Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/12813750-f7a1-37a5-9eab-57b73e652a84.roa
File:                     12813750-f7a1-37a5-9eab-57b73e652a84.roa (raw, json)
Hash identifier:          MbvI/cxOEf62Y097LL3AJdhm2AwxvrVfgyiyzeF8D10=
Subject key identifier:   7C:9C:A0:88:D2:76:D7:FA:34:48:8C:9D:4E:35:65:C8:B7:83:E5:94
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F4328576D51CC73C042CFC173959E7720
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/12813750-f7a1-37a5-9eab-57b73e652a84.roa
Signing time:             Tue 28 Jul 2020 13:30:57 +0000
ROA not before:           Thu 20 Sep 2018 04:00:00 +0000
ROA not after:            Mon 31 Oct 2022 04:00:00 +0000
asID:                     393383
IP address blocks:        192.64.29.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:95:9e:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Sep 20 04:00:00 2018 GMT
            Not After : Oct 31 04:00:00 2022 GMT
        Subject: CN=9e4a21fc-592a-4da2-8b31-779ccca4abb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:2c:90:03:c7:fb:3e:3c:e2:1d:c7:ad:29:
                    9e:92:0f:8b:c4:be:08:01:d7:f9:6b:20:6c:fb:f0:
                    83:b5:f9:37:11:48:dc:04:27:a1:d6:88:d5:ce:a6:
                    28:3b:b5:a8:2b:ae:2f:6d:a2:d5:99:54:00:bb:6b:
                    5b:7c:b6:04:ac:23:5e:68:51:31:52:1d:1e:e9:43:
                    ad:2e:89:d5:c9:21:da:5d:47:9c:0b:1a:90:46:bc:
                    c8:c8:0c:d4:c2:fd:05:23:1a:4c:e9:f5:30:08:e3:
                    63:ff:92:a8:73:c7:ff:d5:ea:a1:0e:37:01:2f:a9:
                    de:bc:04:ab:ed:f1:f6:48:b5:4b:43:cf:6e:c7:42:
                    f1:88:3e:b3:f5:ef:bd:cb:47:6d:75:0c:60:03:aa:
                    77:8e:6e:8d:7f:dd:74:b1:5e:b0:ef:aa:ba:99:eb:
                    1d:a6:ac:14:1a:c7:76:66:7b:d6:12:54:45:ed:43:
                    78:9b:0f:3c:79:7b:1b:46:bc:d3:10:e6:cb:90:cf:
                    7a:dd:a3:e2:40:e7:fa:4a:cd:95:c9:5d:84:b1:90:
                    33:5f:e1:a9:67:7e:82:86:1b:c9:40:01:8d:c4:d4:
                    be:cd:82:c5:a2:41:33:fb:93:eb:7f:5f:1b:54:b2:
                    bf:d3:9b:b4:b0:18:18:a8:f7:9e:c5:aa:5c:7d:f1:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9C:A0:88:D2:76:D7:FA:34:48:8C:9D:4E:35:65:C8:B7:83:E5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/12813750-f7a1-37a5-9eab-57b73e652a84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:16:f5:42:2d:2e:87:fe:bf:2e:11:6d:af:c2:b5:3d:8e:7e:
         82:b1:7d:d5:be:f3:5d:06:cd:40:a1:ef:36:9d:03:00:9f:8f:
