Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a8515c74-755a-307e-b09c-85d9323039b3.roa
File:                     a8515c74-755a-307e-b09c-85d9323039b3.roa (raw, json)
Hash identifier:          MIxOHoutLfjcTPzloUMbOer0hrdEDdzr376OwvY5NYI=
Subject key identifier:   F1:DA:80:2C:0B:81:82:80:5F:A7:D4:A9:F5:72:F9:DA:64:AB:A5:09
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7A545589250E02780CC7680
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a8515c74-755a-307e-b09c-85d9323039b3.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.252.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a5:45:58:92:50:e0:27:80:cc:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=1ed3c3f4-2aa9-4a76-952f-b9e73b72d7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6c:12:ea:eb:91:2b:ac:54:e0:08:cf:30:9e:
                    74:75:da:8c:4f:92:59:d6:c8:27:25:0d:e9:88:2c:
                    95:c9:44:79:ee:2c:3c:c0:0a:fb:a0:95:c4:c6:ac:
                    c2:37:5d:b4:50:3a:e8:3b:1b:48:cf:f8:35:d6:bc:
                    35:ba:0e:6d:f6:ff:1c:a4:0a:4c:a7:2c:d3:c3:9e:
                    24:af:bb:2c:f3:3b:b6:f3:76:44:bd:d3:60:15:72:
                    3b:a1:50:9d:ca:1c:c3:a7:03:42:1b:c4:e9:29:7f:
                    e0:09:28:35:43:f5:67:1b:69:ea:b0:e6:63:85:6e:
                    a8:02:e5:8d:02:40:d7:1c:b6:b5:6d:a1:c7:e4:3f:
                    b1:dc:3b:26:6d:b0:78:a8:46:5d:55:f5:9a:33:4c:
                    b9:d5:8a:79:95:cb:88:b6:02:3a:0c:28:01:15:25:
                    3e:df:33:fa:03:a9:ac:d2:72:9f:ff:e2:be:b7:de:
                    4e:3e:ee:51:59:c3:81:0a:53:43:ed:64:0f:73:7f:
                    cc:1d:06:cd:05:d3:ec:2f:47:84:2f:48:66:ea:ec:
                    81:20:8c:8d:e6:4b:4f:61:bd:61:ef:3d:fc:7b:21:
                    1e:8b:53:46:6c:b0:7c:6e:b7:30:b9:22:cc:f4:58:
                    68:8d:7e:6e:51:9a:77:33:fd:db:a4:e2:3d:81:be:
                    7d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DA:80:2C:0B:81:82:80:5F:A7:D4:A9:F5:72:F9:DA:64:AB:A5:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a8515c74-755a-307e-b09c-85d9323039b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:f5:f2:66:9f:66:1f:96:4d:e3:ba:27:5d:10:9a:5e:e0:44:
         ef:59:ce:ad:e3:b5:d6:d4:f1:6e:e4:bf:fb:27:32:db:0d:65:
         d3:ef:1b:bf:f4:b1:5a:12:5e:b8:2c:a3:2c:bb:6e:03:52:fb:
         fa:0f:90:d5:93:4c:b0:20:94:3f:75:84:c9:b5:e6:79:33:8f:
         17:4b:1f:5a:45:df:39:0a:68:c2:70:21:d2:13:c1:89:b2:3f:
         cb:55:40:2f:80:d0:54:eb:28:c8:96:e4:12:4e:9a:6a:91:5b:
         68:7d:80:a0:e4:df:86:cd:7c:b4:08:f8:1f:0f:b4:82:ff:d2:
         b1:8a:2c:18:b7:d8:2c:c6:68:eb:b9:f6:ed:95:38:76:12:a4:
         aa:ca:98:26:5f:fc:3e:6a:c6:aa:4e:22:a3:91:07:8b:54:54:
         00:a8:66:25:82:19:9e:1f:26:22:85:0a:c7:62:61:8a:8c:a2:
         1e:98:18:69:3d:af:a5:49:ab:aa:62:86:ff:52:4c:4f:48:44:
         27:bd:ad:60:bb:dd:89:f7:c1:0b:f8:e5:e6:6d:fe:e2:7e:35:
         b2:16:c9:c7:22:91:40:7d:ba:0d:4d:71:25:05:e0:6e:50:f4:
         75:7d:a9:1e:08:50:9b:40:75:19:4f:51:ce:96:4b:82:df:e7:
         7a:ed:b3:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnpUVYklDgJ4DMdoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MWVkM2MzZjQtMmFhOS00YTc2LTk1MmYtYjllNzNiNzJkN2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mwS6uuRK6xU4AjPMJ50ddqMT5JZ1sgnJQ3p
iCyVyUR57iw8wAr7oJXExqzCN120UDroOxtIz/g11rw1ug5t9v8cpApMpyzTw54k
r7ss8zu283ZEvdNgFXI7oVCdyhzDpwNCG8TpKX/gCSg1Q/VnG2nqsOZjhW6oAuWN
AkDXHLa1baHH5D+x3DsmbbB4qEZdVfWaM0y51Yp5lcuItgI6DCgBFSU+3zP6A6ms
0nKf/+K+t95OPu5RWcOBClND7WQPc3/MHQbNBdPsL0eEL0hm6uyBIIyN5ktPYb1h
7z38eyEei1NGbLB8brcwuSLM9FhojX5uUZp3M/3bpOI9gb592wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPHagCwLgYKAX6fUqfVy+dpkq6UJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYTg1MTVjNzQtNzU1YS0z
MDdlLWIwOWMtODVkOTMyMzAzOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0HX8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALf18mafZh+WTeO6J10Qml7gRO9Zzq3jtdbU8W7kv/snMtsNZdPvG7/0
sVoSXrgsoyy7bgNS+/oPkNWTTLAglD91hMm15nkzjxdLH1pF3zkKaMJwIdITwYmy
P8tVQC+A0FTrKMiW5BJOmmqRW2h9gKDk34bNfLQI+B8PtIL/0rGKLBi32CzGaOu5
9u2VOHYSpKrKmCZf/D5qxqpOIqORB4tUVACoZiWCGZ4fJiKFCsdiYYqMoh6YGGk9
r6VJq6pihv9STE9IRCe9rWC73Yn3wQv45eZt/uJ+NbIWyccikUB9ug1NcSUF4G5Q
9HV9qR4IUJtAdRlPUc6WS4Lf53rts0c=
-----END CERTIFICATE-----