Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8/d6515feb-4a75-38f9-b91b-68a64c574826.roa
File:                     d6515feb-4a75-38f9-b91b-68a64c574826.roa (raw, json)
Hash identifier:          /+U+0cMpRosOEEvSheHG4Xqmeu43aACTA78TIcywcCE=
Subject key identifier:   59:29:18:CE:C6:E8:51:41:55:45:6A:66:14:78:BA:86:96:50:76:AE
Certificate issuer:       /CN=824422dc-901f-4174-bf27-6d89e9fed2e8
Certificate serial:       010D0C9F4328576D51CC73C042CFC17219AE46CD
Authority key identifier: E3:7D:A5:47:1F:8C:C2:E2:05:FE:A9:D2:7A:DC:62:40:69:84:76:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8/d6515feb-4a75-38f9-b91b-68a64c574826.roa
Signing time:             Fri 15 May 2020 18:52:31 +0000
ROA not before:           Fri 15 May 2020 04:00:00 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     11635
IP address blocks:        23.128.224.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:19:ae:46:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824422dc-901f-4174-bf27-6d89e9fed2e8
        Validity
            Not Before: May 15 04:00:00 2020 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=a2b00604-eefd-4f66-adb9-d85755c59f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:16:b7:f9:ea:ac:5c:be:93:9a:4e:0e:4d:13:
                    84:d6:bc:45:21:a8:7b:24:0b:14:c4:a0:e8:15:6e:
                    77:02:68:57:77:60:44:48:e3:47:02:5f:f1:5c:f9:
                    ef:f6:c9:81:ff:bf:de:6a:45:79:b9:4d:15:a3:be:
                    26:1e:fd:37:b2:94:a9:7b:db:87:7d:f6:7f:06:ec:
                    97:c3:ac:e7:2e:02:db:54:c0:c3:55:d7:1e:17:58:
                    d3:8c:14:a7:1d:6b:77:b6:87:bb:c9:36:5b:32:15:
                    97:e6:5b:68:6f:71:d8:e4:25:43:a3:e7:ef:a7:1e:
                    20:91:ed:b4:04:23:83:67:64:3f:d7:b9:5f:b0:d0:
                    68:db:db:73:fb:dc:99:e1:f7:be:e4:87:71:50:c3:
                    0d:e2:85:72:15:75:85:5c:27:d0:ee:15:73:81:79:
                    f5:bc:56:04:b9:10:d0:80:87:a7:9d:70:13:2a:b5:
                    b0:e8:5c:98:b6:b6:69:8d:99:3b:89:a1:d1:54:fb:
                    bf:dc:bb:e7:15:9c:e4:6f:b5:4c:ce:24:37:18:0a:
                    0a:25:d0:7c:8a:fb:93:49:5d:ac:e7:bf:49:14:2e:
                    cf:4d:25:c9:ef:c4:47:e7:4c:83:97:0f:34:83:81:
                    52:36:d5:c5:b8:57:ec:00:1c:cd:9b:7c:e7:60:a6:
                    37:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:29:18:CE:C6:E8:51:41:55:45:6A:66:14:78:BA:86:96:50:76:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8/d6515feb-4a75-38f9-b91b-68a64c574826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8/824422dc-901f-4174-bf27-6d89e9fed2e8.crl

            X509v3 Authority Key Identifier:
