Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8/236fe681-0cd5-3fef-b907-bec5757f78dc.roa
File:                     236fe681-0cd5-3fef-b907-bec5757f78dc.roa (raw, json)
Hash identifier:          sOM4uQIq4WC8K7kBdIzJv7uBZc42gOGwpukva7jpVx8=
Subject key identifier:   2C:19:C7:FB:4B:43:A1:EC:F1:9F:F8:11:97:7A:15:34:82:6D:70:0A
Certificate issuer:       /CN=824422dc-901f-4174-bf27-6d89e9fed2e8
Certificate serial:       010D0C9F4328576D51CC73C042CFC17219AFE14B
Authority key identifier: E3:7D:A5:47:1F:8C:C2:E2:05:FE:A9:D2:7A:DC:62:40:69:84:76:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8/236fe681-0cd5-3fef-b907-bec5757f78dc.roa
Signing time:             Fri 15 May 2020 18:54:16 +0000
ROA not before:           Fri 15 May 2020 04:00:00 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     11635
IP address blocks:        2604:c4c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:19:af:e1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824422dc-901f-4174-bf27-6d89e9fed2e8
        Validity
            Not Before: May 15 04:00:00 2020 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=b8b4991a-5125-49c3-b106-2fe3b77c555c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:80:e7:9c:26:3d:dd:8c:4a:48:3e:e2:87:02:
                    f9:53:85:24:5f:61:32:91:e2:58:bb:e3:05:31:ed:
                    2f:3b:d5:f7:08:e2:11:38:92:49:bc:aa:5d:d4:2f:
                    c7:87:a2:f7:7b:88:16:06:a6:40:91:af:c4:22:94:
                    f3:c4:d3:70:65:e8:1a:bf:14:fe:27:23:7b:b9:56:
                    f9:f9:b5:ca:2c:57:b7:74:60:ad:c1:ee:de:5d:9d:
                    cc:d7:7e:83:4b:4b:e1:59:bf:f5:03:53:fc:00:c3:
                    cf:88:5d:5c:b1:a4:7d:8e:5a:2f:64:81:c1:81:cf:
                    16:39:03:10:f8:07:ea:6c:3d:39:9f:92:af:a5:13:
                    c4:52:1c:d8:ab:eb:82:d5:87:f6:12:5a:a5:25:65:
                    b1:6b:bd:7d:9d:2b:10:18:dc:85:53:55:8d:2c:78:
                    dc:ac:bf:90:4a:05:5a:a9:37:f6:0c:42:b5:3c:15:
                    0c:ba:a9:e0:c1:b4:02:6a:bb:36:d5:d5:60:19:2d:
                    d3:f4:b0:3c:ce:3f:fa:23:1f:b4:32:00:47:b8:7f:
                    75:71:50:43:1b:a3:6a:32:c5:31:5c:31:2c:7a:4a:
                    b2:a2:4a:2e:60:c4:3b:a9:1b:9c:a6:ea:1c:48:43:
                    1c:95:99:56:7e:15:ec:82:da:c6:5e:d8:21:95:12:
                    0c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:19:C7:FB:4B:43:A1:EC:F1:9F:F8:11:97:7A:15:34:82:6D:70:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8/236fe681-0cd5-3fef-b907-bec5757f78dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8/824422dc-901f-4174-bf27-6d89e9fed2e8.crl

            X509v3 Authority Key Identifier:
