Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/48a3c459-e324-3e01-aa8d-4e28d5d0c89e.roa
File:                     48a3c459-e324-3e01-aa8d-4e28d5d0c89e.roa (raw, json)
Hash identifier:          Vw1dSKS7odahS0IyO1FeilJ3gKxoHKoE04FwtbPQgv0=
Subject key identifier:   F2:0E:14:3C:87:36:27:AF:5C:5F:26:A6:AF:56:73:38:00:CE:FB:D1
Certificate issuer:       /CN=2b3c022e-4679-4530-ad3a-1df3041efdd2
Certificate serial:       010D0C9F4328576D51CC73C042CFC15B93DD266A
Authority key identifier: FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/48a3c459-e324-3e01-aa8d-4e28d5d0c89e.roa
Signing time:             Sat 22 Apr 2017 04:13:15 +0000
ROA not before:           Tue 20 Nov 2012 05:00:00 +0000
ROA not after:            Sun 20 Nov 2022 05:00:00 +0000
asID:                     395602
IP address blocks:        63.245.221.0/24 maxlen: 24
                          2620:101:80fc::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:5b:93:dd:26:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b3c022e-4679-4530-ad3a-1df3041efdd2
        Validity
            Not Before: Nov 20 05:00:00 2012 GMT
            Not After : Nov 20 05:00:00 2022 GMT
        Subject: CN=93934019-6a12-4750-9914-db462dfe66f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:b8:52:80:29:2d:c4:a9:13:17:25:27:d1:
                    52:c9:f0:e6:01:c2:41:84:fd:2e:87:e1:e0:4c:20:
                    91:d4:cf:a4:9e:25:0f:88:1d:d2:14:bb:19:09:98:
                    c1:99:2e:79:e4:f6:ec:a1:c5:b9:df:21:c4:d1:57:
                    1a:b0:ae:55:71:68:81:32:22:56:f8:8d:0f:22:ef:
                    db:a4:b0:c8:ba:d0:7b:5e:b3:8b:99:eb:5d:83:28:
                    b5:bf:bc:42:54:3a:07:c3:ba:1c:2b:8f:f7:d4:84:
                    55:06:46:10:51:66:7f:d2:99:77:74:77:40:df:db:
                    88:ac:be:d4:1b:a3:bd:a1:a1:2c:c6:84:5a:34:a3:
                    0a:70:dc:73:05:fa:7f:cb:2a:d3:d3:9d:4e:a8:53:
                    0d:26:6b:27:a8:10:7f:24:0f:68:49:b1:51:94:e4:
                    28:5e:bb:83:bf:75:b6:ee:c3:f9:91:af:82:11:90:
                    e3:22:eb:56:18:72:6c:c0:97:6e:5c:75:3c:c0:44:
                    ed:f8:4a:7e:b9:1f:42:30:f4:5a:ad:03:67:0b:66:
                    6d:2b:17:0d:1d:13:77:60:95:b4:d1:50:ec:0e:c8:
                    ea:3b:5a:84:83:b0:2c:dc:99:1b:e9:60:02:9c:8d:
                    3e:71:31:97:cd:3d:b2:ba:21:0a:d7:f2:ec:8f:d4:
                    73:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0E:14:3C:87:36:27:AF:5C:5F:26:A6:AF:56:73:38:00:CE:FB:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/48a3c459-e324-3e01-aa8d-4e28d5d0c89e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/2b3c022e-4679-4530-ad3a-1df3041efdd2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.221.0/24
                IPv6:
