Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44009392-4f29-3730-91ff-66d90017827c.roa
File:                     44009392-4f29-3730-91ff-66d90017827c.roa (raw, json)
Hash identifier:          7xjUgnEZtYM6E63RYxZ7kqH9s3qKthVq29GXfh2jjvY=
Subject key identifier:   80:BC:38:30:FD:90:1B:0A:5B:BF:AB:27:26:71:B3:72:30:95:04:FC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D793621B65A208EF1BA0C8480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44009392-4f29-3730-91ff-66d90017827c.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     394996
IP address blocks:        184.105.180.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:36:21:b6:5a:20:8e:f1:ba:0c:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=62ec9158-84fe-4bd0-a488-99a313e54ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:09:8c:45:cc:b8:f0:59:e5:62:1c:c3:56:
                    f5:aa:a5:95:0f:62:cc:11:0d:b2:02:d1:3b:4f:35:
                    d6:a6:ee:de:90:4b:3d:85:73:75:f2:db:9e:09:0e:
                    9c:4e:29:a1:68:06:34:d2:05:74:6a:ad:2d:c1:46:
                    7d:4c:c4:59:e8:7f:e8:7b:ef:26:fc:f6:45:46:f5:
                    0b:fd:d2:e9:e1:45:54:f0:5d:7c:2a:e9:d4:26:f6:
                    4f:6f:a4:33:03:74:ed:62:b3:17:a8:68:a3:f2:5c:
                    50:99:47:b9:82:d2:1c:63:f3:a8:1a:4c:98:da:7e:
                    1b:7d:1a:52:07:5f:eb:f5:79:23:ac:70:74:a9:93:
                    7f:3d:9f:75:7b:ae:6b:fa:d4:eb:a3:75:f8:29:71:
                    26:d7:0f:a6:76:c1:a5:0a:ae:4f:da:40:45:a6:c5:
                    d8:bd:4e:28:50:88:72:67:2d:05:b2:2c:d5:e3:b8:
                    99:bb:a9:fc:2f:98:0d:de:21:5a:da:ab:87:a2:2f:
                    c2:ad:d3:ea:e3:a6:4f:de:91:22:ce:8c:e2:56:54:
                    09:b3:c7:23:7a:9b:7c:a5:73:09:ba:72:2f:c5:50:
                    9b:ee:61:8b:05:6d:dd:e6:ea:e3:cb:24:34:3e:30:
                    8b:ec:6c:db:2c:0e:6a:d3:5f:4f:7a:26:d7:19:01:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BC:38:30:FD:90:1B:0A:5B:BF:AB:27:26:71:B3:72:30:95:04:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44009392-4f29-3730-91ff-66d90017827c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:55:64:fe:fb:94:5f:a5:cb:8b:65:3c:84:6f:c7:3b:8b:62:
         05:86:10:12:13:4f:85:95:05:b9:44:f2:44:ba:bf:b1:dc:49:
         4b:cb:13:e8:53:c6:6a:84:ec:82:d1:5b:3a:09:f0:0a:92:5f:
         cd:ab:4b:d2:5c:9e:7f:e0:3c:9e:39:06:7c:7e:6d:22:29:5d:
         94:ae:dd:ef:cd:42:74:e7:9c:3d:c1:cb:54:fa:46:1e:f2:9e:
         d7:25:b3:5a:5c:ca:07:28:b1:93:9c:9b:f5:d0:de:d0:19:1a:
         d6:c5:7f:05:3b:2a:99:80:13:23:a3:38:a4:70:bc:5b:1e:6b:
         da:07:8f:69:aa:74:8f:b1:33:e5:b5:37:15:aa:ee:2b:84:20:
         e4:99:62:b5:43:b0:78:db:e8:25:2b:0f:a7:74:a1:de:96:d4:
         3b:5c:ea:b2:1a:79:93:b6:fe:e4:b6:69:45:b4:ad:a9:77:c4:
         f3:d0:55:98:51:28:40:f1:5e:aa:3b:68:be:45:80:4f:fd:9d:
         cb:8c:2f:99:3a:41:32:3d:fd:9e:66:68:d3:a0:c3:5c:ef:3f:
         79:c5:83:c4:7c:dd:61:07:b7:45:ab:58:9c:52:e0:25:d5:3c:
         e0:29:75:ca:5b:b0:13:7a:19:0c:ab:ba:8e:87:46:61:e5:e9:
         6b:cc:0a:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD15NiG2WiCO8boMhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDQwNTA0MDAwMFoXDTIyMTAwNTA0MDAwMFowLzEtMCsGA1UEAxMk
NjJlYzkxNTgtODRmZS00YmQwLWE0ODgtOTlhMzEzZTU0Y2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz0JjEXMuPBZ5WIcw1b1qqWVD2LMEQ2yAtE7
TzXWpu7ekEs9hXN18tueCQ6cTimhaAY00gV0aq0twUZ9TMRZ6H/oe+8m/PZFRvUL
/dLp4UVU8F18KunUJvZPb6QzA3TtYrMXqGij8lxQmUe5gtIcY/OoGkyY2n4bfRpS
B1/r9XkjrHB0qZN/PZ91e65r+tTro3X4KXEm1w+mdsGlCq5P2kBFpsXYvU4oUIhy
Zy0FsizV47iZu6n8L5gN3iFa2quHoi/CrdPq46ZP3pEizoziVlQJs8cjept8pXMJ
unIvxVCb7mGLBW3d5urjyyQ0PjCL7GzbLA5q019PeibXGQGyhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIC8ODD9kBsKW7+rJyZxs3IwlQT8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDQwMDkzOTItNGYyOS0z
NzMwLTkxZmYtNjZkOTAwMTc4MjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuGm0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEhVZP77lF+ly4tlPIRvxzuLYgWGEBITT4WVBblE8kS6v7HcSUvLE+hT
xmqE7ILRWzoJ8AqSX82rS9Jcnn/gPJ45Bnx+bSIpXZSu3e/NQnTnnD3By1T6Rh7y
ntcls1pcygcosZOcm/XQ3tAZGtbFfwU7KpmAEyOjOKRwvFsea9oHj2mqdI+xM+W1
NxWq7iuEIOSZYrVDsHjb6CUrD6d0od6W1Dtc6rIaeZO2/uS2aUW0ral3xPPQVZhR
KEDxXqo7aL5FgE/9ncuML5k6QTI9/Z5maNOgw1zvP3nFg8R83WEHt0WrWJxS4CXV
POApdcpbsBN6GQyruo6HRmHl6WvMCrM=
-----END CERTIFICATE-----