Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/82949cc8-d1bc-3a56-9b8d-7f163096367b.roa
File:                     82949cc8-d1bc-3a56-9b8d-7f163096367b.roa (raw, json)
Hash identifier:          Hj/SJ6eCwllNVrBwzryoAI5kvreuZJSQoxnRTDLkzYU=
Subject key identifier:   96:5F:38:0B:B2:C1:02:A3:68:BC:BC:72:EA:7E:62:FF:8E:10:F3:A5
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D416B319D4736A5CFA68AE80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/82949cc8-d1bc-3a56-9b8d-7f163096367b.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Mon 06 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        2001:568:202::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d4:16:b3:19:d4:73:6a:5c:fa:68:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  6 05:00:00 2023 GMT
        Subject: CN=0637def8-b49c-4621-8a71-b4a10d1e0cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a4:40:e2:bd:35:7a:06:56:94:6a:8a:6b:1b:
                    00:c0:4f:33:eb:32:0f:4b:85:0f:6f:31:f2:61:5e:
                    d6:70:c0:c7:5d:45:df:d7:47:6c:9c:d4:8c:7c:76:
                    7f:5b:21:8c:9c:32:c2:57:00:3f:d2:08:b5:a1:4c:
                    4f:f1:18:f2:c7:a0:12:92:30:6d:3a:6a:32:fc:1b:
                    b6:8d:9b:99:d0:19:e2:d5:43:4a:63:13:0c:90:5b:
                    e0:e5:a4:45:16:2a:fb:c7:06:e7:09:71:7d:e8:64:
                    5b:86:68:42:59:10:66:64:b8:3c:f0:31:43:56:c5:
                    28:e6:24:b0:9c:c7:7f:34:6e:08:1b:79:84:20:f0:
                    c5:9e:24:4a:e9:44:1f:9f:9b:31:8b:ab:c7:aa:13:
                    e5:83:46:65:7d:b0:53:44:cf:96:08:00:64:20:86:
                    ad:23:d6:8a:93:44:b4:c9:90:eb:da:5d:35:e8:4a:
                    15:35:71:e6:a2:83:1e:f2:9a:e6:72:c6:d3:70:cf:
                    ba:d9:c1:88:9e:54:d9:18:f3:b4:13:5f:d1:b4:2f:
                    d2:76:71:8d:95:87:99:f0:7c:48:51:f1:b4:9f:07:
                    ac:d7:ec:12:e4:fa:95:73:e6:78:fe:8c:0d:40:d6:
                    b0:f2:98:69:4e:64:54:8c:40:1a:7f:cc:5b:34:b5:
                    28:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5F:38:0B:B2:C1:02:A3:68:BC:BC:72:EA:7E:62:FF:8E:10:F3:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/82949cc8-d1bc-3a56-9b8d-7f163096367b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:568:202::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:38:84:8c:40:e1:55:b1:e4:1f:69:99:90:67:28:5b:e4:13:
         20:70:db:56:e1:e8:9b:e9:b1:40:30:ff:d6:ca:f5:50:ba:8f:
         dc:2d:5b:50:c6:e6:be:87:d4:71:9a:58:2f:03:a4:95:e0:55:
         1d:b3:3b:ed:13:33:13:6c:50:d9:ed:31:7b:e7:38:80:dd:dd:
         fb:c8:81:31:02:ac:a4:64:2b:47:98:cc:3b:02:48:18:6f:9c:
         0e:1f:66:12:58:2e:aa:b8:59:e4:cd:b0:92:9e:a2:83:54:b1:
         0d:7a:dc:ce:42:31:7e:c5:58:4f:3e:c3:ad:bf:5a:7f:4a:78:
         69:c7:25:a8:7b:f6:8c:fb:db:9b:04:c6:94:da:fa:0a:a3:f4:
         63:48:b0:0e:5b:56:34:02:c2:f8:92:af:9b:90:cd:9d:69:19:
         9d:dd:5f:79:a2:c4:60:e5:99:e2:be:b0:85:d3:f0:bd:87:0d:
         31:61:d4:61:40:29:d0:10:16:79:fa:5f:17:55:64:56:82:50:
         89:93:15:b2:fa:2d:4d:84:2b:4e:eb:b5:91:f5:49:a5:05:92:
         0b:a3:1b:cf:78:a8:31:29:9f:63:07:8e:88:9b:0c:97:12:b8:
         e3:fb:0e:ee:24:33:20:e2:07:cf:f4:56:ee:56:8b:80:d3:2f:
         cf:ad:57:47
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDfUFrMZ1HNqXPporoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTIwMDkyMTA0MDAwMFoXDTIzMDIwNjA1MDAwMFowLzEtMCsGA1UEAxMk
MDYzN2RlZjgtYjQ5Yy00NjIxLThhNzEtYjRhMTBkMWUwY2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aRA4r01egZWlGqKaxsAwE8z6zIPS4UPbzHy
YV7WcMDHXUXf10dsnNSMfHZ/WyGMnDLCVwA/0gi1oUxP8Rjyx6ASkjBtOmoy/Bu2
jZuZ0Bni1UNKYxMMkFvg5aRFFir7xwbnCXF96GRbhmhCWRBmZLg88DFDVsUo5iSw
nMd/NG4IG3mEIPDFniRK6UQfn5sxi6vHqhPlg0ZlfbBTRM+WCABkIIatI9aKk0S0
yZDr2l016EoVNXHmooMe8prmcsbTcM+62cGInlTZGPO0E1/RtC/SdnGNlYeZ8HxI
UfG0nwes1+wS5PqVc+Z4/owNQNaw8phpTmRUjEAaf8xbNLUoHQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJZfOAuywQKjaLy8cup+Yv+OEPOlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODI5NDljYzgtZDFiYy0z
YTU2LTliOGQtN2YxNjMwOTYzNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaAIC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADU4hIxA4VWx5B9pmZBnKFvkEyBw21bh6JvpsUAw/9bK9VC6j9wt
W1DG5r6H1HGaWC8DpJXgVR2zO+0TMxNsUNntMXvnOIDd3fvIgTECrKRkK0eYzDsC
SBhvnA4fZhJYLqq4WeTNsJKeooNUsQ163M5CMX7FWE8+w62/Wn9KeGnHJah79oz7
25sExpTa+gqj9GNIsA5bVjQCwviSr5uQzZ1pGZ3dX3mixGDlmeK+sIXT8L2HDTFh
1GFAKdAQFnn6XxdVZFaCUImTFbL6LU2EK07rtZH1SaUFkgujG894qDEpn2MHjoib
DJcSuOP7Du4kMyDiB8/0Vu5Wi4DTL8+tV0c=
-----END CERTIFICATE-----