Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0323ff50-bcb5-30ce-b296-929deb2f19e2.roa
File:                     0323ff50-bcb5-30ce-b296-929deb2f19e2.roa (raw, json)
Hash identifier:          1sSfvS/rQVJ3WYgMHrmGQ61idOQjN/0B+8qRqDKI7PA=
Subject key identifier:   04:86:DA:17:48:25:7A:3B:14:74:DB:6D:C7:74:95:26:A7:91:50:7C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2A0DB250AF30631914E580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0323ff50-bcb5-30ce-b296-929deb2f19e2.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     10965
IP address blocks:        205.200.125.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2a:0d:b2:50:af:30:63:19:14:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=fd73214b-3a4d-41cf-a7a1-925cdba596d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1b:00:af:e1:fd:8c:5a:05:c1:e7:05:ea:d8:
                    27:c3:6b:1e:1c:a8:dd:61:d9:dd:b6:23:7a:fc:d5:
                    b9:5b:6b:1c:f0:96:d6:5a:69:bc:8b:a5:22:c7:c4:
                    2a:b3:32:03:0f:f7:fe:f3:11:16:eb:5d:3d:61:9a:
                    fc:8a:fb:f7:6e:ac:55:e5:66:25:cb:6c:40:49:59:
                    19:46:0a:ef:d6:3f:79:f1:26:de:cb:9d:a1:40:4c:
                    a0:d9:b7:d6:5e:6a:3d:87:eb:b9:9f:26:e7:0e:46:
                    96:18:f5:4e:27:79:76:10:56:d2:d0:f3:b1:26:d8:
                    83:d8:8f:29:b4:87:27:d6:1c:e8:f3:42:84:30:5a:
                    de:db:30:20:23:ef:bc:f5:b2:bd:83:28:b4:bc:46:
                    92:46:3f:21:56:2e:f3:28:94:06:bf:79:41:4d:09:
                    00:6f:6d:32:0c:92:bf:7a:c2:00:c4:a3:57:d4:5e:
                    77:a6:6d:72:95:2e:52:7a:70:11:ac:86:09:9e:27:
                    c0:31:97:62:50:4f:f4:d0:e6:4c:7a:6e:20:f3:d3:
                    a2:d3:20:5c:80:49:fd:38:1b:34:ee:78:ed:99:78:
                    0f:fe:67:e3:24:fe:c3:8c:d1:39:0b:75:67:ef:7f:
                    f0:62:a8:41:43:d5:cf:cb:a6:68:29:d2:6b:31:bc:
                    a0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:86:DA:17:48:25:7A:3B:14:74:DB:6D:C7:74:95:26:A7:91:50:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0323ff50-bcb5-30ce-b296-929deb2f19e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.200.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:59:c3:f5:5d:5e:b7:63:2b:72:f2:9e:ea:70:f6:41:2b:22:
         fd:9a:04:f9:60:8b:15:68:f7:39:dd:f5:e9:3e:1e:fa:a6:97:
         17:fb:8c:90:da:5e:52:2e:e9:e4:be:35:06:e3:e3:1f:af:85:
         c0:93:66:58:a4:9d:e1:88:f9:ab:82:61:fc:25:95:ec:80:98:
         9b:6f:1a:d4:ba:74:c6:45:3f:00:b8:bc:f8:0d:0d:97:0d:94:
         a5:50:4c:ac:65:ce:ad:36:c6:9e:20:5a:b0:75:5b:ab:76:b3:
         75:dc:0e:4f:17:fc:ab:97:78:bc:fc:de:87:15:51:eb:63:f8:
         fd:50:d0:58:96:68:ec:c6:13:10:09:f5:f0:22:ae:bd:69:19:
         d1:a7:3a:a5:a1:06:4f:4f:64:eb:fb:ab:fc:a7:f8:d3:4a:22:
         b7:fb:b3:92:ba:d3:19:f2:fc:2e:3a:f0:b5:66:09:1d:d1:4a:
         c8:82:c3:1b:5e:43:06:04:e5:fd:cc:43:77:8a:84:16:28:87:
         12:b4:86:e0:47:4f:08:f0:3c:79:b3:22:a7:45:e7:f9:5c:72:
         53:66:cc:d2:0e:92:2e:9e:19:b8:de:ea:ad:8a:d3:91:ff:d6:
         69:6e:7a:ad:10:57:49:81:8a:99:c5:a4:f2:a3:83:e1:1f:6c:
         30:3e:ce:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYtKg2yUK8wYxkU5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZmQ3MzIxNGItM2E0ZC00MWNmLWE3YTEtOTI1Y2RiYTU5NmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBsAr+H9jFoFwecF6tgnw2seHKjdYdndtiN6
/NW5W2sc8JbWWmm8i6Uix8QqszIDD/f+8xEW6109YZr8ivv3bqxV5WYly2xASVkZ
Rgrv1j958Sbey52hQEyg2bfWXmo9h+u5nybnDkaWGPVOJ3l2EFbS0POxJtiD2I8p
tIcn1hzo80KEMFre2zAgI++89bK9gyi0vEaSRj8hVi7zKJQGv3lBTQkAb20yDJK/
esIAxKNX1F53pm1ylS5SenARrIYJnifAMZdiUE/00OZMem4g89Oi0yBcgEn9OBs0
7njtmXgP/mfjJP7DjNE5C3Vn73/wYqhBQ9XPy6ZoKdJrMbygawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFASG2hdIJXo7FHTbbcd0lSankVB8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMDMyM2ZmNTAtYmNiNS0z
MGNlLWIyOTYtOTI5ZGViMmYxOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzch9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI9Zw/VdXrdjK3Lynupw9kErIv2aBPlgixVo9znd9ek+Hvqmlxf7jJDa
XlIu6eS+NQbj4x+vhcCTZlikneGI+auCYfwlleyAmJtvGtS6dMZFPwC4vPgNDZcN
lKVQTKxlzq02xp4gWrB1W6t2s3XcDk8X/KuXeLz83ocVUetj+P1Q0FiWaOzGExAJ
9fAirr1pGdGnOqWhBk9PZOv7q/yn+NNKIrf7s5K60xny/C468LVmCR3RSsiCwxte
QwYE5f3MQ3eKhBYohxK0huBHTwjwPHmzIqdF5/lcclNmzNIOki6eGbje6q2K05H/
1mlueq0QV0mBipnFpPKjg+EfbDA+zg4=
-----END CERTIFICATE-----