Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/b7cc3f49-cb13-38ca-8136-15251d436781.roa
File:                     b7cc3f49-cb13-38ca-8136-15251d436781.roa (raw, json)
Hash identifier:          znvgJewcc5zvxzduaQVbU9OuSwo090LkCtQTkGd7zw4=
Subject key identifier:   15:35:5F:92:E5:A9:1F:17:34:16:49:B5:AA:B9:D1:3D:35:D2:28:F8
Certificate issuer:       /CN=2b3c022e-4679-4530-ad3a-1df3041efdd2
Certificate serial:       010D0C9F4328576D51CC73C042CFC168CB7456EC
Authority key identifier: FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/b7cc3f49-cb13-38ca-8136-15251d436781.roa
Signing time:             Fri 08 Feb 2019 04:53:45 +0000
ROA not before:           Tue 20 Nov 2012 05:00:00 +0000
ROA not after:            Sun 20 Nov 2022 05:00:00 +0000
asID:                     36856
IP address blocks:        63.245.208.0/23 maxlen: 24
                          2620:101:8030::/47 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:68:cb:74:56:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b3c022e-4679-4530-ad3a-1df3041efdd2
        Validity
            Not Before: Nov 20 05:00:00 2012 GMT
            Not After : Nov 20 05:00:00 2022 GMT
        Subject: CN=c742c9e3-de2e-4419-ae95-8a4c20e786af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:f0:c6:a8:73:a1:57:1b:53:ff:1b:7f:8f:
                    3c:44:e2:5b:f8:4c:5a:69:f0:0f:49:69:d8:db:15:
                    f9:13:8f:9b:0b:a5:b8:aa:1d:c4:e2:83:f9:22:a5:
                    ec:8c:02:a5:98:e4:23:6f:44:76:22:f3:67:6b:79:
                    10:ae:c5:09:fb:7c:3f:5b:62:5d:c8:77:f8:1b:54:
                    71:98:2a:49:d0:b4:c5:f9:8a:fa:a5:3f:1f:0c:7b:
                    1c:2e:bf:20:36:26:c8:ca:a7:a7:34:56:d0:58:39:
                    6f:ed:11:1a:90:28:51:26:b9:cf:d2:68:72:24:16:
                    8d:7c:32:b9:63:cc:ef:ca:6d:fa:04:6c:b8:1c:d7:
                    d3:26:09:ef:be:4c:68:64:cc:36:fb:18:8f:55:9f:
                    a5:5e:f3:2b:73:92:25:ff:8e:45:8a:44:f5:fb:e4:
                    51:24:b1:00:75:77:0b:35:36:b5:e1:8a:4c:5f:07:
                    2a:49:63:18:1e:e4:f4:48:cd:ad:d8:0a:fb:b4:f0:
                    0e:13:6b:63:cc:cd:9e:dd:73:f9:24:9d:ce:ec:6d:
                    06:e0:0e:42:7b:df:80:55:8d:8c:5e:de:4a:8c:87:
                    d8:a7:57:22:dc:5f:92:46:82:5b:ca:72:f4:f8:62:
                    0e:cf:39:ea:03:e9:d6:29:2c:92:f3:37:0f:9d:2f:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:35:5F:92:E5:A9:1F:17:34:16:49:B5:AA:B9:D1:3D:35:D2:28:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/b7cc3f49-cb13-38ca-8136-15251d436781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/2b3c022e-4679-4530-ad3a-1df3041efdd2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.208.0/23
                IPv6:
