Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a980adac-7133-31e1-81ae-c04f13e622d5.roa
File:                     a980adac-7133-31e1-81ae-c04f13e622d5.roa (raw, json)
Hash identifier:          OT40ZeMzrPHJoI7sELasVeglvHxRW7im7amgjmSOhqA=
Subject key identifier:   85:E8:35:33:9E:BA:A6:F4:92:E9:B1:DB:87:DB:AF:5E:67:0B:53:05
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA6680AAB8E39D718778A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a980adac-7133-31e1-81ae-c04f13e622d5.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     53459
IP address blocks:        72.52.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:68:0a:ab:8e:39:d7:18:77:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=8832f0a2-8f19-4def-b6e7-3734f8c5e714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:47:8b:df:5f:e5:d7:f2:7d:f1:6b:b4:97:
                    93:78:03:f8:0b:02:9c:ab:28:e7:46:bd:31:74:a1:
                    9e:14:1b:44:7c:b1:49:5d:6e:66:7a:2e:32:97:33:
                    ea:43:e5:84:f7:c5:21:ad:62:70:6a:5d:18:90:47:
                    13:2c:1d:ad:70:79:b3:19:2e:96:e8:bf:e8:d5:43:
                    68:1f:f5:6b:4a:ee:7e:40:2b:48:9b:d8:43:4e:bb:
                    47:68:dd:7a:9a:6a:37:24:0d:11:08:2e:06:d4:7e:
                    8a:a6:7e:fa:03:f3:4b:39:22:e9:90:82:b6:78:21:
                    22:24:dd:70:cd:79:6c:a3:6b:44:c5:bf:cb:a5:e1:
                    ea:f4:b6:8b:2e:8a:a1:50:9a:08:ea:75:97:e4:03:
                    a2:5b:44:c2:50:6c:1a:24:aa:9b:05:66:08:35:91:
                    33:74:df:b8:d3:5c:ed:f4:d6:05:c6:88:08:61:0c:
                    81:40:e4:3c:c1:20:9b:ec:b2:1f:7d:e9:84:f4:1f:
                    3c:4c:a9:8a:0b:fd:d3:34:8e:81:b9:43:24:68:12:
                    84:a4:b1:a9:a8:19:03:2c:e4:26:19:b6:32:be:99:
                    d5:ee:3d:de:b8:18:66:6c:e2:d1:6d:24:ea:f4:17:
                    48:3e:13:16:d8:64:77:3a:2e:a0:05:f5:82:51:27:
                    1c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E8:35:33:9E:BA:A6:F4:92:E9:B1:DB:87:DB:AF:5E:67:0B:53:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a980adac-7133-31e1-81ae-c04f13e622d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.52.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:42:32:82:62:9d:0c:33:fa:04:fb:fa:75:e1:40:b3:11:2f:
         83:92:fa:89:25:25:10:98:7b:71:6a:09:18:d2:77:54:e2:bb:
         94:43:fa:60:69:d6:db:39:a7:88:1d:b9:c6:cb:1f:c7:f0:08:
         ad:d6:2e:c6:57:27:d8:be:12:19:af:6d:65:65:4f:b8:7e:a4:
         32:96:ed:c5:be:bd:3f:82:a8:ff:46:c6:94:b6:38:fe:08:8a:
         03:e3:c5:dd:63:65:8d:27:a4:b1:0d:92:21:9a:5b:7e:bd:89:
         b1:0f:45:a7:3a:2e:ee:03:d8:13:d4:19:cd:fe:95:d9:61:58:
         e8:2f:e4:3f:16:d1:a9:a0:39:cd:91:7e:d0:08:5b:e4:af:d1:
         7d:2b:4d:d2:14:ff:02:f5:2f:f9:01:b3:f0:7e:28:43:03:59:
         8a:16:4d:b8:20:d8:b1:89:78:57:b3:20:64:ff:35:b0:1d:0c:
         ec:76:18:ce:1d:09:8c:ad:15:ac:72:8c:8d:f1:f1:e5:07:aa:
         3c:ec:14:55:e9:f7:a0:44:04:f0:8f:c0:ae:ee:4c:33:ab:01:
         27:a1:0a:4b:80:41:23:28:e5:b4:73:08:1c:ef:e7:a2:e0:40:
         3a:31:a4:92:6a:f7:8b:06:c3:f8:0d:c6:92:f5:39:bd:8a:8f:
         92:e4:be:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDv9pmgKq4451xh3ioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
ODgzMmYwYTItOGYxOS00ZGVmLWI2ZTctMzczNGY4YzVlNzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKRHi99f5dfyffFrtJeTeAP4CwKcqyjnRr0x
dKGeFBtEfLFJXW5mei4ylzPqQ+WE98UhrWJwal0YkEcTLB2tcHmzGS6W6L/o1UNo
H/VrSu5+QCtIm9hDTrtHaN16mmo3JA0RCC4G1H6Kpn76A/NLOSLpkIK2eCEiJN1w
zXlso2tExb/LpeHq9LaLLoqhUJoI6nWX5AOiW0TCUGwaJKqbBWYINZEzdN+401zt
9NYFxogIYQyBQOQ8wSCb7LIffemE9B88TKmKC/3TNI6BuUMkaBKEpLGpqBkDLOQm
GbYyvpnV7j3euBhmbOLRbSTq9BdIPhMW2GR3Oi6gBfWCUSccEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIXoNTOeuqb0kumx24fbr15nC1MFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTk4MGFkYWMtNzEzMy0z
MWUxLTgxYWUtYzA0ZjEzZTYyMmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDRHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMdCMoJinQwz+gT7+nXhQLMRL4OS+oklJRCYe3FqCRjSd1Tiu5RD+mBp
1ts5p4gducbLH8fwCK3WLsZXJ9i+EhmvbWVlT7h+pDKW7cW+vT+CqP9GxpS2OP4I
igPjxd1jZY0npLENkiGaW369ibEPRac6Lu4D2BPUGc3+ldlhWOgv5D8W0amgOc2R
ftAIW+Sv0X0rTdIU/wL1L/kBs/B+KEMDWYoWTbgg2LGJeFezIGT/NbAdDOx2GM4d
CYytFaxyjI3x8eUHqjzsFFXp96BEBPCPwK7uTDOrASehCkuAQSMo5bRzCBzv56Lg
QDoxpJJq94sGw/gNxpL1Ob2Kj5Lkvtg=
-----END CERTIFICATE-----