                keyid:E3:7D:A5:47:1F:8C:C2:E2:05:FE:A9:D2:7A:DC:62:40:69:84:76:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:4d:34:e3:61:7f:84:c4:29:a7:33:69:31:0a:ea:71:25:df:
         6e:1e:af:31:91:a4:81:97:ad:28:9e:89:0a:c3:ff:47:72:c0:
         f4:e9:c7:4b:4f:67:f6:5a:ff:3e:45:95:c3:cb:e1:48:d2:b8:
         df:84:13:d1:55:26:14:96:a0:32:61:f1:38:0b:b9:58:c8:23:
         18:b8:62:31:44:3c:85:26:ca:5f:41:c5:18:89:cc:bb:a9:b1:
         11:d1:c9:dd:d5:36:d0:d7:eb:71:d6:e7:ed:8a:b6:72:51:e0:
         fb:5f:b4:3e:b4:89:d9:59:41:5a:9f:b4:e5:c0:62:35:64:e1:
         23:38:db:8e:3a:d0:47:e8:a1:63:42:05:81:2b:66:b4:3b:3a:
         95:32:a1:a6:11:0e:93:f4:fb:85:b3:15:19:4a:21:a9:02:42:
         fc:28:15:35:a1:6d:4b:9b:50:85:e8:64:ff:81:2f:9d:da:29:
         b2:98:bb:6f:5c:01:eb:63:bd:90:13:b8:78:e2:cd:4f:82:95:
         42:32:0e:d9:31:e1:3a:34:d2:59:98:2c:71:43:91:b8:70:53:
         e3:79:a8:f8:6e:83:6f:c4:48:96:41:e4:5b:02:e6:1d:76:3b:
         e4:1f:47:da:ff:ce:ad:4e:24:75:d8:8c:96:68:61:d1:af:1c:
         5f:2e:db:b3
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BchmuRs0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDgyNDQyMmRjLTkwMWYtNDE3NC1iZjI3LTZkODllOWZlZDJl
ODAeFw0yMDA1MTUwNDAwMDBaFw0yMjA4MTgwNDAwMDBaMC8xLTArBgNVBAMTJGEy
YjAwNjA0LWVlZmQtNGY2Ni1hZGI5LWQ4NTc1NWM1OWYwZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOMWt/nqrFy+k5pODk0ThNa8RSGoeyQLFMSg6BVu
dwJoV3dgREjjRwJf8Vz57/bJgf+/3mpFeblNFaO+Jh79N7KUqXvbh332fwbsl8Os
5y4C21TAw1XXHhdY04wUpx1rd7aHu8k2WzIVl+ZbaG9x2OQlQ6Pn76ceIJHttAQj
g2dkP9e5X7DQaNvbc/vcmeH3vuSHcVDDDeKFchV1hVwn0O4Vc4F59bxWBLkQ0ICH
p51wEyq1sOhcmLa2aY2ZO4mh0VT7v9y75xWc5G+1TM4kNxgKCiXQfIr7k0ldrOe/
SRQuz00lye/ER+dMg5cPNIOBUjbVxbhX7AAczZt852CmN5kCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRZKRjOxuhRQVVFamYUeLqGllB2rjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODI0NDIy
ZGMtOTAxZi00MTc0LWJmMjctNmQ4OWU5ZmVkMmU4L2Q2NTE1ZmViLTRhNzUtMzhm
OS1iOTFiLTY4YTY0YzU3NDgyNi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzgyNDQyMmRjLTkwMWYtNDE3NC1iZjI3
LTZkODllOWZlZDJlOC84MjQ0MjJkYy05MDFmLTQxNzQtYmYyNy02ZDg5ZTlmZWQy
ZTguY3JsMB8GA1UdIwQYMBaAFON9pUcfjMLiBf6p0nrcYkBphHbZMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvODI0NDIyZGMtOTAxZi00MTc0LWJmMjctNmQ4OWU5
ZmVkMmU4LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeA4DBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAA00042F/hMQppzNpMQrqcSXfbh6vMZGkgZetKJ6JCsP/R3LA9OnHS09n9lr/
PkWVw8vhSNK434QT0VUmFJagMmHxOAu5WMgjGLhiMUQ8hSbKX0HFGInMu6mxEdHJ
3dU20Nfrcdbn7Yq2clHg+1+0PrSJ2VlBWp+05cBiNWThIzjbjjrQR+ihY0IFgStm
tDs6lTKhphEOk/T7hbMVGUohqQJC/CgVNaFtS5tQhehk/4Evndopspi7b1wB62O9
kBO4eOLNT4KVQjIO2THhOjTSWZgscUORuHBT43mo+G6Db8RIlkHkWwLmHXY75B9H
2v/OrU4kddiMlmhh0a8cXy7bsw==
-----END CERTIFICATE-----