Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a0ecf41d-3bd4-3771-8b64-fc6c6304c948.roa
File:                     a0ecf41d-3bd4-3771-8b64-fc6c6304c948.roa (raw, json)
Hash identifier:          x+1ngBn9AtInboof6Z7g6yd3VDe1AWxG9cP8eyQaIMo=
Subject key identifier:   75:99:7C:E4:9E:A0:3A:93:43:0C:45:CE:C7:9A:FD:1F:A5:FC:1A:E3
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285841E42ACDC90E8A76973186AC00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a0ecf41d-3bd4-3771-8b64-fc6c6304c948.roa
Signing time:             Mon 15 May 2023 16:08:10 +0000
ROA not before:           Mon 15 May 2023 16:08:10 +0000
ROA not after:            Sun 25 Jun 2023 09:50:44 +0000
asID:                     14618
IP address blocks:        130.137.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:2a:cd:c9:0e:8a:76:97:31:86:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 15 16:08:10 2023 GMT
            Not After : Jun 25 09:50:44 2023 GMT
        Subject: CN=f707dc8d-4736-4f10-bd8f-024b8e27fd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:25:56:92:84:d5:fe:59:28:0d:09:4c:38:
                    15:bd:0a:9a:bb:ea:44:94:7d:c6:6e:87:2c:a9:26:
                    1b:6f:86:e6:6d:c5:e3:ab:1d:e4:4e:55:4a:6d:89:
                    40:29:bd:79:33:f6:ab:7d:d1:a8:ad:4b:02:31:1c:
                    f2:a8:cb:73:b2:9e:3a:85:e2:62:51:fa:f0:a6:36:
                    c8:2b:93:31:a1:8b:4d:cb:d8:b7:1b:eb:90:c7:b4:
                    3c:68:35:dd:26:72:b0:74:e0:7b:a5:51:bf:fd:fc:
                    f7:a1:0e:f9:18:b6:fb:21:55:4e:7b:f8:a6:61:bc:
                    a5:ca:95:e0:0e:42:54:ec:5d:99:47:50:88:88:2c:
                    d8:17:99:e1:3b:cc:bd:8d:17:d1:6e:0d:27:07:3b:
                    27:71:3a:a6:37:33:77:11:8f:19:ba:2f:25:fc:f3:
                    9e:71:28:7a:8a:34:70:37:1b:76:ac:e2:f8:49:1c:
                    15:42:7b:4e:ec:71:b1:31:c9:8b:76:98:38:e4:a2:
                    51:d0:24:f2:c7:ba:c1:2b:7c:60:dc:85:4f:8a:f3:
                    38:13:28:73:58:2d:70:eb:e9:be:11:88:be:fb:b8:
                    6e:48:84:2e:40:37:f1:1b:d8:ab:d4:f7:43:7e:5a:
                    01:dc:11:3d:c4:a4:85:3d:df:30:57:81:35:41:b6:
                    0a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:99:7C:E4:9E:A0:3A:93:43:0C:45:CE:C7:9A:FD:1F:A5:FC:1A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a0ecf41d-3bd4-3771-8b64-fc6c6304c948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:71:62:ac:f4:9c:34:4e:f1:6f:e5:73:66:96:96:36:c2:73:
         ef:4c:fe:d9:64:45:43:63:5a:15:7d:4c:27:8b:29:8a:28:b8:
         77:e7:d6:bd:82:35:78:9c:34:ed:9d:0d:a5:29:c8:fe:04:32:
         c3:a5:32:bb:82:0c:c3:53:55:09:a8:bd:9c:81:10:a9:0f:36:
         80:e6:31:f8:28:4e:e6:17:4d:2f:22:d4:2a:c0:e5:95:fe:09:
         d2:44:46:3e:10:0a:f9:17:cb:e9:51:1f:eb:64:6d:1a:26:5a:
         32:09:b6:6f:d0:da:d7:8b:79:67:98:96:38:39:eb:d6:a2:8e:
         7e:1b:dd:ed:8b:24:7d:e9:8b:9b:ed:14:88:d6:61:90:56:48:
         e8:3f:15:e7:65:ac:62:15:17:96:69:13:56:b7:28:7f:9a:3c:
         7b:13:86:20:b5:86:53:91:65:de:2e:13:46:61:0a:a0:72:ad:
         6a:80:dd:6d:08:b2:df:6c:94:02:58:9f:c3:23:18:5a:71:3b:
         1b:87:15:71:0b:c3:da:6f:6d:db:fa:94:fb:d0:d4:e8:4a:2f:
         b9:30:89:98:dc:98:05:89:13:dd:58:1b:ea:1f:d5:31:d5:bf:
         ec:19:61:c0:6e:8b:67:1e:94:b0:01:c5:01:80:b8:be:07:54:
         0a:2b:29:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkKs3JDop2lzGGrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTIzMDUxNTE2MDgxMFoXDTIzMDYyNTA5NTA0NFowLzEtMCsGA1UEAxMk
ZjcwN2RjOGQtNDczNi00ZjEwLWJkOGYtMDI0YjhlMjdmZDYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmElVpKE1f5ZKA0JTDgVvQqau+pElH3Gbocs
qSYbb4bmbcXjqx3kTlVKbYlAKb15M/arfdGorUsCMRzyqMtzsp46heJiUfrwpjbI
K5MxoYtNy9i3G+uQx7Q8aDXdJnKwdOB7pVG//fz3oQ75GLb7IVVOe/imYbylypXg
DkJU7F2ZR1CIiCzYF5nhO8y9jRfRbg0nBzsncTqmNzN3EY8Zui8l/POecSh6ijRw
Nxt2rOL4SRwVQntO7HGxMcmLdpg45KJR0CTyx7rBK3xg3IVPivM4EyhzWC1w6+m+
EYi++7huSIQuQDfxG9ir1PdDfloB3BE9xKSFPd8wV4E1QbYKsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHWZfOSeoDqTQwxFzsea/R+l/BrjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTBlY2Y0MWQtM2JkNC0z
NzcxLThiNjQtZmM2YzYzMDRjOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIpxYqz0nDRO8W/lc2aWljbCc+9M/tlkRUNjWhV9TCeLKYoouHfn1r2C
NXicNO2dDaUpyP4EMsOlMruCDMNTVQmovZyBEKkPNoDmMfgoTuYXTS8i1CrA5ZX+
CdJERj4QCvkXy+lRH+tkbRomWjIJtm/Q2teLeWeYljg569aijn4b3e2LJH3pi5vt
FIjWYZBWSOg/FedlrGIVF5ZpE1a3KH+aPHsThiC1hlORZd4uE0ZhCqByrWqA3W0I
st9slAJYn8MjGFpxOxuHFXELw9pvbdv6lPvQ1OhKL7kwiZjcmAWJE91YG+of1THV
v+wZYcBui2celLABxQGAuL4HVAorKUs=
-----END CERTIFICATE-----