Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d02dba0f-eb41-34a6-a270-6b994d672239.roa
File:                     d02dba0f-eb41-34a6-a270-6b994d672239.roa (raw, json)
Hash identifier:          jgp6NRQmqLIFNZe7Py9Dv6isVMH8SPGvvs2NyaA6sys=
Subject key identifier:   39:4A:0D:B1:C9:37:2B:70:71:D6:05:69:48:21:A1:41:CA:81:36:1A
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA79F271F6BDED3A8F33D14B0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d02dba0f-eb41-34a6-a270-6b994d672239.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:9f:27:1f:6b:de:d3:a8:f3:3d:14:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=c55ff65d-6cfe-4e9f-b5c0-4b7168d4c1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:f6:2f:58:3d:4a:8c:20:1a:b0:0d:e8:8a:
                    f5:cc:ac:6c:63:80:16:85:97:48:a6:3c:5b:b2:42:
                    c3:fa:08:05:b5:ba:38:39:83:c9:cf:70:1c:ca:14:
                    9e:7a:e6:d0:c7:e6:e3:b7:b1:f2:51:d5:b3:a7:a2:
                    82:d8:b0:05:76:1c:5a:61:88:d0:75:72:bd:18:4f:
                    63:4d:06:ec:3d:51:f9:3c:bc:b4:2e:8e:57:57:2e:
                    13:a3:f9:44:a8:2d:40:f6:1e:11:71:26:2c:e1:79:
                    fe:05:0c:d1:4d:da:82:f1:f5:fd:1c:31:8b:c5:8a:
                    7f:c5:c9:42:2a:5f:4b:1b:cd:cd:7b:90:64:7f:d2:
                    7d:46:cb:43:6c:61:85:65:b7:f4:6d:3f:ac:c9:90:
                    b9:d7:48:e4:21:02:75:cf:9c:aa:4c:40:1d:67:9a:
                    2a:e6:bf:6d:91:9e:37:d0:d8:ac:3e:b5:e6:70:b8:
                    aa:b9:12:dd:21:70:8b:0a:0c:33:09:dc:a1:13:eb:
                    47:58:a1:ca:87:55:90:34:8f:44:69:61:c4:c6:6c:
                    d2:28:a5:9a:fa:f1:2c:2d:a8:4d:a5:7a:cf:9e:35:
                    de:2c:84:2f:bb:cb:29:ea:ff:f0:ac:f4:c4:eb:aa:
                    71:7b:85:0f:7b:ac:f7:dd:18:7f:1b:a0:09:6d:a4:
                    b5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4A:0D:B1:C9:37:2B:70:71:D6:05:69:48:21:A1:41:CA:81:36:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d02dba0f-eb41-34a6-a270-6b994d672239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:e3:d0:f3:42:df:dd:69:ef:eb:1c:41:e3:14:49:24:6c:62:
         aa:04:38:07:0b:40:d8:ec:36:38:a4:88:6c:d5:b6:4b:fa:a4:
         32:83:a9:41:32:0f:eb:27:a7:e9:eb:51:dd:ac:6e:c1:ad:6c:
         f6:55:81:bc:e0:1a:49:d1:b0:0c:62:4f:eb:5c:24:42:f3:0d:
         c3:4f:22:b0:7a:80:17:73:96:23:fb:63:53:9e:b7:5e:48:35:
         0e:fa:61:8c:31:63:7f:53:9e:6d:59:36:a7:fd:54:f7:55:b2:
         b7:1d:d3:f0:6a:62:a6:6c:2a:3e:ed:a3:96:61:a2:f7:29:f8:
         1d:4e:70:9d:9a:51:c1:60:70:e2:95:d5:c3:c1:ea:c3:ff:36:
         4e:c3:79:99:3f:fe:b3:60:86:81:77:57:3b:5d:84:22:4b:97:
         0e:11:1c:09:0b:a8:4a:75:f2:47:6a:65:14:b6:a7:e5:07:4d:
         f4:77:59:b1:ae:52:e7:1d:ed:67:52:c8:62:b6:8e:9c:0d:66:
         86:be:0d:bb:f4:25:d2:00:57:f7:b8:8d:31:7a:bd:b7:af:06:
         ce:07:e9:cc:1f:c3:23:ea:5e:fb:01:f8:54:68:c5:26:a2:34:
         ee:5b:ee:63:64:51:3c:ee:79:b1:d5:e6:d8:bb:19:d4:d7:1a:
         62:e6:d4:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnnycfa97TqPM9FLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YzU1ZmY2NWQtNmNmZS00ZTlmLWI1YzAtNGI3MTY4ZDRjMWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTv2L1g9SowgGrAN6Ir1zKxsY4AWhZdIpjxb
skLD+ggFtbo4OYPJz3AcyhSeeubQx+bjt7HyUdWzp6KC2LAFdhxaYYjQdXK9GE9j
TQbsPVH5PLy0Lo5XVy4To/lEqC1A9h4RcSYs4Xn+BQzRTdqC8fX9HDGLxYp/xclC
Kl9LG83Ne5Bkf9J9RstDbGGFZbf0bT+syZC510jkIQJ1z5yqTEAdZ5oq5r9tkZ43
0NisPrXmcLiquRLdIXCLCgwzCdyhE+tHWKHKh1WQNI9EaWHExmzSKKWa+vEsLahN
pXrPnjXeLIQvu8sp6v/wrPTE66pxe4UPe6z33Rh/G6AJbaS1pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDlKDbHJNytwcdYFaUghoUHKgTYaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZDAyZGJhMGYtZWI0MS0z
NGE2LWEyNzAtNmI5OTRkNjcyMjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO22MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKjj0PNC391p7+scQeMUSSRsYqoEOAcLQNjsNjikiGzVtkv6pDKDqUEy
D+snp+nrUd2sbsGtbPZVgbzgGknRsAxiT+tcJELzDcNPIrB6gBdzliP7Y1Oet15I
NQ76YYwxY39Tnm1ZNqf9VPdVsrcd0/BqYqZsKj7to5Zhovcp+B1OcJ2aUcFgcOKV
1cPB6sP/Nk7DeZk//rNghoF3VztdhCJLlw4RHAkLqEp18kdqZRS2p+UHTfR3WbGu
Uucd7WdSyGK2jpwNZoa+Dbv0JdIAV/e4jTF6vbevBs4H6cwfwyPqXvsB+FRoxSai
NO5b7mNkUTzuebHV5ti7GdTXGmLm1Eo=
-----END CERTIFICATE-----