Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4005039e-2f0b-388b-9124-75c09075e5b3.roa
File:                     4005039e-2f0b-388b-9124-75c09075e5b3.roa (raw, json)
Hash identifier:          EWZhl5xYPQDNQ5dbMJ7Yh2lVqv80/J/nsLKruXHx52U=
Subject key identifier:   0D:CE:23:E8:34:DB:6C:14:62:32:A5:4C:EA:AC:D0:78:D6:BB:D4:F9
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285841E446BCDA4AE10E267714D980
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4005039e-2f0b-388b-9124-75c09075e5b3.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sun 25 Jun 2023 17:09:36 +0000
asID:                     16509
IP address blocks:        170.114.41.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:bc:da:4a:e1:0e:26:77:14:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jun 25 17:09:36 2023 GMT
        Subject: CN=abb9157a-d3c0-4323-bfc2-0b6a6e3cb2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:c7:83:23:06:d2:27:3c:55:46:dd:39:65:
                    2c:8a:76:a9:4b:05:2e:f0:02:b2:2c:23:cc:27:77:
                    70:ba:b9:f7:c9:6a:83:75:b3:9f:e1:94:d6:c0:d8:
                    86:91:3a:2f:ac:ad:7f:69:37:cd:10:e0:fc:85:67:
                    7d:f0:c3:85:10:bb:5e:1d:22:3f:db:83:c0:5c:f9:
                    ad:c8:01:c2:f9:ea:ef:ff:a5:74:43:de:c0:bc:37:
                    ee:99:eb:89:7d:43:44:21:1d:65:65:b4:c3:44:46:
                    54:1f:e7:17:57:5c:f2:49:e5:c3:f4:15:a5:1b:ee:
                    10:6b:2f:4e:d2:c0:30:ce:2a:e0:99:01:61:5e:8b:
                    70:2a:e8:c3:5f:65:be:7b:3d:a8:e7:af:45:29:1f:
                    ef:0c:1a:b8:65:18:2f:89:e4:d9:62:bb:87:0f:c4:
                    a0:fe:22:78:de:ad:58:c3:68:d7:10:ff:8b:bc:af:
                    bb:fb:c5:26:3e:9c:86:b6:61:c2:1c:3a:9c:52:b0:
                    d1:d7:4a:93:04:83:ed:89:a0:eb:51:a3:a9:cf:51:
                    4e:c3:cb:71:e9:83:a4:de:75:6e:5f:2d:dc:7a:df:
                    b1:0d:b5:4d:18:3e:10:08:26:d1:2f:5d:51:b4:04:
                    97:a2:88:a9:93:1c:d0:cb:bd:5c:1c:a7:a3:c2:af:
                    71:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CE:23:E8:34:DB:6C:14:62:32:A5:4C:EA:AC:D0:78:D6:BB:D4:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4005039e-2f0b-388b-9124-75c09075e5b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c6:6c:ab:9e:dc:0d:54:90:d5:7a:16:1f:c6:0b:fb:ae:eb:
         03:89:e0:42:31:2c:8b:f6:7e:1a:bf:21:20:2d:ef:14:ef:c9:
         4b:f7:15:1a:4d:83:c8:83:20:77:96:a1:ea:25:37:1b:51:72:
         4e:d5:7a:e8:db:9b:7b:40:1c:f0:a8:9b:0e:e4:af:16:33:d3:
         b8:13:0e:e1:75:58:4a:38:45:cf:4c:d0:33:d5:ae:fd:f7:ec:
         fd:ec:b0:49:4c:9f:d7:c3:73:39:72:dd:0e:e0:28:c8:06:99:
         02:37:34:98:f0:6a:c0:8d:88:46:a4:d9:c0:c6:f4:c8:a8:a7:
         d1:60:25:79:b2:12:f5:4e:d5:82:80:bd:e7:58:f0:21:ef:cd:
         ae:92:ad:5e:3b:b7:9f:63:b0:97:f1:c0:63:89:77:a6:ee:74:
         39:77:e5:6a:91:6b:2c:01:0f:55:4d:05:a1:82:ff:b2:e0:6b:
         c0:cf:01:a2:ba:21:ca:bc:80:2f:53:3d:ce:13:3a:c6:98:e7:
         d1:34:5d:8c:9c:bb:39:68:5e:c7:a3:59:3d:98:e4:17:13:da:
         78:47:bb:75:e2:fc:9e:ef:80:b7:ae:a9:41:80:2e:ef:57:b9:
         f7:44:77:d8:02:d1:7f:21:ae:ee:c7:ae:f7:d1:8f:2e:2e:82:
         43:f9:44:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRrzaSuEOJncU2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDYyNTE3MDkzNlowLzEtMCsGA1UEAxMk
YWJiOTE1N2EtZDNjMC00MzIzLWJmYzItMGI2YTZlM2NiMmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3/HgyMG0ic8VUbdOWUsinapSwUu8AKyLCPM
J3dwurn3yWqDdbOf4ZTWwNiGkTovrK1/aTfNEOD8hWd98MOFELteHSI/24PAXPmt
yAHC+erv/6V0Q97AvDfumeuJfUNEIR1lZbTDREZUH+cXV1zySeXD9BWlG+4Qay9O
0sAwzirgmQFhXotwKujDX2W+ez2o569FKR/vDBq4ZRgvieTZYruHD8Sg/iJ43q1Y
w2jXEP+LvK+7+8UmPpyGtmHCHDqcUrDR10qTBIPtiaDrUaOpz1FOw8tx6YOk3nVu
Xy3cet+xDbVNGD4QCCbRL11RtASXooipkxzQy71cHKejwq9xFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA3OI+g022wUYjKlTOqs0HjWu9T5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNDAwNTAzOWUtMmYwYi0z
ODhiLTkxMjQtNzVjMDkwNzVlNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnIpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLGbKue3A1UkNV6Fh/GC/uu6wOJ4EIxLIv2fhq/ISAt7xTvyUv3FRpN
g8iDIHeWoeolNxtRck7Veujbm3tAHPComw7krxYz07gTDuF1WEo4Rc9M0DPVrv33
7P3ssElMn9fDczly3Q7gKMgGmQI3NJjwasCNiEak2cDG9Miop9FgJXmyEvVO1YKA
vedY8CHvza6SrV47t59jsJfxwGOJd6budDl35WqRaywBD1VNBaGC/7Lga8DPAaK6
Icq8gC9TPc4TOsaY59E0XYycuzloXsejWT2Y5BcT2nhHu3Xi/J7vgLeuqUGALu9X
ufdEd9gC0X8hru7HrvfRjy4ugkP5RKk=
-----END CERTIFICATE-----