Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50a1f165-8e5c-3393-8de7-090229687a8f.roa
File:                     50a1f165-8e5c-3393-8de7-090229687a8f.roa (raw, json)
Hash identifier:          zzR4HZR7HqBTVeL2yN/ELcI3dnPQwRbTpnhtF/V30XE=
Subject key identifier:   C1:C7:9F:2A:95:B4:BC:A6:EB:78:3A:16:9F:9E:EF:DD:8B:CA:FB:66
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A08A9A0BB6EC6D9CD82C300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50a1f165-8e5c-3393-8de7-090229687a8f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        104.196.65.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:08:a9:a0:bb:6e:c6:d9:cd:82:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ba214bc7-d531-41b8-82f7-675562b27791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:28:13:91:bf:2a:d4:43:c0:40:c1:e5:68:
                    8b:e3:7c:67:0c:60:0e:c5:ea:38:54:52:33:d5:a2:
                    f7:38:8b:bb:75:4c:80:66:53:51:9c:e0:d7:64:6e:
                    96:f4:1f:44:7b:02:7f:8f:fe:dd:73:1d:7b:e1:00:
                    9c:16:bf:cd:db:90:8e:4c:93:74:97:c8:5e:35:d0:
                    ba:de:1a:5e:cf:0f:0b:0a:11:a7:13:32:01:0a:50:
                    9c:90:0b:ca:6b:ca:76:9f:28:38:ed:0d:3e:76:24:
                    31:2f:12:2f:0c:df:05:b6:44:4d:28:6b:67:2e:1f:
                    a7:1f:f7:da:bc:43:cf:ca:95:18:88:b1:e3:4a:47:
                    4f:5b:47:62:2f:07:a8:d7:9f:d6:16:a1:e8:d9:e5:
                    e9:d0:db:4c:fe:73:5c:50:0d:64:a5:7c:16:b2:57:
                    fa:6c:36:7b:56:f9:01:6d:6f:76:74:8f:81:2e:cb:
                    e3:bf:9b:67:ef:54:f2:88:6d:5d:b3:13:92:85:49:
                    19:6b:e5:18:ed:4d:97:f7:98:76:67:4c:00:f2:7e:
                    73:f7:49:d0:92:42:87:b7:db:07:d7:99:76:56:53:
                    07:df:22:ad:9b:19:55:89:d3:7e:4d:55:6a:21:44:
                    70:32:f6:7c:a9:6e:37:98:78:71:4b:12:e2:ff:4c:
                    44:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C7:9F:2A:95:B4:BC:A6:EB:78:3A:16:9F:9E:EF:DD:8B:CA:FB:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50a1f165-8e5c-3393-8de7-090229687a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.196.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f8:d6:8d:59:20:e0:ed:7b:b5:13:14:1a:1c:3a:e4:9c:dc:
         44:31:7c:58:0b:c1:fb:a7:06:6e:17:1c:72:a8:fd:a7:18:90:
         00:58:82:c6:9b:83:a5:34:b4:36:12:cc:da:a5:8f:6a:d9:d8:
         d2:a3:65:9d:3c:19:71:d4:49:71:a1:10:c8:6d:73:a5:03:ce:
         0f:95:03:a5:c5:58:58:d0:1a:c8:29:02:72:b6:42:95:26:95:
         43:12:40:03:66:16:45:b0:62:db:64:3f:74:75:80:15:5e:4e:
         26:c2:e5:d6:9b:9f:ff:46:97:4b:72:43:ea:70:38:8b:6d:1f:
         c6:ea:81:d2:82:18:1f:fa:f5:bd:e7:90:9e:3f:24:af:b3:52:
         6a:c0:a9:04:38:2b:20:b7:55:54:96:63:dc:30:cc:41:92:84:
         11:65:a2:cc:38:b8:05:00:82:91:d5:19:4b:4b:64:4e:ca:1d:
         ef:f1:16:37:52:27:f5:7f:7b:fc:52:52:e5:26:43:76:56:85:
         bc:d4:81:ed:42:9e:38:24:f0:55:90:01:b0:72:8d:c1:d2:4f:
         c6:c1:de:eb:d9:87:e1:e4:f9:60:28:12:3c:02:7e:7b:da:6c:
         83:4e:79:fa:e9:01:4a:dd:99:33:ac:9b:bc:6d:01:da:c6:ee:
         7c:2c:60:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKCKmgu27G2c2CwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YmEyMTRiYzctZDUzMS00MWI4LTgyZjctNjc1NTYyYjI3NzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO0oE5G/KtRDwEDB5WiL43xnDGAOxeo4VFIz
1aL3OIu7dUyAZlNRnODXZG6W9B9EewJ/j/7dcx174QCcFr/N25COTJN0l8heNdC6
3hpezw8LChGnEzIBClCckAvKa8p2nyg47Q0+diQxLxIvDN8FtkRNKGtnLh+nH/fa
vEPPypUYiLHjSkdPW0diLweo15/WFqHo2eXp0NtM/nNcUA1kpXwWslf6bDZ7VvkB
bW92dI+BLsvjv5tn71TyiG1dsxOShUkZa+UY7U2X95h2Z0wA8n5z90nQkkKHt9sH
15l2VlMH3yKtmxlVidN+TVVqIURwMvZ8qW43mHhxSxLi/0xEkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHHnyqVtLym63g6Fp+e792LyvtmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTBhMWYxNjUtOGU1Yy0z
MzkzLThkZTctMDkwMjI5Njg3YThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMRBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI741o1ZIODte7UTFBocOuSc3EQxfFgLwfunBm4XHHKo/acYkABYgsab
g6U0tDYSzNqlj2rZ2NKjZZ08GXHUSXGhEMhtc6UDzg+VA6XFWFjQGsgpAnK2QpUm
lUMSQANmFkWwYttkP3R1gBVeTibC5dabn/9Gl0tyQ+pwOIttH8bqgdKCGB/69b3n
kJ4/JK+zUmrAqQQ4KyC3VVSWY9wwzEGShBFlosw4uAUAgpHVGUtLZE7KHe/xFjdS
J/V/e/xSUuUmQ3ZWhbzUge1Cnjgk8FWQAbByjcHST8bB3uvZh+Hk+WAoEjwCfnva
bINOefrpAUrdmTOsm7xtAdrG7nwsYA4=
-----END CERTIFICATE-----