Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/ed4a123f-0898-3258-88f6-0c0ff6947d2e.roa
File:                     ed4a123f-0898-3258-88f6-0c0ff6947d2e.roa (raw, json)
Hash identifier:          eCNMjgihCR8RDOWC+ziCCEWf39MU/S5oumPtD5xV17s=
Subject key identifier:   DC:73:9E:C8:E6:48:F4:E9:23:80:2A:DF:A0:FF:9F:F6:8C:86:31:7F
Certificate issuer:       /CN=b3a75266-06ce-463f-bfbd-1da0c867f18a
Certificate serial:       010D0C9F4328576D51CC73C042CFC166AC77E8D0
Authority key identifier: BB:30:9A:65:E0:81:49:49:64:B4:87:E8:4C:93:36:77:10:84:CC:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/ed4a123f-0898-3258-88f6-0c0ff6947d2e.roa
Signing time:             Thu 25 Oct 2018 18:23:51 +0000
ROA not before:           Thu 25 Oct 2018 04:00:00 +0000
ROA not after:            Tue 25 Oct 2022 04:00:00 +0000
asID:                     55041
IP address blocks:        198.177.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:ac:77:e8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3a75266-06ce-463f-bfbd-1da0c867f18a
        Validity
            Not Before: Oct 25 04:00:00 2018 GMT
            Not After : Oct 25 04:00:00 2022 GMT
        Subject: CN=6944f55d-239b-4f22-93e9-a43b378e35d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f8:77:ae:04:76:77:8b:69:77:ab:3e:1b:5f:
                    7d:3a:4a:f2:1e:25:b5:9c:4a:c9:d6:03:1b:6e:23:
                    ff:b8:31:7d:db:6d:e7:64:ec:3f:d9:51:ab:8c:4a:
                    46:4d:49:12:e2:98:64:1b:15:89:86:7e:a0:9d:ea:
                    54:50:de:ca:8e:24:87:99:c8:10:0d:22:a4:3a:d8:
                    e9:03:c1:69:19:ae:2e:55:ac:57:09:26:62:81:c6:
                    6e:73:11:65:50:e2:06:b8:fc:83:c6:68:86:b1:1a:
                    7c:ff:ae:72:eb:83:6f:e9:63:f2:3c:a1:7b:80:3d:
                    ac:2c:fc:18:17:d1:aa:35:9f:68:a1:85:c1:c6:c7:
                    78:13:3a:92:29:ca:17:3f:17:8c:e7:a2:d7:21:e4:
                    0c:38:1c:10:37:6d:50:e4:ba:f9:f6:68:74:ed:9e:
                    01:f3:91:16:29:c8:74:24:3f:1e:14:cf:0a:a3:3b:
                    f8:49:5c:07:a7:53:e7:bc:89:d3:ff:1b:00:31:c9:
                    d7:64:d9:05:78:68:8e:33:3b:79:b0:e7:9e:67:2c:
                    1a:3f:ec:02:63:b8:7e:ee:6e:47:0f:72:ad:9f:4d:
                    ef:2d:f3:b1:f0:1d:b6:2b:c2:07:90:55:03:07:7e:
                    fa:9b:2a:a2:20:c1:d5:22:ed:99:7c:40:85:2e:50:
                    4a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:73:9E:C8:E6:48:F4:E9:23:80:2A:DF:A0:FF:9F:F6:8C:86:31:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/ed4a123f-0898-3258-88f6-0c0ff6947d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/b3a75266-06ce-463f-bfbd-1da0c867f18a.crl

            X509v3 Authority Key Identifier:
