Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/db314e87-080a-329c-bf0b-b0290e46260e.roa
File:                     db314e87-080a-329c-bf0b-b0290e46260e.roa (raw, json)
Hash identifier:          8Yhi0aEsuXpeEUodW7SJottY1jJaD0Q2eH6KL2dnMik=
Subject key identifier:   BD:C9:E7:B2:B3:72:9A:02:A0:E7:51:5B:D6:12:0B:C7:A1:53:15:15
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285839B8D64F1B3B90D0E86A2647C0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/db314e87-080a-329c-bf0b-b0290e46260e.roa
Signing time:             Mon 26 Apr 2021 04:00:00 +0000
ROA not before:           Mon 26 Apr 2021 04:00:00 +0000
ROA not after:            Sat 29 Jul 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        2620:11a:a039::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:b8:d6:4f:1b:3b:90:d0:e8:6a:26:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Apr 26 04:00:00 2021 GMT
            Not After : Jul 29 04:00:00 2023 GMT
        Subject: CN=2cefa1d1-b84d-4d19-82ff-92eb00313010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a4:41:52:48:e7:96:5b:0b:dc:66:14:ad:59:
                    3b:1e:e5:e8:f2:7e:2e:3a:93:7e:14:c0:24:c2:cb:
                    dd:f9:39:76:dc:e1:48:5e:34:91:ad:db:78:13:4f:
                    d9:ee:a9:95:00:45:2f:a4:1f:d6:fa:66:40:61:47:
                    c6:24:2a:11:1b:5f:2a:3d:6e:5a:8c:da:b6:d8:c7:
                    a6:dc:2f:97:a9:8f:bb:92:f3:79:c6:34:31:0e:8a:
                    9d:9d:a1:bd:88:c5:c8:10:75:08:58:bb:c6:ef:66:
                    28:1d:b4:43:6c:3a:f2:66:48:6d:65:56:e2:ca:d2:
                    8b:89:2d:d0:2c:e1:62:41:87:77:c4:6d:d8:11:99:
                    40:f5:3c:ac:9d:e1:ef:b1:bd:3f:cc:62:2e:05:76:
                    f6:f6:d2:3c:a8:87:3d:3f:91:62:ac:72:6c:e6:8d:
                    b7:e8:f9:b7:84:11:50:29:80:b3:7d:fe:ba:7e:cc:
                    82:f8:68:db:ff:18:31:51:f0:db:40:a7:f2:de:9c:
                    f8:9b:6c:8f:7c:7c:84:16:9a:14:23:2b:2e:08:92:
                    ec:30:28:92:57:76:81:2e:22:36:de:c4:9f:26:38:
                    62:de:80:79:59:61:fb:f7:68:c1:d8:c3:ee:10:5d:
                    58:a6:c3:e1:21:e5:cc:5d:3d:9e:13:51:b7:87:eb:
                    d1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C9:E7:B2:B3:72:9A:02:A0:E7:51:5B:D6:12:0B:C7:A1:53:15:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/db314e87-080a-329c-bf0b-b0290e46260e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:a039::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:79:c6:fb:1b:2b:5f:c1:11:1d:c8:3c:35:b1:c1:8f:e1:31:
         61:75:8c:07:18:c4:85:bb:5b:41:8e:d2:02:3a:59:6e:41:2f:
         fa:e7:4e:e0:50:1b:29:ac:bd:52:da:81:d8:b7:7a:17:36:0f:
         e8:c5:cf:dc:e1:4d:0a:c0:d3:ee:6a:69:1a:1f:e4:24:ef:ef:
         16:af:71:a7:bd:e1:8b:a6:a5:7a:d8:42:03:17:16:a0:cd:97:
         d7:45:bf:79:95:77:3c:1a:18:fd:a1:fb:42:eb:dd:73:48:b5:
         f7:d1:da:8e:6a:a8:f1:47:b8:e9:51:5e:1c:ea:7d:94:52:98:
         fc:8a:d8:15:1d:33:37:44:b6:d3:f4:ae:a7:87:71:07:1f:9b:
         06:64:4d:15:e8:52:16:57:bb:50:40:9d:56:fe:3c:fd:bb:5b:
         51:70:a2:33:e3:eb:3f:ad:27:59:43:e3:86:59:94:50:1a:3f:
         a6:b2:af:6c:0b:ad:32:16:37:7b:fe:df:f1:56:c5:30:48:76:
         d9:d5:ee:df:ae:6a:14:8b:b3:56:88:90:ad:46:43:16:9c:90:
         d9:e6:bf:14:e2:1f:7f:5f:5f:8d:25:cc:ce:9a:0b:17:99:83:
         c9:1e:e6:26:76:5d:e9:29:bc:12:50:d6:60:01:34:09:38:60:
         21:7b:d1:d0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDm41k8bO5DQ6GomR8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIxMDQyNjA0MDAwMFoXDTIzMDcyOTA0MDAwMFowLzEtMCsGA1UEAxMk
MmNlZmExZDEtYjg0ZC00ZDE5LTgyZmYtOTJlYjAwMzEzMDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKRBUkjnllsL3GYUrVk7HuXo8n4uOpN+FMAk
wsvd+Tl23OFIXjSRrdt4E0/Z7qmVAEUvpB/W+mZAYUfGJCoRG18qPW5ajNq22Mem
3C+XqY+7kvN5xjQxDoqdnaG9iMXIEHUIWLvG72YoHbRDbDryZkhtZVbiytKLiS3Q
LOFiQYd3xG3YEZlA9TysneHvsb0/zGIuBXb29tI8qIc9P5FirHJs5o236Pm3hBFQ
KYCzff66fsyC+Gjb/xgxUfDbQKfy3pz4m2yPfHyEFpoUIysuCJLsMCiSV3aBLiI2
3sSfJjhi3oB5WWH792jB2MPuEF1YpsPhIeXMXT2eE1G3h+vR6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL3J57KzcpoCoOdRW9YSC8ehUxUVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZGIzMTRlODctMDgwYS0z
MjljLWJmMGItYjAyOTBlNDYyNjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGqA5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHB5xvsbK1/BER3IPDWxwY/hMWF1jAcYxIW7W0GO0gI6WW5BL/rn
TuBQGymsvVLagdi3ehc2D+jFz9zhTQrA0+5qaRof5CTv7xavcae94YumpXrYQgMX
FqDNl9dFv3mVdzwaGP2h+0Lr3XNItffR2o5qqPFHuOlRXhzqfZRSmPyK2BUdMzdE
ttP0rqeHcQcfmwZkTRXoUhZXu1BAnVb+PP27W1FwojPj6z+tJ1lD44ZZlFAaP6ay
r2wLrTIWN3v+3/FWxTBIdtnV7t+uahSLs1aIkK1GQxackNnmvxTiH39fX40lzM6a
CxeZg8ke5iZ2XekpvBJQ1mABNAk4YCF70dA=
-----END CERTIFICATE-----