Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/023c0f0c-32f2-31b4-b917-1a94f07e0972.roa
File:                     023c0f0c-32f2-31b4-b917-1a94f07e0972.roa (raw, json)
Hash identifier:          tKiHTpxj62QIiqNWu/RsjiUahJj6e9KDW9wjsbWkLS4=
Subject key identifier:   61:05:FC:BD:9D:8B:B8:3E:A8:6A:16:42:38:01:66:E2:9D:B2:6E:5D
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328576D51CC73C042CFC1720EE6DC9D
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/023c0f0c-32f2-31b4-b917-1a94f07e0972.roa
Signing time:             Wed 13 May 2020 16:38:30 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     36375
IP address blocks:        198.111.181.0/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:0e:e6:dc:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=432a5f1e-42c9-4949-be95-3cb6efca00ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:be:94:b9:2c:dc:29:30:58:2c:e6:92:67:
                    b3:4e:f4:21:d2:db:e0:be:4a:cb:6d:a8:b1:ac:b3:
                    df:57:6f:1d:05:ec:ed:09:66:68:ab:bf:55:45:77:
                    3b:fc:e6:63:3e:5d:da:fe:e5:6c:9f:55:eb:d7:04:
                    87:b2:46:4e:cc:4d:f9:f0:b4:18:73:98:3d:0b:a3:
                    dc:f3:f4:12:5c:5c:3f:20:ab:9e:3e:2a:cf:06:94:
                    87:aa:bc:79:7c:e0:3b:7a:77:ae:be:ec:c4:fd:6d:
                    ab:dd:44:fc:06:d9:e9:a6:81:36:c2:4c:fb:23:cf:
                    2a:c0:57:e1:ef:fe:c4:3a:d0:90:34:b8:dd:67:ab:
                    eb:a0:c5:f7:cb:67:f3:c9:a2:b5:17:22:bc:57:6c:
                    97:8b:60:ea:7c:a4:b2:d1:23:cf:ee:0e:9f:51:e2:
                    9e:82:70:d4:72:11:9b:2c:73:05:6e:8a:cb:a8:5a:
                    d5:1c:b8:b0:18:6a:9e:da:c6:7f:ff:12:9f:15:e3:
                    a4:d8:83:6c:cf:b2:d5:f2:4f:71:e5:6f:60:4a:8b:
                    81:f5:85:8a:89:7d:be:38:9e:b7:90:69:92:ee:39:
                    6f:37:a5:dd:1c:f0:4e:be:57:35:36:f6:cf:c0:23:
                    43:be:1e:01:66:cd:b0:f2:61:74:46:1f:c6:f5:09:
                    08:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:05:FC:BD:9D:8B:B8:3E:A8:6A:16:42:38:01:66:E2:9D:B2:6E:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/023c0f0c-32f2-31b4-b917-1a94f07e0972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.111.181.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:19:9c:46:d9:10:2f:0c:23:d3:c7:88:b0:5f:8f:31:f3:28:
         5c:81:69:69:be:4e:d4:cd:41:3c:46:fe:94:e4:45:e3:af:5a:
         81:2e:1e:39:c2:77:e6:02:f1:6e:32:f2:df:fa:ed:e3:60:b1:
         03:f1:b4:57:79:a4:55:b4:a3:59:27:38:7d:14:0a:76:f9:b4:
         d2:3a:db:2d:48:c2:89:38:b4:4c:aa:d3:8f:a4:13:5a:ed:bc:
         e0:3a:a5:5c:d2:a3:e0:6e:80:d5:bb:71:4d:9d:26:4d:f6:f6:
         d6:5b:ea:8e:73:56:9c:85:76:ba:23:dc:53:6c:b8:81:3e:ba:
         b0:8b:99:31:30:2b:7c:f4:8a:45:fa:e3:95:ec:54:19:0a:3b:
         8f:f1:87:ed:0d:c3:59:cd:a4:3c:a0:b1:58:5e:61:38:86:65:
         80:77:b0:4e:f2:02:a9:c7:0c:be:8f:67:23:8a:78:1f:ca:3d:
         05:4b:70:b2:af:6e:6b:f2:3c:52:13:35:0b:31:eb:f6:6b:01:
         22:66:5b:00:c6:12:dc:69:fb:50:43:62:6d:07:5e:32:dc:bd:
         e0:74:b6:ce:e0:ea:9a:bd:80:ce:d2:bc:12:31:0f:8c:73:12:
         20:fb:6b:a1:26:81:85:5c:5a:67:7f:e2:80:d3:cb:f2:70:50:
         be:7a:bd:e1
-----BEGIN CERTIFICATE-----
MIIGQDCCBSqgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcg7m3J0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4ZGVm
ZTAeFw0xMjA5MjQwNDAwMDBaFw0yMjA5MjQwNDAwMDBaMC8xLTArBgNVBAMTJDQz
MmE1ZjFlLTQyYzktNDk0OS1iZTk1LTNjYjZlZmNhMDBjYTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALKwvpS5LNwpMFgs5pJns070IdLb4L5Ky22osayz
31dvHQXs7QlmaKu/VUV3O/zmYz5d2v7lbJ9V69cEh7JGTsxN+fC0GHOYPQuj3PP0
ElxcPyCrnj4qzwaUh6q8eXzgO3p3rr7sxP1tq91E/AbZ6aaBNsJM+yPPKsBX4e/+
xDrQkDS43Wer66DF98tn88mitRcivFdsl4tg6nykstEjz+4On1HinoJw1HIRmyxz
BW6Ky6ha1Ry4sBhqntrGf/8SnxXjpNiDbM+y1fJPceVvYEqLgfWFiol9vjiet5Bp
ku45bzel3RzwTr5XNTb2z8AjQ74eAWbNsPJhdEYfxvUJCLsCAwEAAaOCA1YwggNS
MB0GA1UdDgQWBBRhBfy9nYu4PqhqFkI4AWbinbJuXTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1
MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThkZWZlLzAyM2MwZjBjLTMyZjItMzFi
NC1iOTE3LTFhOTRmMDdlMDk3Mi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMx
LWJiMGY4NzU4ZGVmZS84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRl
ZmUuY3JsMB8GA1UdIwQYMBaAFHGfdZ658v03sk/5i+9jcY7ATkwPMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3
NThkZWZlLmNlcjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFB8ZvtQAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDALBgkqhkiG9w0BAQsD
ggEBACEZnEbZEC8MI9PHiLBfjzHzKFyBaWm+TtTNQTxG/pTkReOvWoEuHjnCd+YC
8W4y8t/67eNgsQPxtFd5pFW0o1knOH0UCnb5tNI62y1Iwok4tEyq04+kE1rtvOA6
pVzSo+BugNW7cU2dJk329tZb6o5zVpyFdroj3FNsuIE+urCLmTEwK3z0ikX645Xs
VBkKO4/xh+0Nw1nNpDygsVheYTiGZYB3sE7yAqnHDL6PZyOKeB/KPQVLcLKvbmvy
PFITNQsx6/ZrASJmWwDGEtxp+1BDYm0HXjLcveB0ts7g6pq9gM7SvBIxD4xzEiD7
a6EmgYVcWmd/4oDTy/JwUL56veE=
-----END CERTIFICATE-----