Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/53c621b5-dc3a-385a-8958-c570555e9384.roa
File:                     53c621b5-dc3a-385a-8958-c570555e9384.roa (raw, json)
Hash identifier:          w96Swvwat64Rz6zdXx5DQOrTmRvESyR2hHnELRhxU5w=
Subject key identifier:   7E:51:41:79:20:BA:10:0F:02:28:6E:D0:37:57:88:DE:96:B2:B8:E7
Certificate issuer:       /CN=208dcf74-3dce-4384-beaf-70319895fc4b
Certificate serial:       010D0C9F43285841F6B90812C2FADD6665E8F0A0
Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/53c621b5-dc3a-385a-8958-c570555e9384.roa
Signing time:             Mon 22 May 2023 07:40:00 +0000
ROA not before:           Mon 22 May 2023 07:40:00 +0000
ROA not after:            Sun 20 Aug 2023 07:40:00 +0000
asID:                     14618
IP address blocks:        134.65.168.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:f6:b9:08:12:c2:fa:dd:66:65:e8:f0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b
        Validity
            Not Before: May 22 07:40:00 2023 GMT
            Not After : Aug 20 07:40:00 2023 GMT
        Subject: CN=ab15369a-b6c9-4115-ba0b-a4af30804942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:43:d6:cd:d7:e6:89:c0:04:cb:b8:34:20:a3:
                    01:c4:c1:50:21:9a:f4:af:1b:86:b0:70:85:b6:69:
                    36:63:03:23:15:ed:04:44:ec:4d:fb:76:0a:c2:bb:
                    66:01:0c:52:b4:45:18:46:08:9a:27:44:0c:93:ab:
                    c4:09:bd:18:4b:2d:9a:c7:a2:68:64:5d:20:0c:c8:
                    f7:1c:56:84:53:bf:4e:90:cf:19:80:b4:99:c0:5e:
                    ac:89:f7:2c:ef:f4:f3:79:74:62:a3:9c:a3:84:fa:
                    63:ee:de:7c:17:ea:96:b0:f7:79:22:9d:7a:84:ec:
                    5c:3e:db:e2:1b:07:5d:39:e0:60:5a:85:3d:41:d1:
                    9e:64:19:1b:f0:4a:5b:bf:33:45:22:d0:2c:fa:b2:
                    9b:33:c6:a9:8c:69:dc:bb:e0:72:bc:cc:ba:10:ac:
                    ad:42:d9:8f:9e:a6:4f:e8:58:dd:da:11:2a:31:04:
                    37:99:9e:88:2b:5f:1a:7d:1f:15:1f:97:04:d5:99:
                    57:68:01:cd:d4:7a:a9:e6:bb:e7:21:f4:c4:4d:c1:
                    42:0f:48:a0:52:9d:cc:ee:f8:34:69:35:88:31:13:
                    dc:dc:e5:e7:23:56:87:83:cd:6d:0a:33:21:b5:c9:
                    92:bb:ed:82:a8:63:e9:4b:96:7a:13:c5:8d:8d:93:
                    f2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:51:41:79:20:BA:10:0F:02:28:6E:D0:37:57:88:DE:96:B2:B8:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/53c621b5-dc3a-385a-8958-c570555e9384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7c:06:d3:c9:df:a5:73:a5:16:b7:3c:4a:62:f2:1d:44:51:
