Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/eec32e9f-01a0-3f5b-9a7b-3f9a1e137729.roa
File:                     eec32e9f-01a0-3f5b-9a7b-3f9a1e137729.roa (raw, json)
Hash identifier:          iv/fUp2DKsDKdfq+rYTImu7ATOEDq8Y8AMF1+l7B0Og=
Subject key identifier:   DD:37:27:6F:44:51:CB:F7:BA:A7:DB:D5:B8:25:45:26:DA:37:61:7E
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328576D51CC73C042CFC15BCF05B462
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/eec32e9f-01a0-3f5b-9a7b-3f9a1e137729.roa
Signing time:             Wed 03 May 2017 15:55:09 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     237
IP address blocks:        192.203.195.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:5b:cf:05:b4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=80511609-555a-460e-a2fb-d09d6c74671d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:a9:23:c7:d5:7a:06:10:07:7a:22:51:de:
                    8d:7e:0c:d1:78:b8:75:38:04:0d:43:98:ae:db:2c:
                    1b:33:84:b5:41:09:0e:6b:06:9e:19:1a:b6:bc:ba:
                    95:74:da:1c:b6:07:4f:7b:d0:ff:24:ce:43:f4:d0:
                    4c:84:ff:eb:de:28:67:4a:20:11:07:6a:76:f9:30:
                    da:26:2d:7f:32:19:64:ac:2d:99:5b:7e:ea:96:02:
                    8a:30:7c:21:cf:c7:8b:1b:36:c0:92:6a:ab:8d:06:
                    35:90:38:5c:9a:b9:be:40:c6:a8:2f:54:9f:75:52:
                    0e:b4:a8:63:a3:c9:4c:8f:be:4e:76:cd:67:2f:3b:
                    93:8b:e6:9b:80:e2:9c:b1:7e:be:96:29:e5:54:a7:
                    42:d9:5a:7e:d6:f1:34:ab:1c:24:df:27:54:61:e9:
                    83:ba:cd:0f:ee:7d:72:68:e9:08:19:eb:d8:c3:1a:
                    83:24:b9:b4:50:e5:74:b0:79:54:c2:fb:6c:26:c1:
                    26:6e:f5:34:fc:db:11:81:f9:4b:e6:ad:85:f7:4c:
                    31:99:6d:d5:f4:cf:ce:8c:34:97:74:ec:b8:28:19:
                    87:98:ec:21:e8:99:e4:1c:e5:1e:c7:cc:70:f2:a9:
                    18:b2:a6:81:85:c0:2b:c8:92:6a:de:1a:54:12:15:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:37:27:6F:44:51:CB:F7:BA:A7:DB:D5:B8:25:45:26:DA:37:61:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/eec32e9f-01a0-3f5b-9a7b-3f9a1e137729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.203.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:98:90:5d:af:ad:c9:78:c8:be:07:f2:c3:ca:e1:b2:aa:7a:
         75:90:17:d0:87:38:f9:4a:47:ce:b7:96:2b:9f:74:d9:12:96:
         aa:eb:e0:25:62:db:69:25:6f:01:aa:de:60:8e:21:34:51:db:
         1d:a6:0e:29:53:c4:6b:0a:6c:c9:1c:dc:69:ac:43:4c:b3:73:
         c3:ff:d6:6e:ed:04:b5:b9:13:da:4f:0d:5b:c8:1a:54:7f:99:
         7d:97:e1:16:01:dc:9a:46:35:48:04:10:b2:08:5b:d6:72:2e:
         a6:c0:92:a1:d2:17:e1:35:54:ca:71:e5:be:25:e8:2c:ca:ff:
         4c:04:27:b9:0c:82:3e:d6:ba:57:61:14:48:f7:7f:f7:c2:1e:
         4e:32:b5:be:b7:61:dd:b5:d7:a2:77:60:61:a6:fb:60:d7:8b:
         35:74:c1:dc:2a:20:39:19:3a:bd:de:f9:9a:37:80:f6:90:c7:
         34:d4:4b:68:a7:68:f7:a3:ab:1f:2c:dd:b8:24:c2:7f:94:b5:
         7b:ec:da:ec:c8:93:09:4a:1e:4e:a7:91:2a:7e:3a:f0:e4:ed:
         4f:bd:c1:c8:b9:40:a7:ed:6c:64:ea:78:df:b2:79:67:2a:c7:
         31:d6:47:a3:f0:78:3e:3b:05:03:e8:30:21:2d:ce:fd:83:27:
         fe:77:c6:83
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BW88FtGIwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4ZGVm
ZTAeFw0xMjA5MjQwNDAwMDBaFw0yMjA5MjQwNDAwMDBaMC8xLTArBgNVBAMTJDgw
NTExNjA5LTU1NWEtNDYwZS1hMmZiLWQwOWQ2Yzc0NjcxZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKftqSPH1XoGEAd6IlHejX4M0Xi4dTgEDUOYrtss
GzOEtUEJDmsGnhkatry6lXTaHLYHT3vQ/yTOQ/TQTIT/694oZ0ogEQdqdvkw2iYt
fzIZZKwtmVt+6pYCijB8Ic/Hixs2wJJqq40GNZA4XJq5vkDGqC9Un3VSDrSoY6PJ
TI++TnbNZy87k4vmm4DinLF+vpYp5VSnQtlaftbxNKscJN8nVGHpg7rND+59cmjp
CBnr2MMagyS5tFDldLB5VML7bCbBJm71NPzbEYH5S+athfdMMZlt1fTPzow0l3Ts
uCgZh5jsIeiZ5BzlHsfMcPKpGLKmgYXAK8iSat4aVBIVQhECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTdNydvRFHL97qn29W4JUUm2jdhfjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1
MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThkZWZlL2VlYzMyZTlmLTAxYTAtM2Y1
Yi05YTdiLTNmOWExZTEzNzcyOS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMx
LWJiMGY4NzU4ZGVmZS84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRl
ZmUuY3JsMB8GA1UdIwQYMBaAFHGfdZ658v03sk/5i+9jcY7ATkwPMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3
NThkZWZlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMDLwzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAUZiQXa+tyXjIvgfyw8rhsqp6dZAX0Ic4+UpHzreWK5902RKWquvgJWLbaSVv
AareYI4hNFHbHaYOKVPEawpsyRzcaaxDTLNzw//Wbu0EtbkT2k8NW8gaVH+ZfZfh
FgHcmkY1SAQQsghb1nIupsCSodIX4TVUynHlviXoLMr/TAQnuQyCPta6V2EUSPd/
98IeTjK1vrdh3bXXondgYab7YNeLNXTB3CogORk6vd75mjeA9pDHNNRLaKdo96Or
HyzduCTCf5S1e+za7MiTCUoeTqeRKn468OTtT73ByLlAp+1sZOp437J5ZyrHMdZH
o/B4PjsFA+gwIS3O/YMn/nfGgw==
-----END CERTIFICATE-----