Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25b9d917-026b-3f70-823b-754759406aa8.roa
File:                     25b9d917-026b-3f70-823b-754759406aa8.roa (raw, json)
Hash identifier:          EGRa20/6EjKZIQKwv1iM0ZWd8a8H9LRkYNj0qcyrnTM=
Subject key identifier:   42:08:81:F1:35:FA:1D:BD:CE:C0:37:D6:7F:55:CD:26:BF:7F:99:1A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A0FC0F023F4F565CF88A380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25b9d917-026b-3f70-823b-754759406aa8.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.141.192.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0f:c0:f0:23:f4:f5:65:cf:88:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=15c5c9b5-3b55-43d6-9735-cdcfaa819c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:eb:1a:f7:64:79:6b:8c:62:23:20:3f:6d:
                    ba:bf:3a:5a:d7:43:d1:a6:ab:46:ee:bb:c5:8d:e9:
                    d3:89:15:48:79:37:8d:32:f2:1a:90:7e:a4:a4:ad:
                    5a:a2:70:3e:fa:f0:d2:cb:a7:3f:dd:3e:74:09:07:
                    c8:7f:ad:91:79:47:6c:52:5d:60:ca:cf:6f:cd:8d:
                    61:02:fe:48:e4:77:e1:e1:8b:33:b7:34:b2:26:cb:
                    17:fa:a9:7c:25:0a:39:50:f3:5b:75:77:28:7e:94:
                    50:e7:37:ed:74:45:82:11:3b:14:80:b2:fd:10:20:
                    cd:b6:9d:a9:bf:de:67:99:c5:fb:6f:91:dc:1b:46:
                    e2:d7:86:b5:0a:f8:36:a4:e1:a6:54:9a:7f:6f:74:
                    a7:1d:65:d4:35:81:27:ca:c6:af:c9:bd:5d:06:97:
                    6a:ee:68:4f:aa:03:2e:ad:9e:fd:66:7c:69:be:79:
                    87:8c:85:5b:09:93:ed:12:b6:a8:e5:02:80:06:d8:
                    bb:95:73:b7:f6:ad:61:cc:a1:a6:0a:ab:b5:0f:f9:
                    44:68:67:d2:cb:91:2a:37:ba:0e:1f:8d:86:2a:04:
                    bb:9d:36:fd:13:33:2d:7a:e5:95:c4:e5:fe:e3:1e:
                    fa:11:0a:d7:01:6d:3c:12:98:83:38:51:50:b3:4c:
                    2b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:08:81:F1:35:FA:1D:BD:CE:C0:37:D6:7F:55:CD:26:BF:7F:99:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25b9d917-026b-3f70-823b-754759406aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.141.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:6e:f5:cf:4e:52:3f:06:16:57:0e:c3:aa:65:60:46:fd:b8:
         0e:37:1e:4f:4d:52:fd:26:d9:69:19:8b:ef:20:5b:a4:72:aa:
         14:53:c2:16:a2:c9:35:a0:a3:5d:ad:34:c7:f4:8d:83:8e:5a:
         16:a6:75:22:ea:b1:c6:bb:78:a5:14:94:e4:1d:82:6d:ec:8a:
         31:1c:85:bb:73:e2:dd:b8:48:c2:4f:a6:31:3d:81:84:79:52:
         71:f0:77:70:bc:88:b5:fd:e2:23:38:2c:d3:9e:5f:7c:74:a0:
         98:41:5e:dc:a3:07:ee:1a:d3:c6:b8:22:0f:27:09:9a:9c:a7:
         43:5f:7e:c3:c5:57:a1:24:2d:c3:7e:d0:64:34:48:5f:fa:07:
         ed:61:7c:92:4d:1f:ee:15:a3:60:c2:93:4e:55:b6:d6:98:12:
         14:0a:6c:3d:41:d9:4c:49:f4:b1:40:57:ba:5f:2a:b9:1c:2b:
         25:c1:82:87:8c:1a:d1:7f:d4:4a:00:d2:cc:ef:fa:95:98:db:
         9d:77:ae:af:d5:a9:8f:f0:6e:af:85:6a:50:22:f9:14:10:b7:
         8b:5a:ed:98:36:53:43:5f:e7:3b:66:48:58:35:04:dc:92:95:
         c0:3e:4b:ed:23:d0:b2:9c:c6:de:6e:16:69:fc:63:73:e2:7c:
         46:57:e0:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKD8DwI/T1Zc+Io4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MTVjNWM5YjUtM2I1NS00M2Q2LTk3MzUtY2RjZmFhODE5YzE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkDrGvdkeWuMYiMgP226vzpa10PRpqtG7rvF
jenTiRVIeTeNMvIakH6kpK1aonA++vDSy6c/3T50CQfIf62ReUdsUl1gys9vzY1h
Av5I5Hfh4YsztzSyJssX+ql8JQo5UPNbdXcofpRQ5zftdEWCETsUgLL9ECDNtp2p
v95nmcX7b5HcG0bi14a1Cvg2pOGmVJp/b3SnHWXUNYEnysavyb1dBpdq7mhPqgMu
rZ79ZnxpvnmHjIVbCZPtErao5QKABti7lXO39q1hzKGmCqu1D/lEaGfSy5EqN7oO
H42GKgS7nTb9EzMteuWVxOX+4x76EQrXAW08EpiDOFFQs0wroQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEIIgfE1+h29zsA31n9VzSa/f5kaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjViOWQ5MTctMDI2Yi0z
ZjcwLTgyM2ItNzU0NzU5NDA2YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo3AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5u9c9OUj8GFlcOw6plYEb9uA43Hk9NUv0m2WkZi+8gW6RyqhRTwhai
yTWgo12tNMf0jYOOWhamdSLqsca7eKUUlOQdgm3sijEchbtz4t24SMJPpjE9gYR5
UnHwd3C8iLX94iM4LNOeX3x0oJhBXtyjB+4a08a4Ig8nCZqcp0NffsPFV6EkLcN+
0GQ0SF/6B+1hfJJNH+4Vo2DCk05VttaYEhQKbD1B2UxJ9LFAV7pfKrkcKyXBgoeM
GtF/1EoA0szv+pWY2513rq/VqY/wbq+FalAi+RQQt4ta7Zg2U0Nf5ztmSFg1BNyS
lcA+S+0j0LKcxt5uFmn8Y3PifEZX4HU=
-----END CERTIFICATE-----