Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/dd4c6c8b-fa6f-3090-81d2-d3ee8b79337e.roa
File:                     dd4c6c8b-fa6f-3090-81d2-d3ee8b79337e.roa (raw, json)
Hash identifier:          rFGVM7wluxGxR8mTZ6ZLIg7Jvdw3spSc7Ii2uscJL54=
Subject key identifier:   89:76:E9:BE:AE:FF:5B:2A:B8:06:CE:0E:B2:A8:16:00:80:C7:01:72
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F432858371447A8D5C73608565AF56480
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/dd4c6c8b-fa6f-3090-81d2-d3ee8b79337e.roa
Signing time:             Thu 18 Oct 2018 04:00:00 +0000
ROA not before:           Thu 18 Oct 2018 04:00:00 +0000
ROA not after:            Tue 29 Nov 2022 05:00:00 +0000
asID:                     14061
IP address blocks:        138.68.96.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:14:47:a8:d5:c7:36:08:56:5a:f5:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Oct 18 04:00:00 2018 GMT
            Not After : Nov 29 05:00:00 2022 GMT
        Subject: CN=aad3f9eb-f1c9-4692-9078-18d728b8f53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:eb:2e:cc:89:60:31:e9:fa:a9:91:fd:7e:4a:
                    15:6e:0a:35:b0:d3:c8:db:34:08:fc:f7:ad:8e:28:
                    69:bf:42:61:16:ca:7a:0b:8d:18:41:07:44:51:18:
                    91:d8:87:75:b3:37:05:fa:cf:6d:fd:41:b4:21:18:
                    c9:d7:ea:32:f5:19:6a:47:f8:73:99:df:6c:23:8b:
                    c7:61:fd:11:8a:62:a8:fa:60:e2:7a:81:fb:da:44:
                    32:a0:fd:c8:54:09:b3:82:45:2d:34:e2:e3:32:0b:
                    cf:6a:41:15:ec:77:a5:ad:c2:42:7d:24:78:d2:e0:
                    1a:0a:f9:2a:35:e3:1e:30:81:aa:24:58:55:bb:7b:
                    e0:de:6a:4b:6b:91:c5:99:f0:38:57:fd:e3:88:15:
                    55:7b:9e:e4:fb:af:b1:5b:98:27:99:b2:39:54:8a:
                    a9:40:59:17:f1:28:ba:2b:47:2e:9b:24:02:e6:94:
                    4a:ba:5d:b5:2f:9d:ec:35:36:46:7e:60:b7:4d:71:
                    b4:f9:eb:f3:ef:5f:f2:97:54:da:26:c7:d3:b8:7e:
                    05:3a:31:07:e1:c0:4c:da:8f:f4:f7:30:99:fb:b3:
                    4c:81:50:89:72:e0:35:3a:dd:40:9e:55:ca:b9:f2:
                    27:35:fe:e4:e4:41:e8:cf:a2:b3:c0:d7:be:32:b4:
                    8a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:76:E9:BE:AE:FF:5B:2A:B8:06:CE:0E:B2:A8:16:00:80:C7:01:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/dd4c6c8b-fa6f-3090-81d2-d3ee8b79337e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.68.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ff:d3:d9:2a:37:c5:c9:4d:86:5d:dc:4b:06:97:b5:c8:ba:
         18:76:01:9c:25:90:ea:89:2d:de:fc:27:c4:db:e3:79:67:0a:
         74:dd:29:f8:e6:be:9c:42:08:12:ba:8c:d5:c9:e2:16:05:f8:
         0d:4b:01:4d:fe:40:32:b5:18:17:58:04:1c:59:8d:cd:cb:52:
         9a:18:25:56:45:23:64:ea:be:0f:d7:d9:bb:d3:4d:1c:fb:31:
         b9:0e:4f:7f:2d:75:b4:ee:12:b7:2d:65:2e:bd:46:a2:57:63:
         12:36:8e:a0:d2:23:c1:38:d9:23:e2:15:62:6d:5a:ce:42:8b:
         86:1e:e0:82:b3:ae:78:26:87:cc:eb:12:18:da:25:60:4b:83:
         3c:b3:ce:ad:75:c5:80:b0:b8:fb:3c:44:31:00:b2:8e:c1:3b:
         48:30:7d:16:10:53:b0:4e:f6:8c:99:26:e3:df:3f:c7:b6:d8:
         cc:d3:16:5d:ef:c9:aa:59:cc:1a:47:62:94:47:18:5d:e4:db:
         c7:5c:47:2a:d2:a4:ce:4e:86:79:17:58:12:8e:10:2b:6d:87:
         68:14:07:18:46:61:dd:58:f0:47:a3:83:d4:64:a9:fb:82:3d:
         94:08:8a:2c:5e:9a:d3:33:5f:22:7b:98:b2:05:23:37:72:dc:
         68:c1:7a:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDcUR6jVxzYIVlr1ZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTE4MTAxODA0MDAwMFoXDTIyMTEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
YWFkM2Y5ZWItZjFjOS00NjkyLTkwNzgtMThkNzI4YjhmNTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+suzIlgMen6qZH9fkoVbgo1sNPI2zQI/Pet
jihpv0JhFsp6C40YQQdEURiR2Id1szcF+s9t/UG0IRjJ1+oy9RlqR/hzmd9sI4vH
Yf0RimKo+mDieoH72kQyoP3IVAmzgkUtNOLjMgvPakEV7HelrcJCfSR40uAaCvkq
NeMeMIGqJFhVu3vg3mpLa5HFmfA4V/3jiBVVe57k+6+xW5gnmbI5VIqpQFkX8Si6
K0cumyQC5pRKul21L53sNTZGfmC3TXG0+evz71/yl1TaJsfTuH4FOjEH4cBM2o/0
9zCZ+7NMgVCJcuA1Ot1AnlXKufInNf7k5EHoz6KzwNe+MrSKnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIl26b6u/1squAbODrKoFgCAxwFyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZGQ0YzZjOGItZmE2Zi0z
MDkwLTgxZDItZDNlZThiNzkzMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEikRgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA3/09kqN8XJTYZd3EsGl7XIuhh2AZwlkOqJLd78J8Tb43lnCnTdKfjm
vpxCCBK6jNXJ4hYF+A1LAU3+QDK1GBdYBBxZjc3LUpoYJVZFI2Tqvg/X2bvTTRz7
MbkOT38tdbTuErctZS69RqJXYxI2jqDSI8E42SPiFWJtWs5Ci4Ye4IKzrngmh8zr
EhjaJWBLgzyzzq11xYCwuPs8RDEAso7BO0gwfRYQU7BO9oyZJuPfP8e22MzTFl3v
yapZzBpHYpRHGF3k28dcRyrSpM5OhnkXWBKOECtth2gUBxhGYd1Y8Eejg9RkqfuC
PZQIiixemtMzXyJ7mLIFIzdy3GjBegI=
-----END CERTIFICATE-----