Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/666d445d-f34d-3192-8f14-5352db32127c.roa
File:                     666d445d-f34d-3192-8f14-5352db32127c.roa (raw, json)
Hash identifier:          WLmqkVYR699MzWjCcpxNIsOtfcgAN78nEsdcktPr4lM=
Subject key identifier:   E7:A8:93:51:6F:4E:BD:4D:17:46:0D:A0:2A:7E:C1:36:B4:42:63:12
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7D8BE73E1BE050D0C8A54B0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/666d445d-f34d-3192-8f14-5352db32127c.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        108.172.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:d8:be:73:e1:be:05:0d:0c:8a:54:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=046db4be-90c8-4dd7-81d8-42f20a1fa1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cd:7e:72:69:31:a9:b5:dd:a3:ba:1d:c5:f0:
                    69:ac:04:6c:9a:d5:b6:4d:b2:8d:31:fb:e4:8f:79:
                    22:23:a8:6f:1c:49:22:8b:e8:e7:94:3e:ba:37:1a:
                    c6:dc:56:4c:6d:d8:19:99:c9:26:94:05:76:33:03:
                    6d:69:36:73:7a:55:a9:83:6d:71:d4:a2:78:c8:b1:
                    64:c1:6a:46:a9:b1:e3:51:45:38:b4:13:5c:11:b3:
                    2b:9f:d7:7e:ea:88:65:52:72:90:94:05:74:1f:12:
                    53:b8:5f:0c:3f:b1:b1:4d:2c:6d:6d:09:be:da:5d:
                    d1:dc:83:18:01:fe:c6:48:4a:2a:73:cd:37:b2:6a:
                    e7:65:31:73:e1:43:c6:fc:18:92:c8:1b:dd:81:ac:
                    37:03:95:d6:0f:11:35:ff:f9:7d:ef:96:07:00:0e:
                    4e:78:5a:f0:ee:16:b2:ad:3a:d1:2a:a1:d4:e8:02:
                    7c:31:fb:52:af:bc:61:c8:2b:f2:70:f7:bc:f4:f2:
                    35:81:62:8e:17:b7:47:d5:dd:3a:f1:12:95:a3:3f:
                    a6:d7:fd:4b:d5:15:7e:83:30:8d:da:9d:5d:b2:ee:
                    34:bd:6c:10:e6:1d:4d:2d:07:7b:ad:fc:5f:d2:98:
                    95:aa:f2:aa:88:0f:8e:46:58:3f:23:7b:e7:1b:ef:
                    a8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A8:93:51:6F:4E:BD:4D:17:46:0D:A0:2A:7E:C1:36:B4:42:63:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/666d445d-f34d-3192-8f14-5352db32127c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.172.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:eb:fc:01:71:6e:73:fe:6e:d1:86:54:dd:23:1f:ec:b4:58:
         31:ee:ed:bc:c8:1f:03:22:d5:e8:41:c1:5d:ff:82:f1:26:3a:
         53:25:17:75:8b:12:94:c5:b8:c6:ef:b8:e6:96:a3:c1:64:b1:
         f1:b4:22:fb:89:7d:31:7e:39:2a:37:c9:3f:c1:e3:14:33:a8:
         90:21:eb:78:43:d8:24:36:fb:6c:50:c4:c8:0f:01:c2:76:03:
         f5:bb:ad:47:74:11:9b:3f:f0:38:16:44:69:9e:82:cc:85:3c:
         1c:95:fa:c6:99:de:7b:7d:b5:d8:7d:cd:11:a9:d9:49:29:77:
         4e:b9:7a:0f:7a:1b:1b:68:1e:0c:e5:9f:e4:a9:1b:b5:44:7f:
         aa:8d:8b:40:70:4e:0e:92:8b:49:ab:be:5a:58:c0:29:d3:27:
         7c:10:62:d2:45:7e:f7:c3:5b:f9:c1:dc:96:4d:f0:1b:7b:69:
         7f:23:6e:6c:c4:18:0a:9a:62:a2:ff:f9:2e:95:79:c1:c1:60:
         31:c6:7d:2a:74:71:8b:04:ca:66:fd:ab:48:d8:dd:1b:17:f4:
         ba:27:61:31:ce:aa:23:bc:aa:b1:97:b0:26:b4:d1:eb:60:d0:
         d2:0e:cf:84:e0:77:e6:d1:ea:dd:5d:e0:87:0a:89:c9:77:92:
         40:42:5a:85
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDf32L5z4b4FDQyKVLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTIwMDkyMTA0MDAwMFoXDTIzMDIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
MDQ2ZGI0YmUtOTBjOC00ZGQ3LTgxZDgtNDJmMjBhMWZhMWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc1+cmkxqbXdo7odxfBprARsmtW2TbKNMfvk
j3kiI6hvHEkii+jnlD66NxrG3FZMbdgZmckmlAV2MwNtaTZzelWpg21x1KJ4yLFk
wWpGqbHjUUU4tBNcEbMrn9d+6ohlUnKQlAV0HxJTuF8MP7GxTSxtbQm+2l3R3IMY
Af7GSEoqc803smrnZTFz4UPG/BiSyBvdgaw3A5XWDxE1//l975YHAA5OeFrw7hay
rTrRKqHU6AJ8MftSr7xhyCvycPe89PI1gWKOF7dH1d068RKVoz+m1/1L1RV+gzCN
2p1dsu40vWwQ5h1NLQd7rfxf0piVqvKqiA+ORlg/I3vnG++oHwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOeok1FvTr1NF0YNoCp+wTa0QmMSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjY2ZDQ0NWQtZjM0ZC0z
MTkyLThmMTQtNTM1MmRiMzIxMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbKwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALev8AXFuc/5u0YZU3SMf7LRYMe7tvMgfAyLV6EHBXf+C8SY6UyUXdYsS
lMW4xu+45pajwWSx8bQi+4l9MX45KjfJP8HjFDOokCHreEPYJDb7bFDEyA8BwnYD
9butR3QRmz/wOBZEaZ6CzIU8HJX6xpnee3212H3NEanZSSl3Trl6D3obG2geDOWf
5KkbtUR/qo2LQHBODpKLSau+WljAKdMnfBBi0kV+98Nb+cHclk3wG3tpfyNubMQY
Cppiov/5LpV5wcFgMcZ9KnRxiwTKZv2rSNjdGxf0uidhMc6qI7yqsZewJrTR62DQ
0g7PhOB35tHq3V3ghwqJyXeSQEJahQ==
-----END CERTIFICATE-----