Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/64b3a245-e044-3703-82bf-1d491c9047b7.roa
File:                     64b3a245-e044-3703-82bf-1d491c9047b7.roa (raw, json)
Hash identifier:          d9dXtXoSozT0FXqyucQCRiHtpE9yGrd20jzdlFk3J/c=
Subject key identifier:   F5:C2:A6:6A:E7:0D:03:86:A1:E1:42:EE:57:37:84:A4:4D:B8:E2:53
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328576D51CC73C042CFC170F28C903B
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/64b3a245-e044-3703-82bf-1d491c9047b7.roa
Signing time:             Thu 19 Mar 2020 11:27:43 +0000
ROA not before:           Tue 20 Nov 2012 05:00:00 +0000
ROA not after:            Wed 22 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        165.225.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:f2:8c:90:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Nov 20 05:00:00 2012 GMT
            Not After : Jun 22 04:00:00 2022 GMT
        Subject: CN=8050aa3e-a280-4cd3-bc4a-bf2b5047fd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:aa:37:16:d4:67:94:a8:a9:1a:bb:f1:24:ba:
                    53:04:6d:3b:52:00:0c:fe:e8:1a:10:4e:7c:53:03:
                    22:8f:c7:f9:7c:6f:04:c5:91:27:bc:52:86:a2:f3:
                    96:8a:23:db:a0:e4:9d:f5:9e:8d:a6:de:c6:78:16:
                    ca:09:98:10:d7:ca:c6:3c:2b:1e:01:3c:3f:68:fc:
                    1f:cd:40:70:f7:78:86:d9:9a:5a:0a:2e:1a:45:d7:
                    de:c3:d4:42:a5:bf:58:f1:e5:5f:45:93:c7:f5:ba:
                    89:36:b2:00:3a:32:e0:87:6b:34:c8:aa:27:b7:ab:
                    17:ca:5d:90:aa:74:e6:64:04:db:8a:a4:57:7a:ad:
                    b5:3a:8e:fe:d7:3e:67:7d:81:2d:f1:ce:53:30:b2:
                    16:bb:7a:99:a3:fe:0d:71:84:4e:0e:40:cf:71:6a:
                    fc:42:74:d6:cd:e6:f7:13:6e:de:59:df:ac:2a:30:
                    6b:3f:de:e2:c7:ea:f4:cf:9f:9c:36:e8:e8:c4:39:
                    2e:e7:72:ac:1e:de:26:90:8e:6e:61:4d:ff:a3:fe:
                    64:61:e8:cc:cd:b4:4c:ef:56:be:3f:52:ca:8a:2e:
                    86:09:87:01:8a:cd:da:25:3f:f4:33:79:b7:e7:e5:
                    e6:14:da:1d:c2:0b:b4:2e:f8:6c:42:0f:86:b8:74:
                    90:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C2:A6:6A:E7:0D:03:86:A1:E1:42:EE:57:37:84:A4:4D:B8:E2:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/64b3a245-e044-3703-82bf-1d491c9047b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:bf:a8:de:50:e5:3e:b9:54:fa:a0:ab:aa:cc:9d:3c:16:c7:
         9f:14:87:17:18:14:fb:db:67:e1:4e:f1:96:06:45:ae:2a:c8:
         83:bc:0b:7d:76:ea:f5:97:f1:8b:fd:54:ac:ee:10:29:ba:7b:
         5f:54:31:2e:ba:63:1f:f5:54:45:b3:a2:e5:91:62:ee:35:d6:
         e3:04:fb:c5:b9:0c:49:e9:5d:1b:cd:a6:f7:ef:9c:01:9c:be:
         38:4c:ab:a6:d8:53:f3:f1:99:d8:13:6f:f4:32:08:d3:bb:47:
         9b:6a:a4:d7:cd:53:d7:74:9f:ff:e6:ac:a6:f7:d3:bf:d6:c2:
         2d:ac:56:bc:a7:c7:56:5f:5e:e3:8b:a7:bb:b7:ca:e0:9d:a3:
         eb:66:be:63:c2:3f:e0:66:70:73:40:97:ab:4e:a7:36:ec:a8:
         f7:9f:ec:37:6d:58:28:bc:5b:99:52:25:6f:39:fd:5a:2f:e9:
         6a:88:e7:57:45:22:3d:f4:65:55:1b:ec:4c:4d:8c:6a:ff:2e:
         8e:36:aa:16:29:9d:fa:71:dc:8f:87:a3:a1:3a:51:79:78:4b:
         3e:66:62:fe:e4:86:3a:3b:03:e3:1b:92:1d:7f:b4:66:cc:b3:
         8e:c0:f7:d9:21:07:64:f1:c1:07:e3:6e:25:cc:f4:2a:78:2e:
         72:06:80:5b
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcPKMkDswCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4MmU0
ODAeFw0xMjExMjAwNTAwMDBaFw0yMjA2MjIwNDAwMDBaMC8xLTArBgNVBAMTJDgw
NTBhYTNlLWEyODAtNGNkMy1iYzRhLWJmMmI1MDQ3ZmQ0MTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMuqNxbUZ5SoqRq78SS6UwRtO1IADP7oGhBOfFMD
Io/H+XxvBMWRJ7xShqLzlooj26DknfWejabexngWygmYENfKxjwrHgE8P2j8H81A
cPd4htmaWgouGkXX3sPUQqW/WPHlX0WTx/W6iTayADoy4IdrNMiqJ7erF8pdkKp0
5mQE24qkV3qttTqO/tc+Z32BLfHOUzCyFrt6maP+DXGETg5Az3Fq/EJ01s3m9xNu
3lnfrCowaz/e4sfq9M+fnDbo6MQ5LudyrB7eJpCObmFN/6P+ZGHozM20TO9Wvj9S
yoouhgmHAYrN2iU/9DN5t+fl5hTaHcILtC74bEIPhrh0kMECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBT1wqZq5w0DhqHhQu5XN4SkTbjiUzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFl
ODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1ZjgyZTQ4LzY0YjNhMjQ1LWUwNDQtMzcw
My04MmJmLTFkNDkxYzkwNDdiNy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlm
LTJmY2JhNWY4MmU0OC8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJl
NDguY3JsMB8GA1UdIwQYMBaAFAK+G3nvJRAwsXLUDTpSxpVZ61+iMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1
ZjgyZTQ4LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKXhZDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEACL+o3lDlPrlU+qCrqsydPBbHnxSHFxgU+9tn4U7xlgZFrirIg7wLfXbq9Zfx
i/1UrO4QKbp7X1QxLrpjH/VURbOi5ZFi7jXW4wT7xbkMSeldG82m9++cAZy+OEyr
pthT8/GZ2BNv9DII07tHm2qk181T13Sf/+aspvfTv9bCLaxWvKfHVl9e44unu7fK
4J2j62a+Y8I/4GZwc0CXq06nNuyo95/sN21YKLxbmVIlbzn9Wi/paojnV0UiPfRl
VRvsTE2Mav8ujjaqFimd+nHcj4ejoTpReXhLPmZi/uSGOjsD4xuSHX+0ZsyzjsD3
2SEHZPHBB+NuJcz0KngucgaAWw==
-----END CERTIFICATE-----