                keyid:BB:30:9A:65:E0:81:49:49:64:B4:87:E8:4C:93:36:77:10:84:CC:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:da:b8:fb:7a:26:e4:da:17:96:0d:0e:99:ce:07:57:6b:22:
         4c:07:8a:8f:8f:b6:a0:11:ff:91:17:9a:09:1b:dd:d4:a5:e6:
         28:1b:d3:d0:4c:27:4a:6e:67:7e:03:8d:c5:da:07:38:71:ca:
         94:77:8b:79:20:97:4b:6b:2c:47:86:7c:85:22:bf:ae:c0:9d:
         68:06:8d:5a:1c:32:ed:c0:62:cf:42:06:de:d0:87:a0:88:ba:
         08:8b:39:c2:41:3d:a1:40:f1:af:ed:ae:c2:41:82:70:86:91:
         d1:0f:fd:f1:5c:4d:c3:44:47:72:d1:2c:35:e4:64:37:c7:6b:
         ba:df:22:1a:72:74:6f:52:35:e0:e9:8b:2a:e0:78:8f:0f:99:
         24:e8:57:ce:5b:3f:66:c7:bf:63:37:f6:69:9e:8c:72:75:df:
         b3:30:c7:4d:a7:6e:0f:e2:92:93:42:a4:a6:64:58:f0:58:7c:
         7f:4e:cc:64:88:2f:64:50:bc:ff:c7:89:83:2c:b8:c6:85:ef:
         16:94:cf:94:b9:43:54:31:e2:1b:2a:d5:b8:20:57:b3:b3:40:
         b7:c5:d9:26:2f:8b:ac:a2:37:bb:87:c3:cf:dc:82:21:e1:bb:
         39:a6:7f:cd:1c:db:8f:1f:76:bd:00:72:c1:5a:c3:63:8b:50:
         a0:82:ae:d7
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZqx36NAwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGIzYTc1MjY2LTA2Y2UtNDYzZi1iZmJkLTFkYTBjODY3ZjE4
YTAeFw0xODEwMjUwNDAwMDBaFw0yMjEwMjUwNDAwMDBaMC8xLTArBgNVBAMTJDY5
NDRmNTVkLTIzOWItNGYyMi05M2U5LWE0M2IzNzhlMzVkMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJz4d64EdneLaXerPhtffTpK8h4ltZxKydYDG24j
/7gxfdtt52TsP9lRq4xKRk1JEuKYZBsViYZ+oJ3qVFDeyo4kh5nIEA0ipDrY6QPB
aRmuLlWsVwkmYoHGbnMRZVDiBrj8g8ZohrEafP+ucuuDb+lj8jyhe4A9rCz8GBfR
qjWfaKGFwcbHeBM6kinKFz8XjOei1yHkDDgcEDdtUOS6+fZodO2eAfORFinIdCQ/
HhTPCqM7+ElcB6dT57yJ0/8bADHJ12TZBXhojjM7ebDnnmcsGj/sAmO4fu5uRw9y
rZ9N7y3zsfAdtivCB5BVAwd++psqoiDB1SLtmXxAhS5QSpkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTcc57I5kj06SOAKt+g/5/2jIYxfzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjNhNzUy
NjYtMDZjZS00NjNmLWJmYmQtMWRhMGM4NjdmMThhL2VkNGExMjNmLTA4OTgtMzI1
OC04OGY2LTBjMGZmNjk0N2QyZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2IzYTc1MjY2LTA2Y2UtNDYzZi1iZmJk
LTFkYTBjODY3ZjE4YS9iM2E3NTI2Ni0wNmNlLTQ2M2YtYmZiZC0xZGEwYzg2N2Yx
OGEuY3JsMB8GA1UdIwQYMBaAFLswmmXggUlJZLSH6EyTNncQhMz1MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjNhNzUyNjYtMDZjZS00NjNmLWJmYmQtMWRhMGM4
NjdmMThhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMax/zBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAmdq4+3om5NoXlg0Omc4HV2siTAeKj4+2oBH/kReaCRvd1KXmKBvT0EwnSm5n
fgONxdoHOHHKlHeLeSCXS2ssR4Z8hSK/rsCdaAaNWhwy7cBiz0IG3tCHoIi6CIs5
wkE9oUDxr+2uwkGCcIaR0Q/98VxNw0RHctEsNeRkN8drut8iGnJ0b1I14OmLKuB4
jw+ZJOhXzls/Zse/Yzf2aZ6McnXfszDHTaduD+KSk0KkpmRY8Fh8f07MZIgvZFC8
/8eJgyy4xoXvFpTPlLlDVDHiGyrVuCBXs7NAt8XZJi+LrKI3u4fDz9yCIeG7OaZ/
zRzbjx92vQBywVrDY4tQoIKu1w==
-----END CERTIFICATE-----