Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/09fa455a-ca29-3a45-a647-03e2a70a4f53.roa
File:                     09fa455a-ca29-3a45-a647-03e2a70a4f53.roa (raw, json)
Hash identifier:          iwWeoteneReq+QI/JYX81PEIexGx+urqD2c+acanvYA=
Subject key identifier:   AD:C2:94:4C:CA:71:B1:34:4E:AE:48:71:B2:44:5E:7E:C5:54:82:CB
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC170AE74BEE6
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/09fa455a-ca29-3a45-a647-03e2a70a4f53.roa
Signing time:             Fri 06 Mar 2020 06:07:31 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Thu 09 Jun 2022 04:00:00 +0000
asID:                     398202
IP address blocks:        204.2.172.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:ae:74:be:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Jun  9 04:00:00 2022 GMT
        Subject: CN=85202963-f3cd-4737-b24a-606b2d3f65e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:20:a7:5c:8e:b2:c3:03:7b:bb:ea:6c:55:db:
                    89:e2:da:8c:30:04:7f:3b:47:a0:17:85:28:0e:e6:
                    36:cd:0f:43:5d:cc:9d:84:f1:0d:0d:bf:dc:71:25:
                    50:9a:a8:01:4c:1d:59:aa:b2:66:57:d7:e9:a7:11:
                    c0:67:42:38:7c:9b:c6:27:6b:02:3c:59:54:5b:0a:
                    6f:98:6d:3f:1a:ee:db:bb:d3:f6:2a:03:09:e4:10:
                    89:aa:63:db:f6:55:ba:3c:28:ae:1d:3b:58:f4:77:
                    01:8e:7f:ab:6f:7e:52:b1:0e:63:4f:dc:8a:97:73:
                    dd:65:10:84:59:41:6a:23:bc:92:5f:c1:67:e4:59:
                    7c:9a:a6:eb:87:4d:37:c7:a5:9a:82:24:ec:0b:7a:
                    61:9d:89:a8:59:4b:c2:85:ce:1c:b0:7a:7d:11:aa:
                    a5:b6:ad:b7:10:08:f0:89:90:b8:03:63:1d:5b:cd:
                    e1:cd:4d:eb:97:82:d0:5d:ac:2b:65:13:f3:03:53:
                    38:81:dc:09:d3:4b:27:80:d7:68:2c:ab:57:92:9e:
                    a9:b3:e6:81:f8:80:38:df:17:8f:1e:15:c6:ce:fd:
                    77:82:09:a8:2a:45:34:20:9e:7e:7f:ae:31:ea:0d:
                    c0:1b:84:ae:c5:26:01:6e:5f:f0:e6:f2:c5:c8:e7:
                    f8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C2:94:4C:CA:71:B1:34:4E:AE:48:71:B2:44:5E:7E:C5:54:82:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/09fa455a-ca29-3a45-a647-03e2a70a4f53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:88:38:af:0e:2a:6d:d5:bb:ac:71:09:52:93:9f:0b:13:f6:
         0a:df:a7:6a:de:75:5c:63:b7:5a:2a:51:b5:ae:3f:88:48:49:
         a5:e7:65:54:d6:cb:77:57:ba:ed:6f:79:a7:35:29:a3:c6:75:
         87:3d:90:fc:51:5f:f6:3d:66:35:d9:f8:92:2c:e0:44:92:f3:
         b2:dd:73:cf:fd:e4:1d:04:35:e5:1c:7d:83:a5:dd:dc:64:f5:
         e0:3b:17:81:9e:1b:e0:44:5e:78:da:d9:24:f7:d9:1c:32:47:
         02:db:b3:02:2d:17:af:b6:71:cf:f6:2f:60:f5:10:0b:7d:6e:
         83:6b:77:bb:c8:de:53:37:77:5c:eb:a4:4f:0f:da:4c:5d:73:
         f0:8e:aa:22:31:5a:e1:95:6b:10:3a:8c:8f:7c:81:14:a9:d0:
         b2:b0:1e:17:ca:58:33:5a:ff:4c:d4:c7:84:58:4f:af:2c:51:
         5e:2a:2d:ad:9d:ff:9f:96:78:23:a5:f6:df:70:d0:ca:64:48:
         ac:f1:69:56:10:e5:b6:c6:f7:76:72:a8:50:59:76:4d:c6:53:
         4d:03:13:04:71:9e:03:7c:fb:a7:28:39:85:82:90:9b:88:71:
         b3:61:95:10:76:55:a7:9f:20:90:82:3d:87:85:76:15:37:30:
         2f:57:bf:fc
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcK50vuYwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yMjA2MDkwNDAwMDBaMC8xLTArBgNVBAMTJDg1
MjAyOTYzLWYzY2QtNDczNy1iMjRhLTYwNmIyZDNmNjVlMDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAPIgp1yOssMDe7vqbFXbieLajDAEfztHoBeFKA7m
Ns0PQ13MnYTxDQ2/3HElUJqoAUwdWaqyZlfX6acRwGdCOHybxidrAjxZVFsKb5ht
Pxru27vT9ioDCeQQiapj2/ZVujworh07WPR3AY5/q29+UrEOY0/cipdz3WUQhFlB
aiO8kl/BZ+RZfJqm64dNN8elmoIk7At6YZ2JqFlLwoXOHLB6fRGqpbattxAI8ImQ
uANjHVvN4c1N65eC0F2sK2UT8wNTOIHcCdNLJ4DXaCyrV5KeqbPmgfiAON8Xjx4V
xs79d4IJqCpFNCCefn+uMeoNwBuErsUmAW5f8Obyxcjn+IECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBStwpRMynGxNE6uSHGyRF5+xVSCyzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzA5ZmE0NTVhLWNhMjktM2E0
NS1hNjQ3LTAzZTJhNzBhNGY1My5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAswCrDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAnog4rw4qbdW7rHEJUpOfCxP2Ct+nat51XGO3WipRta4/iEhJpedlVNbLd1e6
7W95pzUpo8Z1hz2Q/FFf9j1mNdn4kizgRJLzst1zz/3kHQQ15Rx9g6Xd3GT14DsX
gZ4b4EReeNrZJPfZHDJHAtuzAi0Xr7Zxz/YvYPUQC31ug2t3u8jeUzd3XOukTw/a
TF1z8I6qIjFa4ZVrEDqMj3yBFKnQsrAeF8pYM1r/TNTHhFhPryxRXiotrZ3/n5Z4
I6X233DQymRIrPFpVhDltsb3dnKoUFl2TcZTTQMTBHGeA3z7pyg5hYKQm4hxs2GV
EHZVp58gkII9h4V2FTcwL1e//A==
-----END CERTIFICATE-----