Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/827ba95e-e655-3eb9-a0ac-0e70df2a8344.roa
File:                     827ba95e-e655-3eb9-a0ac-0e70df2a8344.roa (raw, json)
Hash identifier:          RN7jdY/LZ/3kBXqTijvOIZ3Azi6edR/NUhVW3JNCyIA=
Subject key identifier:   5F:FA:96:4C:AB:64:99:4B:97:76:B9:4A:D1:A3:D8:04:05:08:45:E1
Certificate issuer:       /CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
Certificate serial:       010D0C9F4328583826088858157674670FCD3400
Authority key identifier: 63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/827ba95e-e655-3eb9-a0ac-0e70df2a8344.roa
Signing time:             Tue 01 Dec 2020 05:00:00 +0000
ROA not before:           Tue 01 Dec 2020 05:00:00 +0000
ROA not after:            Wed 08 Mar 2023 05:00:00 +0000
asID:                     135356
IP address blocks:        104.171.238.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:26:08:88:58:15:76:74:67:0f:cd:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
        Validity
            Not Before: Dec  1 05:00:00 2020 GMT
            Not After : Mar  8 05:00:00 2023 GMT
        Subject: CN=4fd95ed5-6ae9-407f-8f5a-531e2f6a8e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:45:27:b2:57:4b:88:c7:61:4b:62:a5:ba:e3:
                    d9:f7:73:2c:5e:c7:5a:e9:b5:c7:c8:ad:8d:7a:49:
                    05:e3:ca:b3:24:83:02:3e:3f:45:90:53:55:6c:e1:
                    a4:76:34:19:93:13:ab:01:db:09:b7:e9:6e:f8:4e:
                    4c:0a:e2:3b:24:5d:2f:28:96:c1:1a:34:8e:de:c0:
                    09:d1:80:fd:84:34:a1:ec:ae:c9:25:88:a6:f4:3c:
                    6a:c8:d7:2c:01:ac:36:bb:17:c7:93:21:cb:93:d4:
                    a0:53:1d:36:f9:d0:a4:9a:dd:cf:cd:85:49:ef:76:
                    9c:eb:16:36:5f:4e:1c:81:89:72:19:6a:94:4e:11:
                    df:6e:83:a5:47:52:06:db:ce:52:3a:da:90:56:29:
                    01:dd:2c:d3:bb:9e:39:d0:71:98:12:54:28:34:05:
                    19:37:c0:05:61:6d:87:06:a4:05:ee:dc:17:b6:48:
                    ee:ce:c0:99:d8:8e:ee:eb:db:99:0a:09:72:eb:ea:
                    cc:dc:3b:ab:65:e8:61:95:4c:ea:b7:00:cc:7b:1e:
                    58:b3:30:2f:a7:d1:40:ac:2e:61:01:85:46:f8:a3:
                    ed:19:b1:f7:79:36:69:37:59:82:a9:e9:14:62:1c:
                    76:6d:f0:fc:26:09:c9:43:20:33:4b:28:14:bb:b3:
                    39:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FA:96:4C:AB:64:99:4B:97:76:B9:4A:D1:A3:D8:04:05:08:45:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/827ba95e-e655-3eb9-a0ac-0e70df2a8344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl

            X509v3 Authority Key Identifier:
                keyid:63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e5:ea:3d:11:81:0b:8d:2e:da:58:e1:b9:ef:4b:67:4a:ed:
         56:00:b5:ab:88:86:d8:63:89:b8:aa:b9:a9:b1:67:8f:72:48:
         f1:5b:b1:b3:24:1b:a7:7e:9e:3b:62:b9:e7:39:8b:d4:68:c9:
         9d:21:74:62:e4:26:46:d6:a5:95:05:88:b6:d7:04:76:54:2c:
         98:6d:b4:0b:09:08:ce:54:47:88:89:e4:d5:3f:cd:27:55:43:
         a1:a3:e1:88:8d:dd:4f:b2:b4:b5:27:5e:d1:95:f3:c4:dc:1a:
         af:9a:30:c5:49:bb:2d:82:f0:67:74:27:fd:8d:db:a5:61:b2:
         42:14:e3:2e:e0:f4:94:f5:b5:28:3a:6e:0e:ea:ca:42:3f:73:
         d4:45:49:14:1b:92:35:2d:75:77:e9:be:74:e8:2e:58:3e:81:
         e6:ca:eb:e9:62:2c:86:80:46:0d:72:2a:39:4b:ab:d4:51:6a:
         48:18:6d:e0:13:8c:36:9d:2a:d5:8c:2c:ad:12:52:23:5a:c7:
         7d:07:b4:b1:22:41:d9:8a:ce:54:7a:5b:d3:99:3a:bf:e1:fc:
         3f:8a:f1:ea:93:6a:9f:31:d9:db:e9:8a:87:c3:cb:45:a5:25:
         d4:ed:2d:dc:2d:db:80:f2:df:5e:29:08:69:1d:42:cc:95:87:
         4f:9b:b8:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDgmCIhYFXZ0Zw/NNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNjNTIwZDQtY2I4Yi00MjRlLTg2MmEtM2FiZGZiZWRj
ZmM4MB4XDTIwMTIwMTA1MDAwMFoXDTIzMDMwODA1MDAwMFowLzEtMCsGA1UEAxMk
NGZkOTVlZDUtNmFlOS00MDdmLThmNWEtNTMxZTJmNmE4ZTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUUnsldLiMdhS2KluuPZ93MsXsda6bXHyK2N
ekkF48qzJIMCPj9FkFNVbOGkdjQZkxOrAdsJt+lu+E5MCuI7JF0vKJbBGjSO3sAJ
0YD9hDSh7K7JJYim9DxqyNcsAaw2uxfHkyHLk9SgUx02+dCkmt3PzYVJ73ac6xY2
X04cgYlyGWqUThHfboOlR1IG285SOtqQVikB3SzTu5450HGYElQoNAUZN8AFYW2H
BqQF7twXtkjuzsCZ2I7u69uZCgly6+rM3DurZehhlUzqtwDMex5YszAvp9FArC5h
AYVG+KPtGbH3eTZpN1mCqekUYhx2bfD8JgnJQyAzSygUu7M5LwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/6lkyrZJlLl3a5StGj2AQFCEXhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hM2M1
MjBkNC1jYjhiLTQyNGUtODYyYS0zYWJkZmJlZGNmYzgvODI3YmE5NWUtZTY1NS0z
ZWI5LWEwYWMtMGU3MGRmMmE4MzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTNjNTIwZDQtY2I4Yi00MjRlLTg2
MmEtM2FiZGZiZWRjZmM4L2EzYzUyMGQ0LWNiOGItNDI0ZS04NjJhLTNhYmRmYmVk
Y2ZjOC5jcmwwHwYDVR0jBBgwFoAUY5xIHmNNXy4MTNbF1zAEHBLhnLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hM2M1MjBkNC1jYjhiLTQyNGUtODYyYS0zYWJk
ZmJlZGNmYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKvuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPl6j0RgQuNLtpY4bnvS2dK7VYAtauIhthjibiquamxZ49ySPFbsbMk
G6d+njtiuec5i9RoyZ0hdGLkJkbWpZUFiLbXBHZULJhttAsJCM5UR4iJ5NU/zSdV
Q6Gj4YiN3U+ytLUnXtGV88TcGq+aMMVJuy2C8Gd0J/2N26VhskIU4y7g9JT1tSg6
bg7qykI/c9RFSRQbkjUtdXfpvnToLlg+gebK6+liLIaARg1yKjlLq9RRakgYbeAT
jDadKtWMLK0SUiNax30HtLEiQdmKzlR6W9OZOr/h/D+K8eqTap8x2dvpiofDy0Wl
JdTtLdwt24Dy314pCGkdQsyVh0+buKo=
-----END CERTIFICATE-----