Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/db132d44-27c8-3fa6-bbbb-df0304fc38eb.roa
File:                     db132d44-27c8-3fa6-bbbb-df0304fc38eb.roa (raw, json)
Hash identifier:          pOOYECBP1LTHW64Tyc2w76MhP2zcDrmQcPcqwZpN/tI=
Subject key identifier:   9F:46:21:A5:42:2D:9E:76:F7:69:68:BD:CF:6F:C2:08:BF:3B:BF:CD
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328576D51CC73C042CFC173EABFA0E8
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/db132d44-27c8-3fa6-bbbb-df0304fc38eb.roa
Signing time:             Mon 22 Jun 2020 04:00:00 +0000
ROA not before:           Mon 22 Jun 2020 04:00:00 +0000
ROA not after:            Wed 16 Nov 2022 05:00:00 +0000
asID:                     55163
IP address blocks:        108.174.3.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:ea:bf:a0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Jun 22 04:00:00 2020 GMT
            Not After : Nov 16 05:00:00 2022 GMT
        Subject: CN=f7e48570-863e-4db8-9b6c-c4aeaa19e3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:2a:04:85:ea:6d:6a:9f:fe:d0:0b:63:0a:
                    41:3d:6e:1b:40:20:c7:bf:19:5b:de:c2:ee:45:30:
                    76:32:6f:49:24:f5:34:7d:90:a0:2a:2d:51:33:93:
                    d3:57:bb:0a:28:b1:ec:24:16:f2:0e:8d:1b:e9:dc:
                    ea:9c:87:83:11:7a:7b:fe:09:01:07:6c:99:d5:c9:
                    16:d3:07:35:76:0e:92:2a:cc:5f:96:03:26:0c:ce:
                    25:18:cf:2a:da:68:aa:12:e9:2e:36:b5:90:97:4d:
                    89:0b:94:59:b8:de:91:f0:07:21:ac:34:3f:4d:d2:
                    f9:8b:d0:82:34:87:b1:07:79:8f:05:96:62:5f:a1:
                    f7:9d:dd:cb:2b:73:f8:67:a3:68:95:0a:bf:0a:2f:
                    4d:0c:ed:2d:85:d0:cf:fe:16:5c:ff:77:f3:8b:67:
                    a9:14:28:a7:e7:50:df:93:a4:9f:3d:43:7b:15:c3:
                    39:06:54:72:6f:d3:57:af:2d:86:02:ac:1b:39:72:
                    41:c3:03:37:9e:24:3a:af:b0:71:be:0f:8b:d6:3c:
                    09:37:53:08:db:f7:a9:ea:f1:21:d5:bb:46:b7:55:
                    38:fd:5c:1a:d0:80:33:5a:96:c4:79:f0:32:e8:de:
                    5b:63:41:70:25:e5:97:2e:e2:65:89:17:47:fa:05:
                    ef:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:46:21:A5:42:2D:9E:76:F7:69:68:BD:CF:6F:C2:08:BF:3B:BF:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/db132d44-27c8-3fa6-bbbb-df0304fc38eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.174.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8a:0d:f0:04:18:d4:76:58:b2:c4:34:d6:79:64:65:d4:19:
         1d:59:e5:bb:d8:ba:df:57:7e:80:72:7a:93:ab:7f:2c:88:98:
         dc:d3:c0:8d:3e:31:72:7f:2b:1e:a6:9c:93:c2:e3:5b:f2:ca:
         77:42:66:ed:85:31:c4:63:58:1a:d4:9f:c6:55:0f:75:a8:af:
         7d:df:d0:5c:06:1c:b5:ba:ed:d6:1b:12:cb:ed:ee:b6:28:51:
         90:12:a0:12:61:27:9a:2d:51:e0:cc:8a:bf:74:9b:80:a4:a2:
         47:2f:a3:62:ba:41:5a:88:40:34:5c:09:8d:8b:93:cd:bf:ca:
         ed:0f:f9:bc:b1:96:54:8e:e9:3b:82:bd:b5:70:f3:52:8c:10:
         5d:03:80:a9:a5:65:30:6b:ee:37:98:24:7b:f7:ac:77:56:04:
         75:5f:01:dd:58:81:6b:c4:be:c3:94:bf:74:ec:ae:4d:83:b2:
         64:38:f6:c6:9f:2c:07:95:6a:7e:d6:d4:80:ac:30:c2:96:68:
         4a:c2:9b:26:6b:e7:3e:3e:5e:5c:bc:b4:19:a4:89:39:64:12:
         f0:fa:22:1b:22:3c:ef:eb:42:d6:35:c8:1e:48:18:50:b3:e9:
         bd:37:77:09:7e:af:6a:03:6f:ea:95:96:d8:e2:be:ca:29:a3:
         6a:12:b6:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc+q/oOgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGU4MDE0MjctNmE0NS00NzBhLTg5OGMtYzZhMmIxYjI3
MzgwMB4XDTIwMDYyMjA0MDAwMFoXDTIyMTExNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZjdlNDg1NzAtODYzZS00ZGI4LTliNmMtYzRhZWFhMTllM2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtocqBIXqbWqf/tALYwpBPW4bQCDHvxlb3sLu
RTB2Mm9JJPU0fZCgKi1RM5PTV7sKKLHsJBbyDo0b6dzqnIeDEXp7/gkBB2yZ1ckW
0wc1dg6SKsxflgMmDM4lGM8q2miqEukuNrWQl02JC5RZuN6R8AchrDQ/TdL5i9CC
NIexB3mPBZZiX6H3nd3LK3P4Z6NolQq/Ci9NDO0thdDP/hZc/3fzi2epFCin51Df
k6SfPUN7FcM5BlRyb9NXry2GAqwbOXJBwwM3niQ6r7Bxvg+L1jwJN1MI2/ep6vEh
1btGt1U4/Vwa0IAzWpbEefAy6N5bY0FwJeWXLuJliRdH+gXv4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ9GIaVCLZ5292lovc9vwgi/O7/NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZTgw
MTQyNy02YTQ1LTQ3MGEtODk4Yy1jNmEyYjFiMjczODAvZGIxMzJkNDQtMjdjOC0z
ZmE2LWJiYmItZGYwMzA0ZmMzOGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGU4MDE0MjctNmE0NS00NzBhLTg5
OGMtYzZhMmIxYjI3MzgwL2RlODAxNDI3LTZhNDUtNDcwYS04OThjLWM2YTJiMWIy
NzM4MC5jcmwwHwYDVR0jBBgwFoAUIeQVrQ52f9WA8jMJ584FENpzaBUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZTgwMTQyNy02YTQ1LTQ3MGEtODk4Yy1jNmEy
YjFiMjczODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbK4DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSKDfAEGNR2WLLENNZ5ZGXUGR1Z5bvYut9XfoByepOrfyyImNzTwI0+
MXJ/Kx6mnJPC41vyyndCZu2FMcRjWBrUn8ZVD3Wor33f0FwGHLW67dYbEsvt7rYo
UZASoBJhJ5otUeDMir90m4Ckokcvo2K6QVqIQDRcCY2Lk82/yu0P+byxllSO6TuC
vbVw81KMEF0DgKmlZTBr7jeYJHv3rHdWBHVfAd1YgWvEvsOUv3Tsrk2DsmQ49saf
LAeVan7W1ICsMMKWaErCmyZr5z4+Xly8tBmkiTlkEvD6IhsiPO/rQtY1yB5IGFCz
6b03dwl+r2oDb+qVltjivsopo2oStgI=
-----END CERTIFICATE-----