         c1:59:08:ab:ee:e2:e9:f5:db:db:48:10:1d:81:26:06:9d:f3:
         11:cb:c8:0a:c6:af:ad:76:a2:81:b2:54:4f:4b:98:60:e6:b6:
         59:a4:9b:2d:97:1b:fe:e3:40:92:68:6e:37:68:76:d2:19:48:
         3b:c4:54:47:f3:f4:32:f9:d4:9b:16:ab:1d:a8:16:fa:e6:cd:
         e4:4b:d1:b0:de:1f:03:de:17:d0:0b:9a:52:af:66:3e:4d:3e:
         ed:4f:af:d7:b4:6e:ac:39:1b:4e:e6:62:d1:24:fd:aa:26:da:
         9d:61:36:6e:c9:44:41:c9:fd:1f:d1:de:a5:9b:95:75:74:f3:
         ba:25:fd:51:ae:89:ea:e5:bd:81:f5:f0:f2:32:a7:b4:59:49:
         83:38:4d:f0:63:63:b0:71:ed:4c:dc:45:c7:1c:d4:74:7e:eb:
         ac:b5:79:13:c2:7b:af:fc:37:d5:3f:c6:d1:1e:59:c0:74:fa:
         0f:d3:7e:ad:62:e2:29:0f:64:60:ae:fd:79:60:14:47:e9:14:
         5c:cd:33:71:60:7b:91:7c:2f:04:30:83:81:91:fa:7b:1b:07:
         6f:83:70:30:c9:77:d4:d4:09:38:ea:fa:80:79:b7:5b:7a:4c:
         fa:cc:dd:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEH2uQgSwvrdZmXo8KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZGNmNzQtM2RjZS00Mzg0LWJlYWYtNzAzMTk4OTVm
YzRiMB4XDTIzMDUyMjA3NDAwMFoXDTIzMDgyMDA3NDAwMFowLzEtMCsGA1UEAxMk
YWIxNTM2OWEtYjZjOS00MTE1LWJhMGItYTRhZjMwODA0OTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0PWzdfmicAEy7g0IKMBxMFQIZr0rxuGsHCF
tmk2YwMjFe0EROxN+3YKwrtmAQxStEUYRgiaJ0QMk6vECb0YSy2ax6JoZF0gDMj3
HFaEU79OkM8ZgLSZwF6sifcs7/TzeXRio5yjhPpj7t58F+qWsPd5Ip16hOxcPtvi
GwddOeBgWoU9QdGeZBkb8EpbvzNFItAs+rKbM8apjGncu+ByvMy6EKytQtmPnqZP
6Fjd2hEqMQQ3mZ6IK18afR8VH5cE1ZlXaAHN1Hqp5rvnIfTETcFCD0igUp3M7vg0
aTWIMRPc3OXnI1aHg81tCjMhtcmSu+2CqGPpS5Z6E8WNjZPyuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5RQXkguhAPAihu0DdXiN6WsrjnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDhk
Y2Y3NC0zZGNlLTQzODQtYmVhZi03MDMxOTg5NWZjNGIvNTNjNjIxYjUtZGMzYS0z
ODVhLTg5NTgtYzU3MDU1NWU5Mzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA4ZGNmNzQtM2RjZS00Mzg0LWJl
YWYtNzAzMTk4OTVmYzRiLzIwOGRjZjc0LTNkY2UtNDM4NC1iZWFmLTcwMzE5ODk1
ZmM0Yi5jcmwwHwYDVR0jBBgwFoAUtFZe+2BitOcxIpuQ8WaNOb1jB1swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yMDhkY2Y3NC0zZGNlLTQzODQtYmVhZi03MDMx
OTg5NWZjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhkGoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHN8BtPJ36VzpRa3PEpi8h1EUcFZCKvu4un129tIEB2BJgad8xHLyArG
r612ooGyVE9LmGDmtlmkmy2XG/7jQJJobjdodtIZSDvEVEfz9DL51JsWqx2oFvrm
zeRL0bDeHwPeF9ALmlKvZj5NPu1Pr9e0bqw5G07mYtEk/aom2p1hNm7JREHJ/R/R
3qWblXV087ol/VGuierlvYH18PIyp7RZSYM4TfBjY7Bx7UzcRccc1HR+66y1eRPC
e6/8N9U/xtEeWcB0+g/Tfq1i4ikPZGCu/XlgFEfpFFzNM3Fge5F8LwQwg4GR+nsb
B2+DcDDJd9TUCTjq+oB5t1t6TPrM3Xo=
-----END CERTIFICATE-----