Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/b3bc0f19-a2d4-350b-bb53-ebfc266eda2d.roa
File:                     b3bc0f19-a2d4-350b-bb53-ebfc266eda2d.roa (raw, json)
Hash identifier:          zetOBILUDhO2ueR3MPE9cV12PnBLaCSq5G6nauIx9qU=
Subject key identifier:   60:68:54:54:9E:7F:60:0D:41:52:E5:0D:6C:E3:82:28:84:03:E5:2F
Certificate issuer:       /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Certificate serial:       010D0C9F4328576D51CC73C042CFC171BD6C29D7
Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/b3bc0f19-a2d4-350b-bb53-ebfc266eda2d.roa
Signing time:             Mon 27 Apr 2020 20:55:14 +0000
ROA not before:           Tue 10 Sep 2019 04:00:00 +0000
ROA not after:            Sun 31 Jul 2022 04:00:00 +0000
asID:                     7057
IP address blocks:        216.252.208.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:bd:6c:29:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
        Validity
            Not Before: Sep 10 04:00:00 2019 GMT
            Not After : Jul 31 04:00:00 2022 GMT
        Subject: CN=27dfbabd-26cc-4bd2-998c-d71b4f9dc666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:1e:b7:54:b7:64:f9:ab:de:85:e8:20:c2:
                    92:73:25:61:fe:01:fa:da:31:b5:cf:7d:18:f3:53:
                    e4:5b:29:4d:ca:27:82:02:ff:bb:72:52:6e:07:42:
                    14:9b:f5:f9:12:de:79:67:e1:20:f5:55:67:09:d7:
                    ae:2c:4e:b7:af:7c:75:08:cc:3a:34:79:ff:3d:92:
                    c8:1c:17:a9:d6:65:5e:3e:20:a2:23:6b:5b:75:c7:
                    40:fa:48:54:46:4c:4a:87:15:3a:41:0f:43:66:3b:
                    1a:42:1b:e4:41:a1:ff:ee:c8:f9:cd:9e:33:d6:2f:
                    dc:5c:42:61:da:de:31:c1:40:b7:eb:a4:b4:0e:96:
                    05:24:d3:fd:5c:04:27:20:76:25:95:a9:cc:f2:22:
                    bb:a2:9a:25:4c:a5:55:aa:c2:29:23:0b:84:a0:36:
                    f8:42:99:30:e7:b5:0f:73:d6:e5:93:b4:55:fe:f5:
                    50:52:a2:96:45:7e:e2:ac:b6:88:a7:a3:eb:0a:8e:
                    dc:2d:cf:16:51:c4:bb:e8:61:bb:4f:42:d2:80:de:
                    ec:f5:04:95:0c:3d:7e:cf:aa:2b:29:b2:b6:e6:d1:
                    43:8b:9c:1f:e0:3c:e0:fe:77:22:d5:77:76:6e:ac:
                    a5:c8:32:cb:a2:5a:09:62:24:df:d5:88:2f:53:88:
                    d5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:68:54:54:9E:7F:60:0D:41:52:E5:0D:6C:E3:82:28:84:03:E5:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/b3bc0f19-a2d4-350b-bb53-ebfc266eda2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl

            X509v3 Authority Key Identifier:
                keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:40:a6:0a:0b:73:b2:cd:0a:99:54:49:a1:53:cc:76:51:19:
         49:00:73:35:65:d4:15:ae:e5:ee:d3:99:8a:46:5d:56:be:11:
         2a:50:6e:2f:8a:73:1a:00:52:2c:6a:9a:cc:be:46:17:3f:6c:
         ff:fa:7a:d7:e8:00:59:18:f6:7e:8c:f6:b0:16:de:4d:d5:c9:
         7f:05:c4:57:9a:5c:39:f0:7c:24:58:a5:90:aa:49:88:fa:77:
         6f:f7:7e:25:bf:24:15:ba:15:a4:76:f8:42:5b:01:90:42:13:
         d3:f2:08:80:ca:05:2e:43:a2:e3:7f:e6:28:60:d0:56:65:ef:
         5b:75:da:26:11:84:54:d4:bd:7d:f3:ea:50:eb:0b:7c:05:73:
         7d:d0:33:b4:0f:08:d0:db:97:08:cf:05:d7:1e:f7:a8:c8:05:
         0e:72:1b:0e:ea:25:e7:35:77:39:9d:23:d7:53:d6:84:48:a8:
         98:9d:c7:90:f4:99:14:47:d1:3c:e3:4f:8e:f9:66:bd:cb:88:
         a7:46:fd:28:95:6a:6b:da:97:dd:d5:68:2f:c7:9d:6d:55:66:
         3f:9b:e1:19:19:a9:6b:d6:cc:67:f8:74:07:cc:c2:90:95:aa:
         bf:9e:28:25:41:dc:c7:b4:44:62:32:73:91:4b:3e:c0:23:a6:
         1d:be:ac:87
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcb1sKdcwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0LTg0MzFkYzkyMzlj
ODAeFw0xOTA5MTAwNDAwMDBaFw0yMjA3MzEwNDAwMDBaMC8xLTArBgNVBAMTJDI3
ZGZiYWJkLTI2Y2MtNGJkMi05OThjLWQ3MWI0ZjlkYzY2NjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJy5HrdUt2T5q96F6CDCknMlYf4B+toxtc99GPNT
5FspTconggL/u3JSbgdCFJv1+RLeeWfhIPVVZwnXrixOt698dQjMOjR5/z2SyBwX
qdZlXj4goiNrW3XHQPpIVEZMSocVOkEPQ2Y7GkIb5EGh/+7I+c2eM9Yv3FxCYdre
McFAt+uktA6WBSTT/VwEJyB2JZWpzPIiu6KaJUylVarCKSMLhKA2+EKZMOe1D3PW
5ZO0Vf71UFKilkV+4qy2iKej6wqO3C3PFlHEu+hhu09C0oDe7PUElQw9fs+qKymy
tubRQ4ucH+A84P53ItV3dm6spcgyy6JaCWIk39WIL1OI1b0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRgaFRUnn9gDUFS5Q1s44IohAPlLzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU3YmMy
OGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIzOWM4L2IzYmMwZjE5LWEyZDQtMzUw
Yi1iYjUzLWViZmMyNjZlZGEyZC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0
LTg0MzFkYzkyMzljOC8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5
YzguY3JsMB8GA1UdIwQYMBaAFE9oRgjswPw1nF1NcXfrydDKgRtUMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRj
OTIzOWM4LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtj80DBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAa0CmCgtzss0KmVRJoVPMdlEZSQBzNWXUFa7l7tOZikZdVr4RKlBuL4pzGgBS
LGqazL5GFz9s//p61+gAWRj2foz2sBbeTdXJfwXEV5pcOfB8JFilkKpJiPp3b/d+
Jb8kFboVpHb4QlsBkEIT0/IIgMoFLkOi43/mKGDQVmXvW3XaJhGEVNS9ffPqUOsL
fAVzfdAztA8I0NuXCM8F1x73qMgFDnIbDuol5zV3OZ0j11PWhEiomJ3HkPSZFEfR
PONPjvlmvcuIp0b9KJVqa9qX3dVoL8edbVVmP5vhGRmpa9bMZ/h0B8zCkJWqv54o
JUHcx7REYjJzkUs+wCOmHb6shw==
-----END CERTIFICATE-----