Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/12128c61-6432-3af3-a6a0-3c6cc969fe29.roa
File:                     12128c61-6432-3af3-a6a0-3c6cc969fe29.roa (raw, json)
Hash identifier:          cJ3tEM6r7bcc5hlhobRdWO3vF2bfHT88rZvKGnmx52Q=
Subject key identifier:   DD:0D:B3:E4:76:13:71:66:8F:69:0A:7C:38:F2:FB:B2:CC:8A:5A:92
Certificate issuer:       /CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Certificate serial:       010D0C9F4328583CBE8BAC34FF52C8B53BE9E880
Authority key identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/12128c61-6432-3af3-a6a0-3c6cc969fe29.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Wed 25 Jan 2023 05:00:00 +0000
asID:                     5728
IP address blocks:        199.37.180.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:be:8b:ac:34:ff:52:c8:b5:3b:e9:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Jan 25 05:00:00 2023 GMT
        Subject: CN=28cd7279-80bd-4765-8f2a-4083df534827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3f:87:fc:0e:50:32:0e:75:4c:75:e2:f7:22:
                    c6:3b:97:91:8a:db:66:87:52:12:3f:5e:f7:a3:7c:
                    a1:85:3f:0a:c8:4d:b3:c4:8b:c0:e6:07:18:23:1d:
                    72:26:3c:15:81:18:20:c1:f1:5f:04:35:6d:63:d6:
                    a9:93:de:e0:59:32:b0:15:90:ac:80:b9:3b:80:83:
                    14:a4:86:27:5b:5a:ef:2c:cd:04:36:4a:5f:fe:42:
                    d9:11:45:d6:fc:de:71:ac:a3:6c:03:24:2e:c9:3a:
                    cd:2e:69:8c:8b:75:97:76:f5:de:9d:76:55:6c:9e:
                    2d:9e:05:71:65:a7:b0:ac:7c:6c:0d:ea:9d:8f:66:
                    70:fc:5f:4d:93:c2:31:b5:0a:6d:f6:5b:9e:b3:f1:
                    94:6d:9c:11:f5:36:13:fd:35:f2:b0:83:f6:83:6e:
                    04:2c:50:72:9e:e7:a6:ed:67:de:29:ea:38:30:36:
                    af:81:76:5a:cd:12:40:95:47:67:26:17:c1:9b:9c:
                    03:25:9d:df:f1:ea:81:9c:b3:f2:65:ec:a4:c3:16:
                    78:9d:5e:b1:99:0f:74:6f:fc:50:15:ab:5c:e7:93:
                    f5:f3:74:b2:67:81:95:5e:6e:38:99:e0:96:63:54:
                    cb:a3:07:15:ae:0c:16:eb:14:06:7d:f4:5a:0d:28:
                    85:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0D:B3:E4:76:13:71:66:8F:69:0A:7C:38:F2:FB:B2:CC:8A:5A:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/12128c61-6432-3af3-a6a0-3c6cc969fe29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl

            X509v3 Authority Key Identifier:
                keyid:FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.37.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:9f:26:31:d0:dc:15:b2:a7:39:97:f1:7f:1f:43:a9:35:41:
         78:86:eb:cd:fb:49:50:34:33:1d:29:91:d1:cf:96:ad:d9:38:
         52:45:3e:a0:46:47:6f:fa:1a:e9:08:72:a3:a3:6d:c7:ac:f4:
         b1:8f:ae:8f:a2:20:f0:fd:3c:cf:9a:46:43:42:e9:62:41:ed:
         70:c6:93:ff:bb:16:b2:97:31:64:68:9c:01:70:81:9f:f5:ec:
         83:34:e2:a2:2b:56:45:64:43:fa:f4:7c:1b:35:69:b4:c1:75:
         b3:75:b1:b4:9e:47:0b:39:39:78:34:5a:99:5a:50:0f:49:95:
         6b:42:93:4b:c9:47:60:93:74:93:b4:b9:a3:bd:2d:2f:9b:6a:
         eb:0a:b5:d2:73:3c:27:cb:dc:f5:17:b5:6b:56:9f:f3:2d:87:
         a8:1f:ab:90:90:be:ec:07:18:44:d1:cb:fd:1c:f2:b3:15:4b:
         ec:41:61:9a:76:38:23:d3:9c:b0:a0:a4:4d:43:84:26:02:42:
         40:a5:fa:80:0a:10:56:6c:90:96:42:c1:84:de:ad:3e:b9:a2:
         9e:9a:df:f5:dd:30:d1:0a:25:6e:30:e1:2c:61:0a:c6:1c:24:
         21:3f:ac:18:a8:79:01:99:7e:a7:78:b7:01:8b:44:f8:b7:3c:
         2c:3b:a6:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDy+i6w0/1LItTvp6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWJkYWFiNWQtOGNjNC00YWQ4LWE3YzQtYTM2YzY0ODhk
MTYyMB4XDTIyMDEyODA1MDAwMFoXDTIzMDEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
MjhjZDcyNzktODBiZC00NzY1LThmMmEtNDA4M2RmNTM0ODI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D+H/A5QMg51THXi9yLGO5eRittmh1ISP173
o3yhhT8KyE2zxIvA5gcYIx1yJjwVgRggwfFfBDVtY9apk97gWTKwFZCsgLk7gIMU
pIYnW1rvLM0ENkpf/kLZEUXW/N5xrKNsAyQuyTrNLmmMi3WXdvXenXZVbJ4tngVx
ZaewrHxsDeqdj2Zw/F9Nk8IxtQpt9lues/GUbZwR9TYT/TXysIP2g24ELFBynuem
7WfeKeo4MDavgXZazRJAlUdnJhfBm5wDJZ3f8eqBnLPyZeykwxZ4nV6xmQ90b/xQ
Fatc55P183SyZ4GVXm44meCWY1TLowcVrgwW6xQGffRaDSiFrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN0Ns+R2E3Fmj2kKfDjy+7LMilqSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmRh
YWI1ZC04Y2M0LTRhZDgtYTdjNC1hMzZjNjQ4OGQxNjIvMTIxMjhjNjEtNjQzMi0z
YWYzLWE2YTAtM2M2Y2M5NjlmZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWJkYWFiNWQtOGNjNC00YWQ4LWE3
YzQtYTM2YzY0ODhkMTYyLzFiZGFhYjVkLThjYzQtNGFkOC1hN2M0LWEzNmM2NDg4
ZDE2Mi5jcmwwHwYDVR0jBBgwFoAU/mUxLRIfo7qCgfXHsKzPHcvwB7cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmRhYWI1ZC04Y2M0LTRhZDgtYTdjNC1hMzZj
NjQ4OGQxNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyW0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2fJjHQ3BWypzmX8X8fQ6k1QXiG6837SVA0Mx0pkdHPlq3ZOFJFPqBG
R2/6GukIcqOjbces9LGPro+iIPD9PM+aRkNC6WJB7XDGk/+7FrKXMWRonAFwgZ/1
7IM04qIrVkVkQ/r0fBs1abTBdbN1sbSeRws5OXg0WplaUA9JlWtCk0vJR2CTdJO0
uaO9LS+bausKtdJzPCfL3PUXtWtWn/Mth6gfq5CQvuwHGETRy/0c8rMVS+xBYZp2
OCPTnLCgpE1DhCYCQkCl+oAKEFZskJZCwYTerT65op6a3/XdMNEKJW4w4SxhCsYc
JCE/rBioeQGZfqd4twGLRPi3PCw7ptM=
-----END CERTIFICATE-----