Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b866958d-8f58-34de-b8a8-9a5767199879.roa
File:                     b866958d-8f58-34de-b8a8-9a5767199879.roa (raw, json)
Hash identifier:          cOK2wffwdmJoP+iSabhAhEENNsPjcjp3x3PUkC+CLSU=
Subject key identifier:   1F:1B:01:A1:18:50:88:17:64:B1:2E:9C:6B:94:39:9B:BC:FA:21:B6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285842B0663B67A3DF06F3C69C81C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b866958d-8f58-34de-b8a8-9a5767199879.roa
Signing time:             Wed 26 Jul 2023 12:00:00 +0000
ROA not before:           Wed 26 Jul 2023 12:00:00 +0000
ROA not after:            Mon 29 Jul 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.197.192.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:66:3b:67:a3:df:06:f3:c6:9c:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 26 12:00:00 2023 GMT
            Not After : Jul 29 04:00:00 2024 GMT
        Subject: CN=f988d7a0-03d0-4426-952d-5e1938a6cd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:18:13:d3:38:6c:62:24:c1:07:89:13:38:26:
                    32:54:57:23:5a:58:31:85:4f:ee:77:cf:3c:62:ef:
                    07:00:ea:5b:d1:56:46:8a:66:bb:1b:73:5f:71:79:
                    73:0d:d1:6a:d9:f6:0d:41:dd:21:c8:64:58:26:5f:
                    64:b8:45:de:64:84:de:7c:0d:f5:70:75:3e:92:19:
                    82:09:d6:59:04:34:c6:8e:4f:35:83:94:b3:a7:fd:
                    e1:ff:41:09:51:3f:43:fd:47:71:12:59:7d:ac:48:
                    40:81:6f:7c:9f:e8:53:bc:85:d3:e7:b4:6b:6e:fb:
                    23:37:b4:fc:d6:85:9d:62:e1:0c:41:1b:9a:71:d3:
                    62:2f:ae:e3:3a:f3:4c:26:9c:93:f8:34:41:fe:3c:
                    74:78:ca:c4:fe:37:b1:3d:97:41:f8:dd:81:33:5a:
                    8c:b6:af:b6:7e:aa:74:04:c8:e7:3b:19:3d:4d:34:
                    37:86:fc:88:82:da:aa:3a:42:c9:ac:b7:d3:14:43:
                    35:d6:1a:b3:e3:cd:cd:08:b7:d9:a9:51:10:ef:e4:
                    b5:0a:9c:08:de:69:0d:54:b4:f3:d3:f5:37:1f:ca:
                    d6:00:9b:b6:16:55:e0:79:f4:bc:b8:a0:97:ac:b0:
                    04:b2:cb:b6:cc:8c:3e:18:11:80:63:70:9a:41:9d:
                    2c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1B:01:A1:18:50:88:17:64:B1:2E:9C:6B:94:39:9B:BC:FA:21:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b866958d-8f58-34de-b8a8-9a5767199879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.197.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:33:ac:a4:f8:6b:0e:b7:b5:d9:7f:05:db:7e:3d:ff:90:6a:
         3e:bf:b6:21:be:0e:06:e6:f3:43:80:55:a2:26:ef:7b:fc:0a:
         e3:7b:75:5c:59:18:f9:80:3e:68:03:b1:3b:19:dc:71:52:3c:
         e1:cf:17:0c:bd:11:a5:c8:40:9a:cd:fd:a8:41:26:14:9b:38:
         bb:55:c2:6a:5e:b7:b3:91:c8:47:9f:04:50:53:59:b5:5a:73:
         5d:94:a9:92:9d:81:6e:7f:93:ae:dc:86:d8:7e:b2:73:a3:f8:
         4d:a4:6c:d5:12:bf:69:92:7f:c2:5b:3d:bd:a5:52:70:f0:27:
         5e:36:57:b7:07:10:12:8c:e5:07:fd:d9:ab:a6:e9:d7:a3:35:
         93:52:e6:51:09:6e:81:30:fc:0d:90:d8:57:26:fc:2a:69:c1:
         02:bd:0e:bb:6d:ba:71:35:1d:c8:4f:b4:f6:1b:d4:22:19:3e:
         97:4f:ed:3c:50:8e:c3:e8:ee:5a:79:5e:9b:85:34:a4:fd:5c:
         76:57:17:36:9a:be:87:2b:2a:86:0d:74:c3:13:80:09:22:b3:
         64:15:fb:87:1f:1a:75:fc:48:9e:9e:b3:ce:1f:26:0b:5b:10:
         1d:76:cd:0e:cc:5e:53:9b:b4:52:8e:6a:f2:63:ad:e2:a0:2a:
         bc:4a:71:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKwZjtno98G88acgcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDcyNjEyMDAwMFoXDTI0MDcyOTA0MDAwMFowLzEtMCsGA1UEAxMk
Zjk4OGQ3YTAtMDNkMC00NDI2LTk1MmQtNWUxOTM4YTZjZDczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhgT0zhsYiTBB4kTOCYyVFcjWlgxhU/ud888
Yu8HAOpb0VZGima7G3NfcXlzDdFq2fYNQd0hyGRYJl9kuEXeZITefA31cHU+khmC
CdZZBDTGjk81g5Szp/3h/0EJUT9D/UdxEll9rEhAgW98n+hTvIXT57RrbvsjN7T8
1oWdYuEMQRuacdNiL67jOvNMJpyT+DRB/jx0eMrE/jexPZdB+N2BM1qMtq+2fqp0
BMjnOxk9TTQ3hvyIgtqqOkLJrLfTFEM11hqz483NCLfZqVEQ7+S1CpwI3mkNVLTz
0/U3H8rWAJu2FlXgefS8uKCXrLAEssu2zIw+GBGAY3CaQZ0smQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB8bAaEYUIgXZLEunGuUOZu8+iG2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjg2Njk1OGQtOGY1OC0z
NGRlLWI4YTgtOWE1NzY3MTk5ODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI8XAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkzrKT4aw63tdl/Bdt+Pf+Qaj6/tiG+Dgbm80OAVaIm73v8CuN7dVxZ
GPmAPmgDsTsZ3HFSPOHPFwy9EaXIQJrN/ahBJhSbOLtVwmpet7ORyEefBFBTWbVa
c12UqZKdgW5/k67chth+snOj+E2kbNUSv2mSf8JbPb2lUnDwJ142V7cHEBKM5Qf9
2aum6dejNZNS5lEJboEw/A2Q2Fcm/CppwQK9DrttunE1HchPtPYb1CIZPpdP7TxQ
jsPo7lp5XpuFNKT9XHZXFzaavocrKoYNdMMTgAkis2QV+4cfGnX8SJ6es84fJgtb
EB12zQ7MXlObtFKOavJjreKgKrxKcYU=
-----END CERTIFICATE-----