Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/abc5aa67-6b65-312d-92be-6be0384d4022.roa
File:                     abc5aa67-6b65-312d-92be-6be0384d4022.roa (raw, json)
Hash identifier:          zTIQXf+VcyYQs09jABcUwsIWI3SGBkwMuEE42rMGPRg=
Subject key identifier:   1D:18:83:06:4D:1F:C5:48:A2:A6:CE:1F:88:66:94:81:E2:57:39:E8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648D9FF4E73CDEF14D80D980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/abc5aa67-6b65-312d-92be-6be0384d4022.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     54934
IP address blocks:        184.105.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:9f:f4:e7:3c:de:f1:4d:80:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=1015fa9f-cc31-4ecb-b3cc-8596ca3433e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:44:b4:bf:6d:7b:b2:92:e5:ae:62:ae:e8:51:
                    a0:f0:f3:bc:db:d3:0c:69:60:84:16:b0:49:9b:6a:
                    6d:52:5e:f4:32:90:0e:02:e7:c6:2b:59:ba:64:c5:
                    33:6f:11:1f:c9:31:eb:2a:6d:7b:d0:18:4a:5d:aa:
                    95:eb:ff:f6:8a:0d:d2:0f:ef:36:94:55:64:36:d5:
                    88:c7:c5:ef:3a:10:83:45:a8:6d:e3:a9:6c:9b:e7:
                    8f:e5:5f:f1:46:bd:6c:f7:a1:fa:de:3d:99:52:d5:
                    1d:ad:fa:f2:79:f3:44:ba:b5:98:05:2c:fa:7f:9d:
                    a4:d7:9c:16:37:78:4c:ca:3e:f2:5a:e9:11:65:a9:
                    99:32:20:2b:b3:e1:08:3d:97:2b:60:8b:64:2f:6a:
                    50:49:0e:c3:92:52:69:87:bf:c6:72:35:c1:ac:bd:
                    8e:77:be:24:7e:4e:bd:c6:9b:c7:de:1d:82:93:c2:
                    87:9e:28:71:55:31:63:a2:3c:50:8b:f9:48:57:e5:
                    c5:0e:08:18:e8:11:85:d1:a1:56:5d:39:ad:92:e6:
                    93:a9:5f:7d:b4:5e:01:ae:c4:21:fb:2a:36:56:33:
                    18:13:42:32:84:4e:19:ef:22:be:0e:b1:89:a3:bb:
                    0b:fc:90:14:60:6f:26:1f:f5:6b:05:a6:36:66:06:
                    b0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:18:83:06:4D:1F:C5:48:A2:A6:CE:1F:88:66:94:81:E2:57:39:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/abc5aa67-6b65-312d-92be-6be0384d4022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d6:52:96:03:c0:e7:9c:5d:63:2e:85:93:a7:c2:f7:c7:55:
         2e:88:80:98:60:da:d8:0b:5c:66:a3:cd:49:e6:9f:1b:7d:73:
         40:ac:a3:f2:3b:e9:0e:69:06:c0:3d:03:92:ca:3d:9b:9d:1b:
         87:e3:e9:15:2d:0c:41:61:ec:cd:c4:67:d4:d9:ed:6c:cf:5d:
         17:1f:a8:15:f3:af:51:84:50:1e:5f:a8:4e:67:b1:af:da:45:
         23:f7:10:6b:7a:61:c0:c3:f6:8a:3d:7e:ff:67:49:33:b4:75:
         1c:bc:e2:3e:78:05:91:dd:f2:8a:93:fc:2f:57:fa:15:2b:85:
         cd:f6:8e:de:6b:3c:f5:2a:c2:0b:1b:c2:b2:da:62:1b:d2:2a:
         a4:e7:f0:d2:f8:cd:0d:2a:e5:e8:fe:f6:94:70:a8:bc:da:b9:
         19:31:07:d8:55:84:7c:26:20:46:fc:1e:1e:0a:3f:a3:59:f3:
         7f:fc:93:f9:df:7b:b4:a5:e8:7f:c3:47:6f:95:77:c6:e7:52:
         51:6f:ec:10:85:70:02:c5:de:d2:b3:c1:61:e2:12:c4:c3:5f:
         26:83:8f:4c:97:a6:d7:4e:25:f0:e7:d8:58:74:5a:9a:78:7e:
         9f:d5:d6:3e:78:47:d4:c7:26:c3:00:0d:91:24:a6:7f:00:6d:
         63:a6:4c:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9kjZ/05zze8U2A2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkyNzEyMDAwMFoXDTIzMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk
MTAxNWZhOWYtY2MzMS00ZWNiLWIzY2MtODU5NmNhMzQzM2U4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnES0v217spLlrmKu6FGg8PO829MMaWCEFrBJ
m2ptUl70MpAOAufGK1m6ZMUzbxEfyTHrKm170BhKXaqV6//2ig3SD+82lFVkNtWI
x8XvOhCDRaht46lsm+eP5V/xRr1s96H63j2ZUtUdrfryefNEurWYBSz6f52k15wW
N3hMyj7yWukRZamZMiArs+EIPZcrYItkL2pQSQ7DklJph7/GcjXBrL2Od74kfk69
xpvH3h2Ck8KHnihxVTFjojxQi/lIV+XFDggY6BGF0aFWXTmtkuaTqV99tF4BrsQh
+yo2VjMYE0IyhE4Z7yK+DrGJo7sL/JAUYG8mH/VrBaY2ZgawLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0YgwZNH8VIoqbOH4hmlIHiVznoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWJjNWFhNjctNmI2NS0z
MTJkLTkyYmUtNmJlMDM4NGQ0MDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGksMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHDWUpYDwOecXWMuhZOnwvfHVS6IgJhg2tgLXGajzUnmnxt9c0Cso/I7
6Q5pBsA9A5LKPZudG4fj6RUtDEFh7M3EZ9TZ7WzPXRcfqBXzr1GEUB5fqE5nsa/a
RSP3EGt6YcDD9oo9fv9nSTO0dRy84j54BZHd8oqT/C9X+hUrhc32jt5rPPUqwgsb
wrLaYhvSKqTn8NL4zQ0q5ej+9pRwqLzauRkxB9hVhHwmIEb8Hh4KP6NZ83/8k/nf
e7Sl6H/DR2+Vd8bnUlFv7BCFcALF3tKzwWHiEsTDXyaDj0yXptdOJfDn2Fh0Wpp4
fp/V1j54R9THJsMADZEkpn8AbWOmTMc=
-----END CERTIFICATE-----