Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/e81e439d-b3da-37e6-8d48-7d5a33ee7d30.roa
File:                     e81e439d-b3da-37e6-8d48-7d5a33ee7d30.roa (raw, json)
Hash identifier:          fs6wmbWwPDcPHo/3Y9N20GVbBAt25NGcyi63UoAgKNc=
Subject key identifier:   3E:01:D2:3C:77:F5:22:5C:26:9D:53:50:74:CD:0F:79:53:4E:54:B8
Certificate issuer:       /CN=87b2cd91-4c9b-4f87-9a28-f01df0224611
Certificate serial:       010D0C9F4328576D51CC73C042CFC172DC6A2479
Authority key identifier: DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/e81e439d-b3da-37e6-8d48-7d5a33ee7d30.roa
Signing time:             Mon 22 Jun 2020 14:24:03 +0000
ROA not before:           Mon 22 Jun 2020 04:00:00 +0000
ROA not after:            Sun 25 Sep 2022 04:00:00 +0000
asID:                     63318
IP address blocks:        66.85.252.0/23 maxlen: 24
                          2602:ff39::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:dc:6a:24:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b2cd91-4c9b-4f87-9a28-f01df0224611
        Validity
            Not Before: Jun 22 04:00:00 2020 GMT
            Not After : Sep 25 04:00:00 2022 GMT
        Subject: CN=8d8f3b70-4e1f-4672-bf50-fbf989c1452d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:06:65:af:82:4b:a0:fc:53:01:3e:2d:22:1d:
                    b5:51:2b:99:d7:ca:b8:ab:c3:04:0c:dd:a5:fb:08:
                    82:c1:c2:8d:a1:13:21:33:b2:b9:24:0c:00:03:a5:
                    a4:45:ff:af:74:6d:94:af:6c:22:3c:b4:d9:e4:cd:
                    e5:21:79:9d:8f:bc:62:5a:88:32:33:c1:a7:db:3f:
                    4c:b8:86:f8:4b:b4:1e:f7:e4:fc:af:b2:68:c8:9c:
                    c5:a8:b1:bd:72:49:47:4b:e1:2c:16:59:1f:af:59:
                    37:99:bd:83:9e:c2:08:f0:f6:61:25:53:fa:fc:d1:
                    6c:ea:e3:db:35:c8:4c:32:6b:da:09:58:37:78:12:
                    6a:ac:67:a8:69:8a:cc:3c:e2:91:52:bd:ab:f8:c9:
                    22:e0:c2:a2:b2:81:6d:71:d7:87:9c:f5:12:16:b2:
                    c6:e2:a3:55:dc:8d:db:f1:f6:15:3f:a9:2f:e0:e6:
                    71:03:9a:a7:e1:a0:28:cf:b8:f0:05:dd:e4:4a:e0:
                    dd:b0:3a:52:b9:2e:3a:60:4f:51:c6:f7:b6:e8:23:
                    29:98:b7:c9:df:af:3f:51:38:31:80:e6:77:68:f5:
                    cc:0c:69:ed:5c:0a:c7:e9:e4:52:b1:0b:62:39:14:
                    f6:d7:71:8c:75:f4:d0:ba:f2:0b:b0:33:90:16:cb:
                    08:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:01:D2:3C:77:F5:22:5C:26:9D:53:50:74:CD:0F:79:53:4E:54:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/e81e439d-b3da-37e6-8d48-7d5a33ee7d30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl

            X509v3 Authority Key Identifier:
                keyid:DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.252.0/23
                IPv6:
