Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/fc7232f1-0117-3d1d-b6b1-6c3d99edb8a7.roa
File:                     fc7232f1-0117-3d1d-b6b1-6c3d99edb8a7.roa (raw, json)
Hash identifier:          p3Cn5Z5vCWOVCtNego8nLOQa3F9YhD5jc1Za+Tgw9iU=
Subject key identifier:   2F:1C:DC:4A:B0:3E:6D:E0:64:D8:C4:C5:8C:96:4D:D1:71:75:84:32
Certificate issuer:       /CN=2b3c022e-4679-4530-ad3a-1df3041efdd2
Certificate serial:       010D0C9F4328576D51CC73C042CFC15B93D61A34
Authority key identifier: FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/fc7232f1-0117-3d1d-b6b1-6c3d99edb8a7.roa
Signing time:             Sat 22 Apr 2017 04:05:33 +0000
ROA not before:           Tue 20 Nov 2012 05:00:00 +0000
ROA not after:            Sun 20 Nov 2022 05:00:00 +0000
asID:                     36856
IP address blocks:        63.245.208.0/20 maxlen: 20
                          2620:101:8000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:5b:93:d6:1a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b3c022e-4679-4530-ad3a-1df3041efdd2
        Validity
            Not Before: Nov 20 05:00:00 2012 GMT
            Not After : Nov 20 05:00:00 2022 GMT
        Subject: CN=574b1da7-f261-4449-a010-8f31f1599232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1a:83:9b:0e:a8:8c:9b:43:42:b9:85:00:f0:
                    33:1a:bd:7c:d7:e9:e4:dc:9f:04:89:bd:e5:5c:25:
                    88:d0:57:07:bb:1c:1f:b7:76:80:fd:dd:97:2c:5d:
                    1e:13:2b:9c:2e:33:3b:70:f2:d1:c1:55:83:17:9c:
                    fa:1e:69:f4:45:a0:7c:96:bc:8c:3b:fa:2d:e2:bc:
                    32:79:67:89:8a:14:29:cf:92:0d:94:de:59:54:3c:
                    ef:6b:34:46:ad:68:7d:4a:08:c0:d1:8f:4f:7f:ec:
                    da:a9:bf:34:ab:fb:86:9b:a9:00:5a:e3:11:29:bf:
                    a1:d2:e3:15:d8:8d:92:59:2c:d2:66:7d:b5:b0:78:
                    89:af:90:66:80:28:b9:a6:a5:52:a8:88:db:6a:83:
                    0c:2a:ea:59:05:f6:b0:bc:c5:74:96:22:8f:1d:84:
                    7d:91:25:4f:b1:76:9d:03:f7:7c:31:d4:b6:73:72:
                    8c:cd:97:55:71:66:32:f0:1b:0e:37:e8:67:59:f4:
                    10:ca:41:ca:5a:f2:5b:58:a8:15:e7:74:04:68:b3:
                    d7:48:53:43:3a:dc:7a:ac:80:46:b7:32:4f:c8:e5:
                    21:6a:c9:ef:f1:39:06:65:d0:1f:ad:a9:e4:2f:3b:
                    6e:a4:dc:d9:bf:fb:30:20:f0:55:43:98:c8:e9:e2:
                    ea:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1C:DC:4A:B0:3E:6D:E0:64:D8:C4:C5:8C:96:4D:D1:71:75:84:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/fc7232f1-0117-3d1d-b6b1-6c3d99edb8a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/2b3c022e-4679-4530-ad3a-1df3041efdd2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.208.0/20
                IPv6:
                  2620:101:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:78:a8:c5:a7:32:1a:84:4d:72:e4:11:98:1d:6f:65:42:e6:
         d4:55:ef:7e:04:1e:78:74:4e:73:6d:b6:c2:91:2d:d2:32:1a:
         80:75:27:5d:63:a3:b4:3e:4a:c7:6a:1f:67:51:69:2b:39:ce:
         0b:8e:46:75:b0:59:a1:80:3a:84:5d:a8:27:a2:c6:42:90:f3:
         58:0b:f7:6d:ac:06:59:6f:16:3b:b1:0b:8b:c1:0c:cf:1c:a0:
         33:c6:91:c6:a2:4f:09:5b:8e:20:f2:c0:f3:66:03:72:01:af:
         b6:ea:36:a2:59:6d:77:cc:c1:85:9e:6f:a9:cb:58:29:c4:ac:
         2a:e3:ed:47:b4:4e:e6:5e:69:60:0c:73:97:b5:40:9c:e0:5c:
         23:17:3a:63:0c:14:eb:5e:ad:bd:34:c6:6b:9f:30:15:52:cb:
         83:fd:65:ce:cb:8e:e3:30:7b:95:8f:51:b0:0a:c1:a9:1d:ea:
         15:c9:df:48:b6:a0:1b:45:37:31:3e:38:f9:45:4f:29:c5:76:
         6b:5a:80:5d:ac:21:e8:b3:5b:92:58:d1:d2:72:30:41:59:43:
         29:e4:e9:0d:7c:82:f0:9b:6b:a7:03:d7:22:4a:14:1d:01:d2:
         0f:13:89:bc:51:33:98:d4:11:b0:54:3a:f7:3b:43:e1:95:ec:
         4d:5f:2a:d0
-----BEGIN CERTIFICATE-----
MIIGTzCCBTmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BW5PWGjQwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDJiM2MwMjJlLTQ2NzktNDUzMC1hZDNhLTFkZjMwNDFlZmRk
MjAeFw0xMjExMjAwNTAwMDBaFw0yMjExMjAwNTAwMDBaMC8xLTArBgNVBAMTJDU3
NGIxZGE3LWYyNjEtNDQ0OS1hMDEwLThmMzFmMTU5OTIzMjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANIag5sOqIybQ0K5hQDwMxq9fNfp5NyfBIm95Vwl
iNBXB7scH7d2gP3dlyxdHhMrnC4zO3Dy0cFVgxec+h5p9EWgfJa8jDv6LeK8Mnln
iYoUKc+SDZTeWVQ872s0Rq1ofUoIwNGPT3/s2qm/NKv7hpupAFrjESm/odLjFdiN
klks0mZ9tbB4ia+QZoAouaalUqiI22qDDCrqWQX2sLzFdJYijx2EfZElT7F2nQP3
fDHUtnNyjM2XVXFmMvAbDjfoZ1n0EMpBylryW1ioFed0BGiz10hTQzrceqyARrcy
T8jlIWrJ7/E5BmXQH62p5C87bqTc2b/7MCDwVUOYyOni6o0CAwEAAaOCA2UwggNh
MB0GA1UdDgQWBBQvHNxKsD5t4GTYxMWMlk3RcXWEMjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmIzYzAy
MmUtNDY3OS00NTMwLWFkM2EtMWRmMzA0MWVmZGQyL2ZjNzIzMmYxLTAxMTctM2Qx
ZC1iNmIxLTZjM2Q5OWVkYjhhNy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzJiM2MwMjJlLTQ2NzktNDUzMC1hZDNh
LTFkZjMwNDFlZmRkMi8yYjNjMDIyZS00Njc5LTQ1MzAtYWQzYS0xZGYzMDQxZWZk
ZDIuY3JsMB8GA1UdIwQYMBaAFP7Iqxx2xzr1RQ+HRcLLvA0+vPVeMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMmIzYzAyMmUtNDY3OS00NTMwLWFkM2EtMWRmMzA0
MWVmZGQyLmNlcjAvBggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEBD/10DAOBAIA
AjAIAwYAJiABAYAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDALBgkqhkiG9w0BAQsDggEBAJJ4qMWnMhqETXLkEZgdb2VC5tRV734EHnh0TnNt
tsKRLdIyGoB1J11jo7Q+SsdqH2dRaSs5zguORnWwWaGAOoRdqCeixkKQ81gL922s
BllvFjuxC4vBDM8coDPGkcaiTwlbjiDywPNmA3IBr7bqNqJZbXfMwYWeb6nLWCnE
rCrj7Ue0TuZeaWAMc5e1QJzgXCMXOmMMFOterb00xmufMBVSy4P9Zc7LjuMwe5WP
UbAKwakd6hXJ30i2oBtFNzE+OPlFTynFdmtagF2sIeizW5JY0dJyMEFZQynk6Q18
gvCba6cD1yJKFB0B0g8TibxRM5jUEbBUOvc7Q+GV7E1fKtA=
-----END CERTIFICATE-----