Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/045c0d40-99ea-3fb6-9328-4743a138fd64.roa
File:                     045c0d40-99ea-3fb6-9328-4743a138fd64.roa (raw, json)
Hash identifier:          Lcxy2SnsVlBGW1C+HznlnkJWISEj9Gx4P0Ud5tVKbIo=
Subject key identifier:   38:7A:8D:DB:35:7C:52:C9:FF:D5:96:AD:B0:8A:E6:73:81:88:BC:58
Certificate issuer:       /CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
Certificate serial:       010D0C9F4328576D51CC73C042CFC1735783175F
Authority key identifier: 16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/045c0d40-99ea-3fb6-9328-4743a138fd64.roa
Signing time:             Thu 16 Jul 2020 12:04:35 +0000
ROA not before:           Tue 14 Jul 2020 04:00:00 +0000
ROA not after:            Wed 19 Oct 2022 04:00:00 +0000
asID:                     32726
IP address blocks:        2620:12f:2000::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:57:83:17:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
        Validity
            Not Before: Jul 14 04:00:00 2020 GMT
            Not After : Oct 19 04:00:00 2022 GMT
        Subject: CN=7c72480b-648f-4944-acc3-7153f96898c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:ba:44:4f:75:ce:be:76:82:57:12:3a:68:
                    dc:48:ce:93:7b:5e:7c:f1:c4:ed:0c:64:bc:68:14:
                    1e:cc:71:43:9e:9a:3a:9b:91:1c:98:d0:3a:b8:1f:
                    a0:70:80:d1:8c:be:6d:77:d6:9e:b9:aa:03:2f:be:
                    ff:d7:51:5a:07:20:ca:c7:43:cf:9a:36:40:cb:bd:
                    72:46:ac:84:97:1a:87:05:11:c6:2c:2d:ed:dd:b7:
                    34:e5:c5:19:e4:c4:bf:92:b4:c1:30:3e:c2:25:26:
                    b4:9f:2d:dc:d5:d4:1d:6f:1e:6a:b2:e2:48:ce:f1:
                    1e:94:76:f5:c4:a3:5e:5c:e5:a8:c4:9e:c1:7a:3b:
                    80:a5:c5:47:1f:ee:74:97:6d:77:fa:cf:16:d1:3d:
                    43:84:5c:7f:b1:98:46:fd:01:e7:8a:6e:a9:fa:b1:
                    f1:91:79:7e:be:36:6f:06:63:dd:c8:22:0a:20:75:
                    87:27:6a:47:d4:5e:cf:8b:58:f2:56:c1:8e:ec:e1:
                    0c:ba:8a:60:5e:be:33:b0:1c:4a:de:a8:ee:9c:15:
                    94:b4:c3:71:ef:72:df:2e:42:12:36:17:c4:e0:6b:
                    0f:35:15:fb:91:b0:98:09:09:d8:e2:da:b8:d9:45:
                    06:22:93:2b:90:bb:a2:c8:02:46:07:0a:22:17:26:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7A:8D:DB:35:7C:52:C9:FF:D5:96:AD:B0:8A:E6:73:81:88:BC:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/045c0d40-99ea-3fb6-9328-4743a138fd64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl

            X509v3 Authority Key Identifier:
                keyid:16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12f:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:3c:2d:82:83:75:23:ac:17:3a:4c:9b:47:60:30:8c:2e:63:
