Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f482f48-4d3c-34ec-9ca5-5ccd968e57f5.roa
File:                     1f482f48-4d3c-34ec-9ca5-5ccd968e57f5.roa (raw, json)
Hash identifier:          K5QLbZc3Wfj1i/9AIngsfvVgc/ckSPzJNy+DrxTjGao=
Subject key identifier:   18:95:E5:89:4B:72:F3:53:BA:94:46:BA:8F:6D:CD:E3:84:BE:25:02
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA6E3A96FA13F5AE15DF180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f482f48-4d3c-34ec-9ca5-5ccd968e57f5.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     54288
IP address blocks:        66.160.156.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:e3:a9:6f:a1:3f:5a:e1:5d:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=decc7789-415a-41a9-ad5f-3284a02704a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:12:0a:42:96:e7:97:ec:d7:d9:81:23:fe:
                    6e:b2:5f:5b:dc:77:20:ae:5a:b6:54:39:c0:8d:c7:
                    d6:49:d0:7d:64:96:03:ed:2f:8a:c4:a1:d6:2f:24:
                    5e:f8:a6:de:9e:b4:fd:54:8b:27:82:3a:c4:6a:8c:
                    01:43:9b:9c:9a:78:61:75:1d:af:91:3b:df:51:61:
                    5a:65:60:35:9c:85:26:be:94:b7:4f:3f:70:8c:f8:
                    68:d4:c3:19:f6:6f:f6:c6:19:86:05:ce:09:43:da:
                    0c:c2:9b:c2:cb:3f:8d:4a:ec:8d:02:54:f8:61:b3:
                    1e:02:e0:9e:35:18:0c:b3:88:9f:41:0c:6f:1d:ea:
                    97:63:64:6f:52:8b:99:5f:34:46:ca:8b:6a:d6:51:
                    88:bd:c3:ee:77:b3:f4:67:35:05:55:cd:0d:80:51:
                    ea:f2:30:fa:d5:bc:07:25:0c:b1:3e:8d:44:72:84:
                    db:06:4a:c2:9f:5b:36:94:db:0c:82:73:a1:0f:dd:
                    c1:62:c4:5f:e9:7d:8f:4d:c0:37:93:f7:03:9d:e6:
                    6b:62:98:f9:3b:f1:29:3e:02:a1:57:14:27:ec:47:
                    d7:67:0c:66:e5:50:b3:8f:0d:09:6d:81:26:ee:6d:
                    7c:cd:59:98:0e:89:29:00:7b:49:e8:65:13:7a:98:
                    b9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:95:E5:89:4B:72:F3:53:BA:94:46:BA:8F:6D:CD:E3:84:BE:25:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f482f48-4d3c-34ec-9ca5-5ccd968e57f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:8a:5e:3a:4b:6e:9d:c9:37:ec:da:be:70:60:29:7b:1d:85:
         80:a9:c5:05:21:7e:fc:15:be:f0:8f:9a:2a:56:1b:13:c7:1c:
         47:36:24:88:18:4d:57:db:8d:65:2f:21:5a:13:fd:d6:16:63:
         eb:0f:ed:06:e3:ca:52:ef:b1:2e:e3:9f:54:a8:c5:76:af:d5:
         86:27:16:7d:f3:af:00:ac:0e:c6:5c:cc:40:fa:87:d4:df:1c:
         d5:3a:28:0e:2b:eb:ec:26:23:c3:29:0e:23:e7:1e:82:42:4f:
         a0:cd:54:d3:e1:42:01:11:f7:d7:7c:b7:8c:1a:1e:09:5c:b2:
         37:fe:96:02:5d:cd:28:99:ab:84:92:c1:54:03:62:02:c5:3c:
         92:3f:cd:68:f9:fd:de:77:f7:53:9c:c6:f6:90:be:b4:5d:73:
         eb:4e:48:d1:21:ad:56:a2:55:9e:f6:20:f7:f2:b6:7a:32:a9:
         d6:2d:38:05:d0:84:10:f4:5d:aa:82:b5:f0:e8:d5:11:04:25:
         4c:ca:0a:12:2b:16:9c:28:20:08:97:2c:a6:bb:70:7b:34:e7:
         c2:f6:36:19:e2:2c:2e:ea:7f:d3:ca:42:0e:f1:6c:cb:38:36:
         cc:b1:09:2a:e7:e5:67:32:2b:a6:c6:3b:95:00:c9:1c:63:d8:
         38:29:60:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDv9puOpb6E/WuFd8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZGVjYzc3ODktNDE1YS00MWE5LWFkNWYtMzI4NGEwMjcwNGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsQSCkKW55fs19mBI/5usl9b3Hcgrlq2VDnA
jcfWSdB9ZJYD7S+KxKHWLyRe+KbenrT9VIsngjrEaowBQ5ucmnhhdR2vkTvfUWFa
ZWA1nIUmvpS3Tz9wjPho1MMZ9m/2xhmGBc4JQ9oMwpvCyz+NSuyNAlT4YbMeAuCe
NRgMs4ifQQxvHeqXY2RvUouZXzRGyotq1lGIvcPud7P0ZzUFVc0NgFHq8jD61bwH
JQyxPo1EcoTbBkrCn1s2lNsMgnOhD93BYsRf6X2PTcA3k/cDneZrYpj5O/EpPgKh
VxQn7EfXZwxm5VCzjw0JbYEm7m18zVmYDokpAHtJ6GUTepi5ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBiV5YlLcvNTupRGuo9tzeOEviUCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWY0ODJmNDgtNGQzYy0z
NGVjLTljYTUtNWNjZDk2OGU1N2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqCcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGyKXjpLbp3JN+zavnBgKXsdhYCpxQUhfvwVvvCPmipWGxPHHEc2JIgY
TVfbjWUvIVoT/dYWY+sP7QbjylLvsS7jn1SoxXav1YYnFn3zrwCsDsZczED6h9Tf
HNU6KA4r6+wmI8MpDiPnHoJCT6DNVNPhQgER99d8t4waHglcsjf+lgJdzSiZq4SS
wVQDYgLFPJI/zWj5/d5391OcxvaQvrRdc+tOSNEhrVaiVZ72IPfytnoyqdYtOAXQ
hBD0XaqCtfDo1REEJUzKChIrFpwoIAiXLKa7cHs058L2NhniLC7qf9PKQg7xbMs4
NsyxCSrn5WcyK6bGO5UAyRxj2DgpYN8=
-----END CERTIFICATE-----