Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b325505-d1a9-3845-9812-cc32b1dbea20.roa
File:                     9b325505-d1a9-3845-9812-cc32b1dbea20.roa (raw, json)
Hash identifier:          fjQbX0Tk/bSx29JEqsinOIihiQ2RC/vIebdhVa/kkTc=
Subject key identifier:   12:5A:D4:09:D0:F4:BC:7D:55:BB:3E:E4:F1:3C:89:22:6B:75:D9:D2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A1EB4FFE42A2497671253C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b325505-d1a9-3845-9812-cc32b1dbea20.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     19527
IP address blocks:        34.112.0.0/14 maxlen: 14
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1e:b4:ff:e4:2a:24:97:67:12:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=366b0948-ac13-4cbb-a99c-8c4a5c5c792d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:19:7e:d4:49:69:e3:51:ff:5d:92:98:1b:
                    38:9f:16:b1:b6:56:86:af:9d:5c:91:d0:27:d9:ea:
                    d7:9f:66:3e:09:f5:ee:3e:95:6b:55:4c:de:ca:4c:
                    f2:3d:07:15:86:f7:bd:a2:ea:8a:36:28:83:c0:90:
                    71:ea:7a:63:d5:d7:1f:3f:bb:0a:5f:86:c8:80:0c:
                    65:26:a8:9c:ef:54:27:00:b2:bb:ee:5c:35:03:50:
                    71:d8:56:3c:a8:01:68:46:52:be:16:e1:6b:df:f6:
                    a2:29:47:01:b5:c5:7e:87:e7:01:a4:4e:ee:b6:d9:
                    15:50:6a:15:8a:ba:90:f9:77:b0:b2:04:20:2b:d6:
                    fc:14:b7:08:9c:34:98:c7:bd:24:94:82:58:d8:3e:
                    6c:86:0b:8a:52:7d:1b:0c:e9:be:63:3f:77:d5:7e:
                    dc:b9:df:f3:b6:a7:f2:c7:c6:c0:8a:59:af:43:a9:
                    72:88:63:89:38:bb:bd:01:14:4a:22:f9:1e:a3:51:
                    2f:55:8a:cc:80:a2:75:97:03:1e:53:5d:4d:1a:ed:
                    6e:c8:81:a3:2d:9b:45:94:90:93:ac:a9:b8:de:60:
                    04:98:5f:48:e0:66:76:78:37:ff:a7:70:e7:a5:4a:
                    ca:c9:b4:1d:09:ab:82:3c:9c:b6:13:cf:92:27:7f:
                    a1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5A:D4:09:D0:F4:BC:7D:55:BB:3E:E4:F1:3C:89:22:6B:75:D9:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b325505-d1a9-3845-9812-cc32b1dbea20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.112.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:89:cd:93:15:ce:d2:12:21:6b:a6:58:34:fb:b2:6a:c1:0b:
         52:e3:31:f5:87:11:17:50:38:e3:cf:7d:91:72:d0:4c:f5:02:
         5b:b3:8b:2b:45:d2:61:26:c7:2d:60:6c:03:87:50:5d:0b:f9:
         77:a9:5b:96:7d:ea:17:30:26:89:3d:b1:36:82:a0:79:21:93:
         65:97:89:a3:04:02:00:63:8f:06:63:14:f7:6c:f0:5b:fc:df:
         70:8c:db:3d:8c:a5:7a:b8:5d:56:dd:a1:d1:a3:28:40:15:3c:
         49:44:a0:34:ab:9c:34:60:03:97:4b:6f:90:23:24:a4:d6:d4:
         0b:98:de:6f:e1:d0:d5:a9:e1:97:e1:78:1c:7f:39:a2:47:4a:
         b3:09:63:4c:07:7d:85:51:b5:b0:a1:e4:47:5b:9d:ee:4c:30:
         c8:8d:74:15:ca:ca:90:69:3c:f5:2d:eb:87:dd:1b:2d:cc:3b:
         6d:9d:19:b4:d2:e6:4a:df:3d:94:12:f3:81:4c:4f:75:56:82:
         c8:3e:31:2b:4a:df:c8:6d:f0:b0:e6:7a:20:7f:1d:8c:bc:3c:
         47:b8:4f:3b:a0:aa:15:b0:92:3f:98:b6:86:d4:2b:b1:49:a0:
         40:e2:34:33:17:65:16:66:58:8f:11:e9:1f:59:0a:d8:0f:e4:
         03:b6:e6:73
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEMKHrT/5Cokl2cSU8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MzY2YjA5NDgtYWMxMy00Y2JiLWE5OWMtOGM0YTVjNWM3OTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCoZftRJaeNR/12SmBs4nxaxtlaGr51ckdAn
2erXn2Y+CfXuPpVrVUzeykzyPQcVhve9ouqKNiiDwJBx6npj1dcfP7sKX4bIgAxl
Jqic71QnALK77lw1A1Bx2FY8qAFoRlK+FuFr3/aiKUcBtcV+h+cBpE7uttkVUGoV
irqQ+XewsgQgK9b8FLcInDSYx70klIJY2D5shguKUn0bDOm+Yz931X7cud/ztqfy
x8bAilmvQ6lyiGOJOLu9ARRKIvkeo1EvVYrMgKJ1lwMeU11NGu1uyIGjLZtFlJCT
rKm43mAEmF9I4GZ2eDf/p3DnpUrKybQdCauCPJy2E8+SJ3+hVQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBJa1AnQ9Lx9Vbs+5PE8iSJrddnSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWIzMjU1MDUtZDFhOS0z
ODQ1LTk4MTItY2MzMmIxZGJlYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCInAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAA4nNkxXO0hIha6ZYNPuyasELUuMx9YcRF1A44899kXLQTPUCW7OLK0XS
YSbHLWBsA4dQXQv5d6lbln3qFzAmiT2xNoKgeSGTZZeJowQCAGOPBmMU92zwW/zf
cIzbPYylerhdVt2h0aMoQBU8SUSgNKucNGADl0tvkCMkpNbUC5jeb+HQ1anhl+F4
HH85okdKswljTAd9hVG1sKHkR1ud7kwwyI10FcrKkGk89S3rh90bLcw7bZ0ZtNLm
St89lBLzgUxPdVaCyD4xK0rfyG3wsOZ6IH8djLw8R7hPO6CqFbCSP5i2htQrsUmg
QOI0MxdlFmZYjxHpH1kK2A/kA7bmcw==
-----END CERTIFICATE-----