                  2620:101:8030::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:eb:2b:20:47:ed:40:0d:30:a7:a1:a8:c7:d3:15:48:65:b9:
         e8:d2:36:22:0e:cb:89:85:82:b5:1d:96:f3:85:45:a6:4a:22:
         2f:80:0c:94:3f:39:fd:ac:e8:06:f6:b1:11:e3:b9:29:b5:56:
         60:0c:09:eb:d8:9c:a8:19:bb:31:29:71:f3:67:76:ad:71:79:
         48:a5:0a:3a:49:3d:e3:b6:f3:bd:76:d8:f5:e6:87:9f:a5:1c:
         a0:79:23:00:3e:fc:fb:3a:db:dc:c6:0c:da:d8:08:f8:8c:e1:
         e1:d6:4e:a1:37:bb:fc:75:c8:bd:bb:24:8b:aa:b0:9a:81:33:
         41:6f:23:df:5b:f1:06:96:8f:52:55:6b:af:94:8c:71:cf:64:
         6c:47:d2:d9:f3:45:0c:42:d4:4d:95:ab:21:07:4c:32:4a:3d:
         b9:ed:ca:ac:62:de:3f:9a:4f:df:4f:be:2e:bd:46:b3:97:95:
         3e:1c:8a:03:b8:2c:4d:55:ac:f3:75:51:09:74:06:a4:aa:73:
         1a:44:61:38:aa:0f:23:e3:c3:97:66:43:6b:a1:2c:68:84:d7:
         e2:68:0d:96:41:9e:f9:83:a1:e3:62:6f:51:b3:3f:59:7f:84:
         46:84:1f:62:6c:92:a0:8f:7c:4c:af:02:8d:cd:9b:21:9d:50:
         aa:df:56:57
-----BEGIN CERTIFICATE-----
MIIGUDCCBTqgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BaMt0VuwwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDJiM2MwMjJlLTQ2NzktNDUzMC1hZDNhLTFkZjMwNDFlZmRk
MjAeFw0xMjExMjAwNTAwMDBaFw0yMjExMjAwNTAwMDBaMC8xLTArBgNVBAMTJGM3
NDJjOWUzLWRlMmUtNDQxOS1hZTk1LThhNGMyMGU3ODZhZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANVo8Maoc6FXG1P/G3+PPETiW/hMWmnwD0lp2NsV
+ROPmwuluKodxOKD+SKl7IwCpZjkI29EdiLzZ2t5EK7FCft8P1tiXch3+BtUcZgq
SdC0xfmK+qU/Hwx7HC6/IDYmyMqnpzRW0Fg5b+0RGpAoUSa5z9JociQWjXwyuWPM
78pt+gRsuBzX0yYJ775MaGTMNvsYj1WfpV7zK3OSJf+ORYpE9fvkUSSxAHV3CzU2
teGKTF8HKkljGB7k9EjNrdgK+7TwDhNrY8zNnt1z+SSdzuxtBuAOQnvfgFWNjF7e
SoyH2KdXItxfkkaCW8py9PhiDs856gPp1ikskvM3D50vM0sCAwEAAaOCA2YwggNi
MB0GA1UdDgQWBBQVNV+S5akfFzQWSbWqudE9NdIo+DCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmIzYzAy
MmUtNDY3OS00NTMwLWFkM2EtMWRmMzA0MWVmZGQyL2I3Y2MzZjQ5LWNiMTMtMzhj
YS04MTM2LTE1MjUxZDQzNjc4MS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzJiM2MwMjJlLTQ2NzktNDUzMC1hZDNh
LTFkZjMwNDFlZmRkMi8yYjNjMDIyZS00Njc5LTQ1MzAtYWQzYS0xZGYzMDQxZWZk
ZDIuY3JsMB8GA1UdIwQYMBaAFP7Iqxx2xzr1RQ+HRcLLvA0+vPVeMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMmIzYzAyMmUtNDY3OS00NTMwLWFkM2EtMWRmMzA0
MWVmZGQyLmNlcjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAT/10DAPBAIA
AjAJAwcBJiABAYAwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwCwYJKoZIhvcNAQELA4IBAQAm6ysgR+1ADTCnoajH0xVIZbno0jYiDsuJhYK1
HZbzhUWmSiIvgAyUPzn9rOgG9rER47kptVZgDAnr2JyoGbsxKXHzZ3atcXlIpQo6
ST3jtvO9dtj15oefpRygeSMAPvz7Otvcxgza2Aj4jOHh1k6hN7v8dci9uySLqrCa
gTNBbyPfW/EGlo9SVWuvlIxxz2RsR9LZ80UMQtRNlashB0wySj257cqsYt4/mk/f
T74uvUazl5U+HIoDuCxNVazzdVEJdAakqnMaRGE4qg8j48OXZkNroSxohNfiaA2W
QZ75g6HjYm9Rsz9Zf4RGhB9ibJKgj3xMrwKNzZshnVCq31ZX
-----END CERTIFICATE-----