                keyid:E3:7D:A5:47:1F:8C:C2:E2:05:FE:A9:D2:7A:DC:62:40:69:84:76:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:90:5f:81:90:db:bb:5b:57:bf:0e:64:ba:29:d3:07:9e:7c:
         f8:e2:d5:6c:b3:f8:16:7e:04:d5:0b:d6:dd:91:93:05:ff:b1:
         74:f1:65:20:2a:62:b5:1d:c2:cc:97:7a:ec:2c:2d:c8:0b:e5:
         15:07:f8:1d:60:9b:27:de:88:ca:be:1a:a3:41:90:f0:af:96:
         34:fa:3e:ed:a3:b2:31:78:50:e4:d5:72:68:f8:de:76:23:ba:
         d6:a7:82:c3:49:72:8f:70:66:2b:aa:ab:d1:46:32:a4:11:f6:
         aa:08:d1:ff:d5:13:e2:79:63:8b:e5:89:24:08:7f:73:2e:92:
         6b:f7:ce:9c:5b:5c:49:06:e7:10:26:db:09:05:14:29:56:e5:
         6b:e8:c4:2e:a4:f3:0f:4b:f2:3f:d7:b8:aa:8f:e0:df:de:e3:
         49:23:9a:38:49:7b:d1:ec:4f:0a:f4:f4:de:3d:79:60:e1:42:
         93:3b:ce:fe:86:0d:7f:d6:48:a4:fc:9a:e3:30:e6:55:49:05:
         bc:df:d5:d7:c6:8f:a5:42:7e:eb:72:ca:6f:1c:de:37:1d:0b:
         71:51:87:26:7e:98:0e:c0:a1:ce:b2:26:97:b5:15:c5:a3:98:
         eb:be:4b:cf:d9:5f:1e:ce:1d:88:63:75:1c:da:85:dd:e9:41:
         06:b0:eb:f4
-----BEGIN CERTIFICATE-----
MIIGQDCCBSqgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bchmv4UswCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDgyNDQyMmRjLTkwMWYtNDE3NC1iZjI3LTZkODllOWZlZDJl
ODAeFw0yMDA1MTUwNDAwMDBaFw0yMjA4MTgwNDAwMDBaMC8xLTArBgNVBAMTJGI4
YjQ5OTFhLTUxMjUtNDljMy1iMTA2LTJmZTNiNzdjNTU1YzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJ+A55wmPd2MSkg+4ocC+VOFJF9hMpHiWLvjBTHt
LzvV9wjiETiSSbyqXdQvx4ei93uIFgamQJGvxCKU88TTcGXoGr8U/icje7lW+fm1
yixXt3RgrcHu3l2dzNd+g0tL4Vm/9QNT/ADDz4hdXLGkfY5aL2SBwYHPFjkDEPgH
6mw9OZ+Sr6UTxFIc2KvrgtWH9hJapSVlsWu9fZ0rEBjchVNVjSx43Ky/kEoFWqk3
9gxCtTwVDLqp4MG0Amq7NtXVYBkt0/SwPM4/+iMftDIAR7h/dXFQQxujajLFMVwx
LHpKsqJKLmDEO6kbnKbqHEhDHJWZVn4V7ILaxl7YIZUSDAkCAwEAAaOCA1YwggNS
MB0GA1UdDgQWBBQsGcf7S0Oh7PGf+BGXehU0gm1wCjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODI0NDIy
ZGMtOTAxZi00MTc0LWJmMjctNmQ4OWU5ZmVkMmU4LzIzNmZlNjgxLTBjZDUtM2Zl
Zi1iOTA3LWJlYzU3NTdmNzhkYy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzgyNDQyMmRjLTkwMWYtNDE3NC1iZjI3
LTZkODllOWZlZDJlOC84MjQ0MjJkYy05MDFmLTQxNzQtYmYyNy02ZDg5ZTlmZWQy
ZTguY3JsMB8GA1UdIwQYMBaAFON9pUcfjMLiBf6p0nrcYkBphHbZMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvODI0NDIyZGMtOTAxZi00MTc0LWJmMjctNmQ4OWU5
ZmVkMmU4LmNlcjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACYExMAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDALBgkqhkiG9w0BAQsD
ggEBAJyQX4GQ27tbV78OZLop0weefPji1Wyz+BZ+BNUL1t2RkwX/sXTxZSAqYrUd
wsyXeuwsLcgL5RUH+B1gmyfeiMq+GqNBkPCvljT6Pu2jsjF4UOTVcmj43nYjutan
gsNJco9wZiuqq9FGMqQR9qoI0f/VE+J5Y4vliSQIf3Mukmv3zpxbXEkG5xAm2wkF
FClW5WvoxC6k8w9L8j/XuKqP4N/e40kjmjhJe9HsTwr09N49eWDhQpM7zv6GDX/W
SKT8muMw5lVJBbzf1dfGj6VCfutyym8c3jcdC3FRhyZ+mA7Aoc6yJpe1FcWjmOu+
S8/ZXx7OHYhjdRzahd3pQQaw6/Q=
-----END CERTIFICATE-----