Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/064e1f51-7c03-36a9-a362-faf5cfbd68bb.roa
File:                     064e1f51-7c03-36a9-a362-faf5cfbd68bb.roa (raw, json)
Hash identifier:          0MqRfmsGBRZbjhkuT7vClaprkd9ROTq63bFlJj/8BcI=
Subject key identifier:   3D:00:97:08:1A:26:C0:DA:33:E0:89:C4:27:DA:23:61:94:ED:F8:2A
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285838469C520B3A197535222E5E80
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/064e1f51-7c03-36a9-a362-faf5cfbd68bb.roa
Signing time:             Mon 16 Nov 2020 05:00:00 +0000
ROA not before:           Mon 16 Nov 2020 05:00:00 +0000
ROA not after:            Sun 19 Mar 2023 04:00:00 +0000
asID:                     174
IP address blocks:        216.177.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:46:9c:52:0b:3a:19:75:35:22:2e:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Nov 16 05:00:00 2020 GMT
            Not After : Mar 19 04:00:00 2023 GMT
        Subject: CN=8bc63f6e-0a4e-49e7-9864-61770092893c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:31:51:9a:1b:5a:78:0e:10:6c:16:1c:de:75:
                    8b:55:c9:4d:e3:ea:7d:42:45:78:ed:d7:a2:77:2f:
                    24:f4:f3:9f:40:4e:65:cd:a7:94:a4:0e:66:9e:63:
                    f8:51:03:1c:54:68:fe:4d:7e:2c:0d:44:49:91:04:
                    7d:1d:db:51:59:4a:df:c0:85:cf:ed:5e:0a:0c:6a:
                    9f:40:47:24:0f:90:b0:02:fd:74:55:f4:ad:1b:d9:
                    53:19:69:52:76:d4:a1:96:ad:78:9b:d9:38:64:90:
                    20:00:d0:0c:9c:40:d0:1b:c1:77:30:69:90:86:7d:
                    22:94:80:9a:01:1e:96:ed:2b:a2:3c:52:53:c3:e1:
                    5d:db:c8:d2:3a:05:dd:ee:d8:77:a9:01:0d:92:1c:
                    77:9b:e7:63:8e:5f:4e:00:ca:41:97:eb:e5:19:af:
                    07:ec:a0:3f:34:09:09:dd:23:3e:04:b2:5e:21:58:
                    79:af:e9:a1:60:af:96:02:6a:5f:53:76:fa:dd:0f:
                    08:67:39:d7:f1:42:d8:e9:20:d9:64:e5:57:87:77:
                    90:0f:35:dc:ff:9a:15:8f:0e:a3:a0:ce:87:82:94:
                    ce:07:f9:68:ce:7f:1a:8b:d5:09:84:60:f8:49:38:
                    a0:2c:84:68:e2:95:39:a6:dd:fd:a7:30:56:be:b8:
                    1f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:00:97:08:1A:26:C0:DA:33:E0:89:C4:27:DA:23:61:94:ED:F8:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/064e1f51-7c03-36a9-a362-faf5cfbd68bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c8:7b:e1:37:1a:cb:d4:24:71:e8:49:bd:d6:4b:84:71:3d:
         b9:4e:90:1e:dc:0c:ba:ab:55:b5:ae:a6:4b:83:cc:01:8f:63:
         47:a1:a9:1a:14:f5:bb:b3:9e:89:26:fc:2c:a2:76:70:22:8d:
         19:ab:9c:72:37:72:db:df:0a:f7:b0:2b:51:7c:50:9c:00:34:
         58:b2:18:b0:0c:48:54:bd:04:58:ef:b3:d2:8f:db:6e:65:c3:
         04:30:c8:98:56:16:fe:9d:1f:4f:27:2f:e6:d2:19:c0:45:7d:
         83:d6:41:ea:01:66:b6:7f:44:7b:f0:fd:ea:b6:75:f1:24:c1:
         01:9e:d1:50:8d:ae:ed:c7:6f:c0:5e:76:bb:bf:c8:93:85:3e:
         c7:52:d4:11:74:97:1f:af:0b:1f:84:fb:1d:05:48:86:65:29:
         d0:12:29:2e:97:e0:a7:86:51:1a:d5:39:f2:bb:98:e9:dd:6d:
         f9:54:d0:49:7a:c2:f3:03:d1:ae:23:fd:72:73:e1:c2:70:c0:
         b1:82:aa:da:18:ed:a2:d5:30:dc:c9:4d:f6:f6:a7:35:41:b2:
         d1:69:17:1f:11:8a:42:f7:c6:1a:54:f5:d4:cf:06:9f:a3:1c:
         48:3d:d2:3a:eb:01:be:69:fd:1b:14:66:17:41:93:28:85:25:
         40:67:09:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDhGnFILOhl1NSIuXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTIwMTExNjA1MDAwMFoXDTIzMDMxOTA0MDAwMFowLzEtMCsGA1UEAxMk
OGJjNjNmNmUtMGE0ZS00OWU3LTk4NjQtNjE3NzAwOTI4OTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTFRmhtaeA4QbBYc3nWLVclN4+p9QkV47dei
dy8k9POfQE5lzaeUpA5mnmP4UQMcVGj+TX4sDURJkQR9HdtRWUrfwIXP7V4KDGqf
QEckD5CwAv10VfStG9lTGWlSdtShlq14m9k4ZJAgANAMnEDQG8F3MGmQhn0ilICa
AR6W7SuiPFJTw+Fd28jSOgXd7th3qQENkhx3m+djjl9OAMpBl+vlGa8H7KA/NAkJ
3SM+BLJeIVh5r+mhYK+WAmpfU3b63Q8IZznX8ULY6SDZZOVXh3eQDzXc/5oVjw6j
oM6HgpTOB/lozn8ai9UJhGD4STigLIRo4pU5pt39pzBWvrgfAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD0AlwgaJsDaM+CJxCfaI2GU7fgqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvMDY0ZTFmNTEtN2MwMy0z
NmE5LWEzNjItZmFmNWNmYmQ2OGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LGEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLIe+E3GsvUJHHoSb3WS4RxPblOkB7cDLqrVbWupkuDzAGPY0ehqRoU
9buznokm/CyidnAijRmrnHI3ctvfCvewK1F8UJwANFiyGLAMSFS9BFjvs9KP225l
wwQwyJhWFv6dH08nL+bSGcBFfYPWQeoBZrZ/RHvw/eq2dfEkwQGe0VCNru3Hb8Be
dru/yJOFPsdS1BF0lx+vCx+E+x0FSIZlKdASKS6X4KeGURrVOfK7mOndbflU0El6
wvMD0a4j/XJz4cJwwLGCqtoY7aLVMNzJTfb2pzVBstFpFx8RikL3xhpU9dTPBp+j
HEg90jrrAb5p/RsUZhdBkyiFJUBnCdE=
-----END CERTIFICATE-----