                  2602:ff39::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:14:22:71:1c:10:39:8f:93:c2:ca:ba:8b:36:d3:23:02:70:
         cf:aa:e5:01:98:a8:0f:bb:b2:41:00:80:0d:f2:6f:ed:4e:f8:
         6e:45:eb:06:a7:b5:66:9b:9c:94:2a:9a:a2:da:44:11:28:92:
         9b:9f:b0:db:db:34:06:fa:99:08:2a:3f:62:12:aa:c1:bb:13:
         20:95:6d:19:5b:2c:95:53:4e:a5:c6:eb:0d:41:2c:7d:3e:60:
         9b:2e:b0:10:bb:f0:56:07:61:2c:46:83:07:db:19:5d:f1:cd:
         b1:69:fb:13:86:c0:d9:7f:ba:26:f8:b3:57:b1:5f:fc:42:ef:
         32:36:05:79:b0:5b:1c:0a:37:89:c2:bd:89:a5:70:1d:cf:0d:
         db:92:74:00:f6:12:88:4b:57:36:0a:14:ae:48:e1:7c:e8:a3:
         50:6b:10:c1:bb:ed:48:ce:08:49:1f:06:c8:35:1f:7c:b6:8a:
         38:29:31:84:f9:7d:55:6d:a3:ea:2a:43:0a:cb:78:6c:a1:9f:
         3f:16:a4:18:ce:cd:c4:c1:60:da:9c:1e:75:da:57:e0:74:90:
         50:d9:c9:4f:06:d4:bd:96:b4:f9:68:a3:5f:83:56:a8:de:c6:
         3b:44:42:19:1c:e8:a5:7e:a6:94:27:19:62:1a:47:5e:47:d7:
         ac:78:f8:c0
-----BEGIN CERTIFICATE-----
MIIGTzCCBTmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BctxqJHkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDg3YjJjZDkxLTRjOWItNGY4Ny05YTI4LWYwMWRmMDIyNDYx
MTAeFw0yMDA2MjIwNDAwMDBaFw0yMjA5MjUwNDAwMDBaMC8xLTArBgNVBAMTJDhk
OGYzYjcwLTRlMWYtNDY3Mi1iZjUwLWZiZjk4OWMxNDUyZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAK4GZa+CS6D8UwE+LSIdtVErmdfKuKvDBAzdpfsI
gsHCjaETITOyuSQMAAOlpEX/r3RtlK9sIjy02eTN5SF5nY+8YlqIMjPBp9s/TLiG
+Eu0Hvfk/K+yaMicxaixvXJJR0vhLBZZH69ZN5m9g57CCPD2YSVT+vzRbOrj2zXI
TDJr2glYN3gSaqxnqGmKzDzikVK9q/jJIuDCorKBbXHXh5z1EhayxuKjVdyN2/H2
FT+pL+DmcQOap+GgKM+48AXd5Erg3bA6UrkuOmBPUcb3tugjKZi3yd+vP1E4MYDm
d2j1zAxp7VwKx+nkUrELYjkU9tdxjHX00LryC7AzkBbLCJUCAwEAAaOCA2UwggNh
MB0GA1UdDgQWBBQ+AdI8d/UiXCadU1B0zQ95U05UuDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODdiMmNk
OTEtNGM5Yi00Zjg3LTlhMjgtZjAxZGYwMjI0NjExL2U4MWU0MzlkLWIzZGEtMzdl
Ni04ZDQ4LTdkNWEzM2VlN2QzMC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4Lzg3YjJjZDkxLTRjOWItNGY4Ny05YTI4
LWYwMWRmMDIyNDYxMS84N2IyY2Q5MS00YzliLTRmODctOWEyOC1mMDFkZjAyMjQ2
MTEuY3JsMB8GA1UdIwQYMBaAFN+TPD8yBm57sKjGBv32wuIuBtgsMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvODdiMmNkOTEtNGM5Yi00Zjg3LTlhMjgtZjAxZGYw
MjI0NjExLmNlcjAvBggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEAUJV/DAOBAIA
AjAIAwYEJgL/OQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDALBgkqhkiG9w0BAQsDggEBAGcUInEcEDmPk8LKuos20yMCcM+q5QGYqA+7skEA
gA3yb+1O+G5F6wantWabnJQqmqLaRBEokpufsNvbNAb6mQgqP2ISqsG7EyCVbRlb
LJVTTqXG6w1BLH0+YJsusBC78FYHYSxGgwfbGV3xzbFp+xOGwNl/uib4s1exX/xC
7zI2BXmwWxwKN4nCvYmlcB3PDduSdAD2EohLVzYKFK5I4Xzoo1BrEMG77UjOCEkf
Bsg1H3y2ijgpMYT5fVVto+oqQwrLeGyhnz8WpBjOzcTBYNqcHnXaV+B0kFDZyU8G
1L2WtPloo1+DVqjexjtEQhkc6KV+ppQnGWIaR15H16x4+MA=
-----END CERTIFICATE-----