Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/24a39a26-39b6-366a-a90b-001f8d98cf05.roa
File:                     24a39a26-39b6-366a-a90b-001f8d98cf05.roa (raw, json)
Hash identifier:          FpIDFd/rYqhkaZFguusvHl0q3DrhAybfSi/5HY7IGgo=
Subject key identifier:   08:4C:70:C9:5C:56:7C:F3:55:EC:B0:BB:50:44:1B:11:2A:4C:68:8F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328576D51CC73C042CFC170F41FE3BF
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/24a39a26-39b6-366a-a90b-001f8d98cf05.roa
Signing time:             Thu 19 Mar 2020 18:48:15 +0000
ROA not before:           Tue 20 Nov 2012 05:00:00 +0000
ROA not after:            Wed 22 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        165.225.101.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:f4:1f:e3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Nov 20 05:00:00 2012 GMT
            Not After : Jun 22 04:00:00 2022 GMT
        Subject: CN=9a43d1b9-0bff-498e-8e8f-541b58c7fb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b2:e7:0b:bc:18:49:47:f7:7b:ed:5e:e8:3c:
                    43:da:32:1d:aa:48:dd:b6:58:8e:e5:d1:0a:53:a3:
                    ef:72:f3:a6:9e:94:c2:c3:19:d4:d2:46:c9:d6:20:
                    6d:04:4a:9e:7b:26:29:d9:d6:41:6e:fe:9d:46:27:
                    a3:eb:ed:cc:10:97:0d:1b:82:2b:6c:9a:7e:da:a1:
                    44:37:1e:5e:a8:7e:af:27:3e:d0:3c:19:fe:0d:26:
                    ed:6b:73:56:af:30:5f:d6:07:a3:31:e9:f3:92:2c:
                    55:54:37:be:f2:eb:a5:c3:74:0e:c6:8d:64:0d:38:
                    4f:0c:aa:a1:1a:aa:89:71:a4:ac:8a:90:da:c9:ed:
                    1d:d2:b9:06:25:8f:2a:6c:8d:e4:47:a1:38:00:43:
                    d8:01:d5:25:b8:58:6b:1a:9c:0c:a6:f5:11:f4:80:
                    d0:68:8d:46:c5:e2:9a:51:47:ea:0b:0b:70:7c:d4:
                    b7:ff:3f:03:60:07:d8:0c:e6:14:69:8f:66:81:ad:
                    16:46:7e:e5:88:db:70:0f:46:0b:59:f5:cb:a3:d8:
                    fc:7c:2e:9e:0f:cf:fa:93:cf:f1:22:61:6a:4b:68:
                    e6:da:6b:c3:ca:3b:3f:3e:fb:39:b1:f2:2d:c0:d8:
                    fb:b3:b5:37:94:bb:65:c3:2d:ea:6d:19:80:c1:1d:
                    a4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4C:70:C9:5C:56:7C:F3:55:EC:B0:BB:50:44:1B:11:2A:4C:68:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/24a39a26-39b6-366a-a90b-001f8d98cf05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:4a:c3:c5:57:83:66:c0:4a:3d:7a:06:f2:0d:41:7d:35:e5:
         cd:fa:e3:4e:e4:ab:2d:9e:c3:3b:d6:84:f4:c1:26:aa:53:a4:
         39:03:42:64:e0:c3:14:ef:d1:a6:c8:e0:98:a8:0d:13:0c:a0:
         ed:f9:0d:89:83:7e:4e:2f:1f:78:58:59:48:e9:24:09:97:4c:
         6e:d2:63:65:47:53:3d:b6:29:e7:cb:d5:e6:27:9e:48:74:d4:
         ea:78:14:37:69:1f:f0:96:78:a9:62:10:14:ac:8a:c3:9e:73:
         b9:c6:d7:27:c1:df:ae:c5:0f:3b:51:f5:09:8a:eb:12:9f:c3:
         4b:97:98:81:f3:0c:14:f5:db:ea:22:9d:3e:c7:82:55:90:ec:
         69:8e:dd:7d:8e:b8:45:19:17:4f:b3:be:4b:c0:9d:3d:b5:2d:
         39:ad:f0:2b:69:f8:c9:c8:a5:d9:41:53:7b:93:a7:7a:58:36:
         2e:4d:2b:75:b8:de:7c:04:04:86:81:db:4f:09:68:b1:1e:b2:
         22:6e:df:86:88:44:d0:dc:60:ba:59:6a:81:32:3a:7f:e1:b5:
         d0:a1:b8:9a:8e:e1:d2:4e:80:ff:23:e3:56:2f:b9:18:d5:17:
         2a:65:fa:68:b0:10:56:ac:f0:f5:62:23:14:7d:60:ea:f5:23:
         9a:4f:01:33
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcPQf478wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4MmU0
ODAeFw0xMjExMjAwNTAwMDBaFw0yMjA2MjIwNDAwMDBaMC8xLTArBgNVBAMTJDlh
NDNkMWI5LTBiZmYtNDk4ZS04ZThmLTU0MWI1OGM3ZmI3ZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMmy5wu8GElH93vtXug8Q9oyHapI3bZYjuXRClOj
73Lzpp6UwsMZ1NJGydYgbQRKnnsmKdnWQW7+nUYno+vtzBCXDRuCK2yaftqhRDce
Xqh+ryc+0DwZ/g0m7WtzVq8wX9YHozHp85IsVVQ3vvLrpcN0DsaNZA04TwyqoRqq
iXGkrIqQ2sntHdK5BiWPKmyN5EehOABD2AHVJbhYaxqcDKb1EfSA0GiNRsXimlFH
6gsLcHzUt/8/A2AH2AzmFGmPZoGtFkZ+5YjbcA9GC1n1y6PY/Hwung/P+pPP8SJh
akto5tprw8o7Pz77ObHyLcDY+7O1N5S7ZcMt6m0ZgMEdpDcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQITHDJXFZ881XssLtQRBsRKkxojzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFl
ODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1ZjgyZTQ4LzI0YTM5YTI2LTM5YjYtMzY2
YS1hOTBiLTAwMWY4ZDk4Y2YwNS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlm
LTJmY2JhNWY4MmU0OC8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJl
NDguY3JsMB8GA1UdIwQYMBaAFAK+G3nvJRAwsXLUDTpSxpVZ61+iMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1
ZjgyZTQ4LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKXhZTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAT0rDxVeDZsBKPXoG8g1BfTXlzfrjTuSrLZ7DO9aE9MEmqlOkOQNCZODDFO/R
psjgmKgNEwyg7fkNiYN+Ti8feFhZSOkkCZdMbtJjZUdTPbYp58vV5ieeSHTU6ngU
N2kf8JZ4qWIQFKyKw55zucbXJ8HfrsUPO1H1CYrrEp/DS5eYgfMMFPXb6iKdPseC
VZDsaY7dfY64RRkXT7O+S8CdPbUtOa3wK2n4ycil2UFTe5Onelg2Lk0rdbjefAQE
hoHbTwlosR6yIm7fhohE0NxgullqgTI6f+G10KG4mo7h0k6A/yPjVi+5GNUXKmX6
aLAQVqzw9WIjFH1g6vUjmk8BMw==
-----END CERTIFICATE-----