb:1a:90:34:64:
                    d4:e5:d7:18:e4:5e:1a:3e:75:32:b3:ec:6f:8a:07:
                    19:8b:45:b1:98:0f:54:de:30:6e:3d:b0:50:e4:c8:
                    f2:c5:0a:1e:c6:10:70:d8:fe:40:9f:7a:75:2c:61:
                    8c:28:58:a5:cc:bb:9f:5a:3b:ca:2a:98:a2:8c:a9:
                    52:d3:cb:3b:88:5c:b4:23:41:36:f5:79:39:b4:cb:
                    be:7c:19:91:e9:86:95:72:20:69:f1:3f:e4:9e:f8:
                    90:0e:93:89:e4:79:d5:54:a4:be:45:a3:06:89:7f:
                    11:09:f6:ab:7c:2f:43:47:36:58:0e:0a:a9:e1:23:
                    93:46:74:4f:f6:22:45:27:d9:07:9e:16:59:fa:2d:
                    a1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5C:D5:1B:F3:F2:D3:0D:6F:AF:87:59:B3:28:70:57:DF:C1:C7:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a08be18f-d0e6-34e9-9a0f-7c6d78e42b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:2c:65:90:f7:e6:36:4c:48:59:b5:79:4b:76:c5:12:c6:54:
         e7:08:12:4e:bd:98:09:b9:7f:57:11:84:93:48:7a:12:fb:2c:
         8d:8a:11:ab:ff:af:47:4c:b9:c2:5a:f9:49:b3:03:b6:84:81:
         bc:b5:4e:a5:9c:cd:fb:cb:3d:8c:d2:66:87:7b:81:7b:42:53:
         f7:d7:82:d0:f5:66:b3:ef:1b:ae:f0:c7:3c:1a:27:40:ab:15:
         ca:62:1a:6f:8e:d0:92:54:96:67:f4:6b:26:19:93:61:6c:d4:
         a2:4b:34:86:ec:78:27:51:47:53:21:eb:2d:e1:ce:3c:41:16:
         26:3a:eb:b9:7c:75:f6:45:05:b9:91:cf:bb:c9:cd:ea:8d:55:
         85:f3:5c:19:39:65:17:44:bb:90:60:d1:eb:a7:65:58:c8:92:
         b1:cd:05:f4:3e:cb:5b:e8:46:27:ad:8a:e3:6f:a1:6d:3a:57:
         05:2b:6f:c7:14:04:30:44:f9:98:5b:55:e6:19:73:0f:70:71:
         f7:6b:89:c7:19:6f:03:11:9c:ea:96:b8:88:4c:d6:99:91:6e:
         c8:94:b3:88:05:33:d6:e5:0c:7b:8a:dc:86:57:bb:13:13:f2:
         d0:d2:3f:51:61:3d:3b:2b:6f:89:3d:bb:8b:0c:c3:60:b4:a5:
         ab:ef:20:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRsGEhVkCl/ZDcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0
ZWE5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDYzMDIxNTUzM1owLzEtMCsGA1UEAxMk
NTU3N2Q4MTYtMTU3OC00NTIzLTlmMzctYWY3YmU1OWI2OGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv60Ndb7buCasN7UjgQgbsoUBPlMLELPE9Bv
I77kFNFwpQdm8oV+JtSvslUXIJwR3fFgM9ssx2AtocZLkFQvMPGtlqOBDvdmRAub
B1N9Ql7DQXvkmN6axl3/dhO1CjxlmeIzwipGorVWmh8YTqPk8/QOyxqQNGTU5dcY
5F4aPnUys+xvigcZi0WxmA9U3jBuPbBQ5MjyxQoexhBw2P5An3p1LGGMKFilzLuf
WjvKKpiijKlS08s7iFy0I0E29Xk5tMu+fBmR6YaVciBp8T/knviQDpOJ5HnVVKS+
RaMGiX8RCfarfC9DRzZYDgqp4SOTRnRP9iJFJ9kHnhZZ+i2hcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1c1Rvz8tMNb6+HWbMocFffwcdvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi
MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYTA4YmUxOGYtZDBlNi0z
NGU5LTlhMGYtN2M2ZDc4ZTQyYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3
MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj
NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5
ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMHgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANgsZZD35jZMSFm1eUt2xRLGVOcIEk69mAm5f1cRhJNIehL7LI2KEav/
r0dMucJa+UmzA7aEgby1TqWczfvLPYzSZod7gXtCU/fXgtD1ZrPvG67wxzwaJ0Cr
FcpiGm+O0JJUlmf0ayYZk2Fs1KJLNIbseCdRR1Mh6y3hzjxBFiY667l8dfZFBbmR
z7vJzeqNVYXzXBk5ZRdEu5Bg0eunZVjIkrHNBfQ+y1voRietiuNvoW06VwUrb8cU
BDBE+ZhbVeYZcw9wcfdriccZbwMRnOqWuIhM1pmRbsiUs4gFM9blDHuK3IZXuxMT
8tDSP1FhPTsrb4k9u4sMw2C0pavvIEg=
-----END CERTIFICATE-----