Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00e9524f-ed48-3256-bdf1-fd4542cb9640.roa
File:                     00e9524f-ed48-3256-bdf1-fd4542cb9640.roa (raw, json)
Hash identifier:          U2ALkkiNBddrkaFI3h2AfscwPw3WdrlTOJ1jIwdCIV0=
Subject key identifier:   EC:C2:B8:24:B3:98:71:E0:1F:89:D2:75:4E:80:54:3D:81:F2:04:93
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E589F562BE8FF3E1427B0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00e9524f-ed48-3256-bdf1-fd4542cb9640.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     394996
IP address blocks:        184.105.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:58:9f:56:2b:e8:ff:3e:14:27:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=ee175d02-1d4f-46fd-be1d-cab82d907360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:f0:4f:a2:dd:2c:fe:4e:d6:a1:53:8b:a0:
                    d8:7c:cf:08:06:fd:28:58:eb:75:4d:45:91:1a:0c:
                    37:48:64:91:42:ce:97:b2:e3:c2:c8:ad:df:11:74:
                    76:f5:47:64:c5:1f:d0:3c:d8:d5:07:13:78:84:7f:
                    bd:1b:cc:ea:52:8d:cf:41:6c:b7:75:82:8f:36:bd:
                    49:bc:fd:b0:78:64:89:d7:9d:99:31:af:7e:d5:0c:
                    9b:d4:c8:c1:4d:a1:ed:61:6a:78:d0:b1:59:9d:d5:
                    11:32:66:52:a3:48:ee:7c:a8:c3:3f:e5:e0:2e:c4:
                    d6:d3:cc:ef:96:61:76:ba:ad:3e:2b:f8:09:bc:fa:
                    db:dc:b1:4d:e7:a2:55:58:ad:a1:35:bc:02:a8:9d:
                    89:0b:2d:92:2b:5d:5f:6f:16:67:4c:4b:d2:78:69:
                    bb:f3:99:51:7d:56:77:d0:54:b1:e6:e3:89:83:32:
                    cd:ce:d2:61:8f:35:6a:ab:75:b7:59:14:bb:f5:87:
                    17:e9:cb:19:19:07:9d:ea:03:70:19:b2:94:f2:48:
                    cb:c9:22:f6:82:41:c6:26:c2:61:d9:03:6e:a0:f6:
                    1a:81:72:f8:a3:f6:ba:bf:f3:9c:87:f0:54:c4:a8:
                    33:0d:21:c9:27:a8:59:23:16:6e:7b:e8:2c:ae:6e:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C2:B8:24:B3:98:71:E0:1F:89:D2:75:4E:80:54:3D:81:F2:04:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00e9524f-ed48-3256-bdf1-fd4542cb9640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:9b:6f:19:12:4d:60:fb:0b:59:9a:ec:33:9e:97:d1:ab:00:
         e0:de:78:1b:47:c2:bf:39:56:2d:b1:db:71:78:7e:df:2b:dc:
         70:f2:0c:c0:a1:b3:16:9c:d2:a9:0e:3d:76:69:ae:bd:68:94:
         c6:03:bd:3d:f9:9f:d4:09:29:9d:12:49:96:3b:9c:4c:2d:75:
         f5:33:8f:06:1c:62:30:d5:2c:de:7c:b9:73:e1:8f:44:9c:b9:
         b3:03:59:0d:48:bf:c5:f5:0a:92:b4:12:99:0f:f0:45:98:7f:
         cd:da:0f:a3:be:d4:44:1b:04:23:d7:44:ac:2e:a8:53:d7:91:
         2e:0f:b5:f0:97:01:17:0f:ab:9d:2b:39:ca:69:dc:a4:68:7b:
         0d:be:bc:e6:e4:f5:56:43:c2:62:64:49:24:84:25:31:54:64:
         16:b2:72:3c:ee:29:57:18:7f:f2:01:e7:14:08:da:8b:e8:a1:
         b2:43:6c:73:6a:8e:cb:f7:6a:5c:a2:ca:4c:06:a8:bc:6e:dc:
         97:95:a1:b0:84:30:aa:35:a2:da:78:aa:64:75:ef:6e:cc:fd:
         41:97:67:82:28:99:ab:39:87:18:98:5a:6b:7f:e7:c3:f6:5b:
         36:c8:37:94:dc:dd:87:9c:3e:a5:87:48:57:37:7f:ca:da:2b:
         e4:6c:2a:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9kjlifVivo/z4UJ7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkyNzEyMDAwMFoXDTIzMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk
ZWUxNzVkMDItMWQ0Zi00NmZkLWJlMWQtY2FiODJkOTA3MzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT3wT6LdLP5O1qFTi6DYfM8IBv0oWOt1TUWR
Ggw3SGSRQs6XsuPCyK3fEXR29UdkxR/QPNjVBxN4hH+9G8zqUo3PQWy3dYKPNr1J
vP2weGSJ152ZMa9+1Qyb1MjBTaHtYWp40LFZndURMmZSo0jufKjDP+XgLsTW08zv
lmF2uq0+K/gJvPrb3LFN56JVWK2hNbwCqJ2JCy2SK11fbxZnTEvSeGm785lRfVZ3
0FSx5uOJgzLNztJhjzVqq3W3WRS79YcX6csZGQed6gNwGbKU8kjLySL2gkHGJsJh
2QNuoPYagXL4o/a6v/Och/BUxKgzDSHJJ6hZIxZue+gsrm4ktwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOzCuCSzmHHgH4nSdU6AVD2B8gSTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDBlOTUyNGYtZWQ0OC0z
MjU2LWJkZjEtZmQ0NTQyY2I5NjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGnXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2bbxkSTWD7C1ma7DOel9GrAODeeBtHwr85Vi2x23F4ft8r3HDyDMCh
sxac0qkOPXZprr1olMYDvT35n9QJKZ0SSZY7nEwtdfUzjwYcYjDVLN58uXPhj0Sc
ubMDWQ1Iv8X1CpK0EpkP8EWYf83aD6O+1EQbBCPXRKwuqFPXkS4PtfCXARcPq50r
Ocpp3KRoew2+vObk9VZDwmJkSSSEJTFUZBaycjzuKVcYf/IB5xQI2ovoobJDbHNq
jsv3alyiykwGqLxu3JeVobCEMKo1otp4qmR1727M/UGXZ4Iomas5hxiYWmt/58P2
WzbIN5Tc3YecPqWHSFc3f8raK+RsKgE=
-----END CERTIFICATE-----