                  2620:101:80fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8b:a5:e5:f9:79:a3:f0:1b:75:9d:72:f0:59:6a:21:a8:e4:
         4d:7a:4a:e4:30:2e:1d:90:59:3d:ca:b9:b7:cd:17:72:86:e6:
         71:dd:6f:fd:09:fc:f5:ee:ad:38:fb:95:59:83:75:e6:19:5f:
         4f:9b:b2:4e:2a:a0:1c:49:d2:a3:ad:76:03:63:26:74:a2:6c:
         f0:15:3b:97:81:e9:1a:4a:16:eb:29:be:d0:c4:c9:24:c6:34:
         c8:8d:60:19:8e:f6:fb:90:e6:cb:73:f0:87:0b:c5:57:a2:ec:
         e6:7a:31:f6:93:98:f7:26:ab:36:2d:2c:ae:09:28:78:63:46:
         a5:a1:5f:f6:a8:ad:da:d7:f1:12:52:a6:40:b5:82:7f:80:14:
         9c:d4:b7:ff:ca:10:76:90:82:20:d9:34:b7:fe:2b:c2:d3:20:
         02:30:68:61:c8:09:23:57:b5:13:15:a8:c5:8a:b8:51:40:34:
         74:43:2a:20:19:d6:3d:23:be:84:9f:a6:5d:3d:dd:13:3c:ae:
         75:0c:81:21:4c:a6:09:98:51:ff:6f:70:f6:1a:18:1d:2e:0a:
         5b:53:7a:a0:96:36:58:1c:30:01:45:5c:ac:d5:4f:e4:c6:31:
         95:51:99:b6:46:73:8b:53:be:d7:3a:4c:e3:d4:e6:30:50:60:
         59:48:8b:27
-----BEGIN CERTIFICATE-----
MIIGUDCCBTqgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BW5PdJmowCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDJiM2MwMjJlLTQ2NzktNDUzMC1hZDNhLTFkZjMwNDFlZmRk
MjAeFw0xMjExMjAwNTAwMDBaFw0yMjExMjAwNTAwMDBaMC8xLTArBgNVBAMTJDkz
OTM0MDE5LTZhMTItNDc1MC05OTE0LWRiNDYyZGZlNjZmNDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJt0uFKAKS3EqRMXJSfRUsnw5gHCQYT9Lofh4Ewg
kdTPpJ4lD4gd0hS7GQmYwZkueeT27KHFud8hxNFXGrCuVXFogTIiVviNDyLv26Sw
yLrQe16zi5nrXYMotb+8QlQ6B8O6HCuP99SEVQZGEFFmf9KZd3R3QN/biKy+1Buj
vaGhLMaEWjSjCnDccwX6f8sq09OdTqhTDSZrJ6gQfyQPaEmxUZTkKF67g791tu7D
+ZGvghGQ4yLrVhhybMCXblx1PMBE7fhKfrkfQjD0Wq0DZwtmbSsXDR0Td2CVtNFQ
7A7I6jtahIOwLNyZG+lgApyNPnExl809srohCtfy7I/Uc7ECAwEAAaOCA2YwggNi
MB0GA1UdDgQWBBTyDhQ8hzYnr1xfJqavVnM4AM770TCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmIzYzAy
MmUtNDY3OS00NTMwLWFkM2EtMWRmMzA0MWVmZGQyLzQ4YTNjNDU5LWUzMjQtM2Uw
MS1hYThkLTRlMjhkNWQwYzg5ZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzJiM2MwMjJlLTQ2NzktNDUzMC1hZDNh
LTFkZjMwNDFlZmRkMi8yYjNjMDIyZS00Njc5LTQ1MzAtYWQzYS0xZGYzMDQxZWZk
ZDIuY3JsMB8GA1UdIwQYMBaAFP7Iqxx2xzr1RQ+HRcLLvA0+vPVeMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMmIzYzAyMmUtNDY3OS00NTMwLWFkM2EtMWRmMzA0
MWVmZGQyLmNlcjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAD/13TAPBAIA
AjAJAwcAJiABAYD8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwCwYJKoZIhvcNAQELA4IBAQByi6Xl+Xmj8Bt1nXLwWWohqORNekrkMC4dkFk9
yrm3zRdyhuZx3W/9Cfz17q04+5VZg3XmGV9Pm7JOKqAcSdKjrXYDYyZ0omzwFTuX
gekaShbrKb7QxMkkxjTIjWAZjvb7kObLc/CHC8VXouzmejH2k5j3Jqs2LSyuCSh4
Y0aloV/2qK3a1/ESUqZAtYJ/gBSc1Lf/yhB2kIIg2TS3/ivC0yACMGhhyAkjV7UT
FajFirhRQDR0QyogGdY9I76En6ZdPd0TPK51DIEhTKYJmFH/b3D2GhgdLgpbU3qg
ljZYHDABRVys1U/kxjGVUZm2RnOLU77XOkzj1OYwUGBZSIsn
-----END CERTIFICATE-----