Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dbfaf23d-aca2-368b-bd83-9c9fd582e893.roa
File:                     dbfaf23d-aca2-368b-bd83-9c9fd582e893.roa (raw, json)
Hash identifier:          YgT1EDDzmVCrl/iuuSdWHjJmhp8uOrE/Bmh5I+cqAW8=
Subject key identifier:   05:D1:F9:E9:CE:06:3F:42:49:55:5D:F0:5B:67:94:15:A1:9D:2C:00
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583EFA776948511BE8EB65DA3540
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dbfaf23d-aca2-368b-bd83-9c9fd582e893.roa
Signing time:             Sat 20 Aug 2022 12:00:00 +0000
ROA not before:           Sat 20 Aug 2022 12:00:00 +0000
ROA not after:            Tue 21 Feb 2023 05:00:00 +0000
asID:                     393880
IP address blocks:        66.160.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:fa:77:69:48:51:1b:e8:eb:65:da:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 20 12:00:00 2022 GMT
            Not After : Feb 21 05:00:00 2023 GMT
        Subject: CN=cb121c9c-b7fd-45fd-a7d6-bdb992a0b865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:32:36:3f:3b:f1:09:87:d3:ff:65:94:47:2a:
                    5f:c7:4b:58:04:b0:28:d5:4a:8c:b8:21:bc:49:ce:
                    bb:db:63:04:9c:f2:31:15:23:a9:30:04:c8:38:bd:
                    d7:29:7f:6e:21:10:08:14:00:a6:a7:cb:65:cb:0d:
                    22:85:e6:03:f1:2b:7c:4e:ca:2c:80:c0:ed:2c:39:
                    99:fb:f9:31:75:21:1e:7e:c2:a2:ca:f0:84:56:cc:
                    be:d0:3e:1e:96:a7:06:d3:fa:1c:b0:16:a7:1e:a5:
                    f3:1b:b5:74:58:79:83:ea:4d:8d:d0:40:19:cc:c2:
                    28:0f:49:52:a9:8b:81:3a:fe:11:35:5f:c7:3c:2b:
                    6b:d2:3d:e8:9a:83:bd:2b:a3:cb:39:e3:63:c7:5d:
                    32:84:e8:61:9d:e7:bd:fb:b5:94:95:ba:14:3d:b5:
                    e4:0c:23:0f:97:c0:59:a6:f6:47:94:68:4d:18:a9:
                    f3:5e:8b:95:d8:99:1d:41:bd:9d:cd:fb:79:8d:6d:
                    7e:92:db:b6:d0:01:3d:59:11:ff:de:d9:de:54:b5:
                    42:f5:91:19:d2:e5:0c:1a:80:fa:5c:a3:3c:c4:a3:
                    bd:17:50:93:9b:d6:e9:19:19:17:8b:6b:cf:cc:9c:
                    97:c2:77:d8:f8:5b:7d:e5:64:6e:90:61:93:b4:aa:
                    19:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D1:F9:E9:CE:06:3F:42:49:55:5D:F0:5B:67:94:15:A1:9D:2C:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dbfaf23d-aca2-368b-bd83-9c9fd582e893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7a:ad:38:95:69:d4:16:36:83:39:58:9a:08:fb:90:06:3e:
         a5:a0:a9:75:5c:09:fe:e7:25:eb:ed:2d:29:ba:bd:55:e5:1a:
         c1:54:93:44:f6:1f:f9:07:f9:b1:2e:09:eb:0b:28:b3:be:23:
         be:6d:f2:7a:72:54:e2:b5:b5:2b:c7:e6:e4:29:7b:f4:e2:d2:
         af:fc:c4:68:32:ad:9a:5e:c7:61:43:24:e1:a2:22:5c:62:99:
         25:1f:0c:a2:13:51:48:37:f1:54:6b:ce:af:43:c0:e4:2b:60:
         de:86:3b:6d:a5:85:86:1d:5e:a4:ab:7c:17:3d:a3:be:07:de:
         6b:b3:95:e3:8f:73:3c:76:1f:6a:ae:c6:22:75:a8:a2:eb:c2:
         c8:69:4c:d7:21:25:5a:79:06:11:67:9a:49:60:c0:18:99:e0:
         c5:7b:4b:fc:60:a2:89:54:01:b0:18:05:af:e0:10:8e:04:6e:
         dd:a0:86:b6:fe:e3:04:7d:cf:4c:f1:45:ef:38:78:1f:18:e0:
         4d:35:4a:6a:7d:3b:d9:45:c8:a8:1e:92:bf:f5:12:05:55:e7:
         71:1a:ec:65:53:a5:eb:81:54:50:21:0a:c2:ea:56:d6:a3:a1:
         6f:9a:70:47:65:ff:b8:f8:6e:a6:8b:ba:67:68:b9:b8:85:4f:
         bb:28:db:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD76d2lIURvo62XaNUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDgyMDEyMDAwMFoXDTIzMDIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
Y2IxMjFjOWMtYjdmZC00NWZkLWE3ZDYtYmRiOTkyYTBiODY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzI2PzvxCYfT/2WURypfx0tYBLAo1UqMuCG8
Sc6722MEnPIxFSOpMATIOL3XKX9uIRAIFACmp8tlyw0iheYD8St8TsosgMDtLDmZ
+/kxdSEefsKiyvCEVsy+0D4elqcG0/ocsBanHqXzG7V0WHmD6k2N0EAZzMIoD0lS
qYuBOv4RNV/HPCtr0j3omoO9K6PLOeNjx10yhOhhnee9+7WUlboUPbXkDCMPl8BZ
pvZHlGhNGKnzXouV2JkdQb2dzft5jW1+ktu20AE9WRH/3tneVLVC9ZEZ0uUMGoD6
XKM8xKO9F1CTm9bpGRkXi2vPzJyXwnfY+Ft95WRukGGTtKoZ/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXR+enOBj9CSVVd8FtnlBWhnSwAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGJmYWYyM2QtYWNhMi0z
NjhiLWJkODMtOWM5ZmQ1ODJlODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqDCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFp6rTiVadQWNoM5WJoI+5AGPqWgqXVcCf7nJevtLSm6vVXlGsFUk0T2
H/kH+bEuCesLKLO+I75t8npyVOK1tSvH5uQpe/Ti0q/8xGgyrZpex2FDJOGiIlxi
mSUfDKITUUg38VRrzq9DwOQrYN6GO22lhYYdXqSrfBc9o74H3muzleOPczx2H2qu
xiJ1qKLrwshpTNchJVp5BhFnmklgwBiZ4MV7S/xgoolUAbAYBa/gEI4Ebt2ghrb+
4wR9z0zxRe84eB8Y4E01Smp9O9lFyKgekr/1EgVV53Ea7GVTpeuBVFAhCsLqVtaj
oW+acEdl/7j4bqaLumdoubiFT7so2yQ=
-----END CERTIFICATE-----