         15:b4:66:8e:9f:69:61:55:13:ab:72:5c:f1:3e:a2:18:55:1b:
         54:2f:54:12:86:e1:22:8d:6d:bd:71:c3:31:9f:7a:5d:97:e0:
         29:ea:f6:d8:78:9c:bc:c7:db:99:dd:71:01:2c:42:d8:dd:84:
         4f:2c:32:8c:cf:da:8b:52:b4:04:85:ac:93:58:d4:27:82:1e:
         75:54:33:57:5a:36:67:f0:bd:8a:cc:b5:92:b9:f7:09:95:3a:
         fc:7d:41:c7:64:dd:a5:e4:91:6b:ba:c5:56:58:3a:86:95:6f:
         19:8d:95:1f:44:e0:2a:47:60:e2:82:01:90:a0:7c:4a:81:90:
         7c:17:d9:8b:26:b2:f9:8c:12:8f:26:d8:eb:30:6c:1b:9d:e4:
         ec:e8:b2:3d:7b:b8:4f:8a:c7:82:6d:fd:9b:c5:f8:9e:34:1a:
         f8:c0:ef:93:b4:2e:79:0c:1f:7d:5c:6e:73:76:10:aa:91:9a:
         36:33:24:1c:aa:f9:3b:24:49:3a:7f:4a:b5:c4:74:66:f9:34:
         55:cf:9e:76:f3:ce:5b:e3:b7:c7:56:ce:19:d3:e0:be:f1:b9:
         7a:22:0d:76:ea:40:18:66:b6:84:7b:78:4e:13:dd:a2:27:64:
         4e:ec:40:7a
-----BEGIN CERTIFICATE-----
MIIGQTCCBSugAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc1eDF18wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDcyNDVjZGJmLTk3ZDctNDM3Ni05ZDhkLTI5OGNkYTVkMzg1
NDAeFw0yMDA3MTQwNDAwMDBaFw0yMjEwMTkwNDAwMDBaMC8xLTArBgNVBAMTJDdj
NzI0ODBiLTY0OGYtNDk0NC1hY2MzLTcxNTNmOTY4OThjNjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANC5ukRPdc6+doJXEjpo3EjOk3tefPHE7QxkvGgU
HsxxQ56aOpuRHJjQOrgfoHCA0Yy+bXfWnrmqAy++/9dRWgcgysdDz5o2QMu9ckas
hJcahwURxiwt7d23NOXFGeTEv5K0wTA+wiUmtJ8t3NXUHW8earLiSM7xHpR29cSj
XlzlqMSewXo7gKXFRx/udJdtd/rPFtE9Q4Rcf7GYRv0B54puqfqx8ZF5fr42bwZj
3cgiCiB1hydqR9Rez4tY8lbBjuzhDLqKYF6+M7AcSt6o7pwVlLTDce9y3y5CEjYX
xOBrDzUV+5GwmAkJ2OLauNlFBiKTK5C7osgCRgcKIhcmphcCAwEAAaOCA1cwggNT
MB0GA1UdDgQWBBQ4eo3bNXxSyf/Vlq2wiuZzgYi8WDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzI0NWNk
YmYtOTdkNy00Mzc2LTlkOGQtMjk4Y2RhNWQzODU0LzA0NWMwZDQwLTk5ZWEtM2Zi
Ni05MzI4LTQ3NDNhMTM4ZmQ2NC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzcyNDVjZGJmLTk3ZDctNDM3Ni05ZDhk
LTI5OGNkYTVkMzg1NC83MjQ1Y2RiZi05N2Q3LTQzNzYtOWQ4ZC0yOThjZGE1ZDM4
NTQuY3JsMB8GA1UdIwQYMBaAFBbhgrBORQwqnt0N8KqsBig+2Zc/MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvNzI0NWNkYmYtOTdkNy00Mzc2LTlkOGQtMjk4Y2Rh
NWQzODU0LmNlcjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYgAS8gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQEL
A4IBAQAgPC2Cg3UjrBc6TJtHYDCMLmMVtGaOn2lhVROrclzxPqIYVRtUL1QShuEi
jW29ccMxn3pdl+Ap6vbYeJy8x9uZ3XEBLELY3YRPLDKMz9qLUrQEhayTWNQngh51
VDNXWjZn8L2KzLWSufcJlTr8fUHHZN2l5JFrusVWWDqGlW8ZjZUfROAqR2DiggGQ
oHxKgZB8F9mLJrL5jBKPJtjrMGwbneTs6LI9e7hPiseCbf2bxfieNBr4wO+TtC55
DB99XG5zdhCqkZo2MyQcqvk7JEk6f0q1xHRm+TRVz552885b47fHVs4Z0+C+8bl6
Ig126kAYZraEe3hOE92iJ2RO7EB6
-----END CERTIFICATE-----