Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a547b44-c39e-3604-9dce-e3e8b6085ecf.roa
File:                     9a547b44-c39e-3604-9dce-e3e8b6085ecf.roa (raw, json)
Hash identifier:          HOflaGS1StI+sfA3nP/eOR16zK03Im9VTqxmHpqV3s0=
Subject key identifier:   EB:8F:F6:E0:FA:FB:C7:D9:9C:E6:24:8D:48:1B:52:01:61:85:BC:85
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA5D5D6E2FF39D43686F7A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a547b44-c39e-3604-9dce-e3e8b6085ecf.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     11734
IP address blocks:        65.49.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a5:d5:d6:e2:ff:39:d4:36:86:f7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=1fc088fd-48ee-4dcc-9b51-3157b98a12e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:49:0c:db:78:34:95:49:f1:ad:70:12:48:ad:
                    f0:f0:05:eb:42:f3:f0:22:31:7b:de:82:67:40:ab:
                    63:d1:0b:37:9f:40:5e:9c:9a:af:1e:49:fa:99:89:
                    ec:fa:3b:12:14:27:c4:95:e1:c2:e0:28:07:f4:b7:
                    b5:6a:9a:6e:5d:e6:76:64:6b:fd:15:f9:8a:52:0d:
                    f6:b5:2b:0e:f7:3d:55:e5:29:0f:18:16:c8:28:a7:
                    4c:6d:d7:72:49:50:de:a0:83:75:e9:ee:c7:95:76:
                    cc:76:eb:8c:02:d6:f2:28:21:ce:06:8c:fc:37:12:
                    e0:2b:7b:78:c9:91:67:b2:39:44:a4:f9:0b:b2:53:
                    5c:08:ce:39:91:44:b9:ef:a2:8c:32:c7:fd:de:ef:
                    6b:85:57:5c:4f:c1:41:32:31:88:2e:2e:49:c3:25:
                    20:28:e7:16:ad:16:a5:8f:b1:6d:b7:15:26:96:bc:
                    71:59:75:56:63:4a:80:05:f4:fe:32:89:cd:ac:58:
                    e0:cb:b5:3c:8d:37:7a:33:01:fe:72:94:cf:e0:a4:
                    aa:87:b0:04:05:94:c3:27:16:b4:7e:fb:61:8f:4d:
                    a1:c5:96:ef:c2:52:c7:a2:61:e2:56:98:ef:36:b7:
                    68:13:95:2c:c8:59:e4:1f:89:ac:87:1e:cd:b6:c8:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8F:F6:E0:FA:FB:C7:D9:9C:E6:24:8D:48:1B:52:01:61:85:BC:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a547b44-c39e-3604-9dce-e3e8b6085ecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:50:2a:12:a8:2f:ce:14:dd:93:69:23:4c:a6:95:c7:5a:e3:
         c7:e3:6f:0c:90:82:1b:80:01:35:c1:b5:68:0d:cc:dd:aa:7f:
         82:03:c1:8e:9d:c5:5b:37:32:5e:b5:0a:fa:ef:24:74:92:1d:
         60:0b:48:0e:c1:4b:07:7e:a0:b4:53:b7:d2:be:19:fa:32:92:
         62:e9:2e:57:e6:dc:8f:f8:2e:0f:b9:15:d9:75:7e:41:43:19:
         fb:8c:43:38:cb:3e:a7:8e:47:3e:44:3d:97:35:b3:77:74:a7:
         ab:cb:bc:0c:e8:3b:f6:10:cd:7c:69:02:72:86:e0:44:0c:3c:
         3c:27:6c:0e:39:df:d8:f2:b6:e0:67:42:2e:3c:15:22:e5:3d:
         9a:b6:b8:01:88:a1:97:a7:ff:75:24:7c:1c:aa:c1:3b:46:17:
         01:b0:b7:66:09:64:a2:86:0b:02:82:b2:60:c4:88:20:61:82:
         12:05:b4:32:25:3e:8d:55:fb:89:81:25:07:be:8b:a0:c3:34:
         ab:ad:48:ea:78:1d:64:52:0f:5a:00:55:f1:c5:56:b1:28:2f:
         07:50:db:62:3d:c9:57:0c:b4:98:58:ea:6c:3d:32:e8:0b:18:
         f1:1e:23:28:90:a4:d0:d0:1f:ba:e6:74:27:8c:a0:f0:93:5d:
         a7:85:11:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDv9pdXW4v851DaG96AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
MWZjMDg4ZmQtNDhlZS00ZGNjLTliNTEtMzE1N2I5OGExMmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkkM23g0lUnxrXASSK3w8AXrQvPwIjF73oJn
QKtj0Qs3n0BenJqvHkn6mYns+jsSFCfEleHC4CgH9Le1appuXeZ2ZGv9FfmKUg32
tSsO9z1V5SkPGBbIKKdMbddySVDeoIN16e7HlXbMduuMAtbyKCHOBoz8NxLgK3t4
yZFnsjlEpPkLslNcCM45kUS576KMMsf93u9rhVdcT8FBMjGILi5JwyUgKOcWrRal
j7FttxUmlrxxWXVWY0qABfT+MonNrFjgy7U8jTd6MwH+cpTP4KSqh7AEBZTDJxa0
fvthj02hxZbvwlLHomHiVpjvNrdoE5UsyFnkH4mshx7NtshilwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuP9uD6+8fZnOYkjUgbUgFhhbyFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWE1NDdiNDQtYzM5ZS0z
NjA0LTlkY2UtZTNlOGI2MDg1ZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAFQKhKoL84U3ZNpI0ymlcda48fjbwyQghuAATXBtWgNzN2qf4IDwY6d
xVs3Ml61CvrvJHSSHWALSA7BSwd+oLRTt9K+GfoykmLpLlfm3I/4Lg+5Fdl1fkFD
GfuMQzjLPqeORz5EPZc1s3d0p6vLvAzoO/YQzXxpAnKG4EQMPDwnbA4539jytuBn
Qi48FSLlPZq2uAGIoZen/3UkfByqwTtGFwGwt2YJZKKGCwKCsmDEiCBhghIFtDIl
Po1V+4mBJQe+i6DDNKutSOp4HWRSD1oAVfHFVrEoLwdQ22I9yVcMtJhY6mw9MugL
GPEeIyiQpNDQH7rmdCeMoPCTXaeFESM=
-----END CERTIFICATE-----