         a0:b8:0b:f4:0a:22:8d:80:4c:17:e5:32:ae:59:e2:f0:97:63:
         e7:7a:a4:00:50:77:4d:56:2c:d2:7f:bf:7d:80:7c:50:55:08:
         a9:6c:82:7f:43:90:f7:d4:44:a4:16:bf:b8:fb:71:75:6b:37:
         1a:17:7a:90:85:1a:71:5f:86:b3:53:23:76:95:4e:56:12:e6:
         4e:af:c2:21:b0:58:5a:36:13:73:a7:8b:f4:e3:28:b5:a4:f6:
         3c:52:33:52:cc:d2:6e:07:75:4b:69:63:30:1b:7a:2d:0e:58:
         67:0d:0d:f6:22:04:60:cd:7b:1e:5d:a7:f9:88:50:37:68:4b:
         fb:30:17:dd:8b:c3:d7:c3:2b:11:16:2e:3e:57:58:16:b7:26:
         f1:8d:f9:82:0b:f2:2c:e5:db:5d:b4:7b:48:ce:16:24:92:4d:
         d2:1d:e9:29:ec:d1:44:24:49:0f:2c:07:33:f3:21:bb:3b:4a:
         f6:18:81:2e:c1:76:4c:c7:02:e5:fe:88:b1:da:75:0a:77:07:
         49:37:0b:60:87:28:6b:cc:ce:46:90:e9:99:42:88:e5:7d:fb:
         2b:9f:70:61
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc5WedyAwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDU2YTc1MjYxLTRlMjctNDc4YS04ZjllLTcxYTk5MTVjZTli
NDAeFw0xODA5MjAwNDAwMDBaFw0yMjEwMzEwNDAwMDBaMC8xLTArBgNVBAMTJDll
NGEyMWZjLTU5MmEtNGRhMi04YjMxLTc3OWNjY2E0YWJiMDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL7oLJADx/s+POIdx60pnpIPi8S+CAHX+WsgbPvw
g7X5NxFI3AQnodaI1c6mKDu1qCuuL22i1ZlUALtrW3y2BKwjXmhRMVIdHulDrS6J
1ckh2l1HnAsakEa8yMgM1ML9BSMaTOn1MAjjY/+SqHPH/9XqoQ43AS+p3rwEq+3x
9ki1S0PPbsdC8Yg+s/XvvctHbXUMYAOqd45ujX/ddLFesO+qupnrHaasFBrHdmZ7
1hJURe1DeJsPPHl7G0a80xDmy5DPet2j4kDn+krNlcldhLGQM1/hqWd+goYbyUAB
jcTUvs2CxaJBM/uT639fG1Syv9ObtLAYGKj3nsWqXH3xV68CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBR8nKCI0nbX+jRIjJ1ONWXIt4PllDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTZhNzUy
NjEtNGUyNy00NzhhLThmOWUtNzFhOTkxNWNlOWI0LzEyODEzNzUwLWY3YTEtMzdh
NS05ZWFiLTU3YjczZTY1MmE4NC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzU2YTc1MjYxLTRlMjctNDc4YS04Zjll
LTcxYTk5MTVjZTliNC81NmE3NTI2MS00ZTI3LTQ3OGEtOGY5ZS03MWE5OTE1Y2U5
YjQuY3JsMB8GA1UdIwQYMBaAFKQ+Fvnl+3f1CYVAcOdFumI9rhtMMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvNTZhNzUyNjEtNGUyNy00NzhhLThmOWUtNzFhOTkx
NWNlOWI0LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBAHTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAjBb1Qi0uh/6/LhFtr8K1PY5+grF91b7zXQbNQKHvNp0DAJ+PoLgL9AoijYBM
F+Uyrlni8Jdj53qkAFB3TVYs0n+/fYB8UFUIqWyCf0OQ99REpBa/uPtxdWs3Ghd6
kIUacV+Gs1MjdpVOVhLmTq/CIbBYWjYTc6eL9OMotaT2PFIzUszSbgd1S2ljMBt6
LQ5YZw0N9iIEYM17Hl2n+YhQN2hL+zAX3YvD18MrERYuPldYFrcm8Y35ggvyLOXb
XbR7SM4WJJJN0h3pKezRRCRJDywHM/MhuztK9hiBLsF2TMcC5f6Isdp1CncHSTcL
YIcoa8zORpDpmUKI5X37K59wYQ==
-----END CERTIFICATE-----