Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5b83edf1-7541-3229-a68c-9f789b2e8bda.roa
File:                     5b83edf1-7541-3229-a68c-9f789b2e8bda.roa (raw, json)
Hash identifier:          2tnMZcxwdYlLWDQ/Tv0E7yTn4FO2xlRofKDvoE6MmNg=
Subject key identifier:   45:F9:40:F3:F9:FC:70:73:75:44:D8:52:08:DC:8F:D6:82:0E:0D:34
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1704516955D
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5b83edf1-7541-3229-a68c-9f789b2e8bda.roa
Signing time:             Fri 14 Feb 2020 19:04:32 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Thu 19 May 2022 04:00:00 +0000
asID:                     22006
IP address blocks:        165.254.24.240/29 maxlen: 29
                          2001:418:1456:b01::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:45:16:95:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : May 19 04:00:00 2022 GMT
        Subject: CN=766bde84-7e92-4ded-a619-15de8effc74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b2:2e:0a:84:0b:80:1e:00:ed:e4:d5:a6:c2:
                    a4:f0:3e:5f:54:2f:3f:f2:ab:0d:45:8f:61:73:08:
                    ee:3d:b9:c8:cb:75:28:0b:87:70:5b:7f:48:4f:4c:
                    ec:bc:5d:39:e9:28:fe:2b:de:29:61:b4:c1:69:b1:
                    57:89:f7:e6:44:d7:00:37:5d:9a:42:a7:3c:6d:91:
                    77:d1:0d:4e:d6:fa:bb:6c:81:04:b3:41:33:7a:01:
                    ce:00:5d:9f:03:a2:f5:45:a5:60:ca:99:b2:5b:9d:
                    a0:7d:e4:5c:a5:ac:8d:81:aa:eb:40:59:05:86:1b:
                    08:d5:12:e8:fb:d4:81:46:d6:85:40:b9:54:5f:b0:
                    1c:a0:30:0b:66:08:f3:1d:7d:d4:b5:e8:77:86:80:
                    c9:23:4a:6d:94:c2:17:c0:65:17:e3:ff:35:11:1c:
                    d4:5f:be:17:06:bb:8a:80:32:24:34:85:fa:b6:57:
                    02:40:71:4f:35:89:1d:f1:89:86:d2:53:6f:97:01:
                    33:50:95:16:c6:b1:bc:b7:1c:21:d0:77:27:f9:aa:
                    2b:4a:66:db:ac:d1:d5:35:44:ac:83:38:fa:3c:35:
                    8c:de:6f:9f:f5:38:19:f9:fd:66:98:aa:7c:c1:1e:
                    7f:9a:97:f3:44:06:68:c7:27:22:6a:8d:38:68:31:
                    a8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F9:40:F3:F9:FC:70:73:75:44:D8:52:08:DC:8F:D6:82:0E:0D:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5b83edf1-7541-3229-a68c-9f789b2e8bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.24.240/29
                IPv6:
                  2001:418:1456:b01::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:8c:a8:2b:fd:e2:c3:05:4e:4c:2f:23:c3:00:3c:74:12:a6:
         2c:97:50:7a:d1:68:57:aa:db:4b:b9:fb:02:74:c7:a1:b2:7c:
         ad:55:0c:8e:9e:b0:1d:70:4f:bb:d3:ad:c9:01:0f:c5:e7:d9:
         f6:5d:6d:aa:be:20:65:43:98:4e:36:55:ca:47:4a:8e:fa:3d:
         04:3b:51:14:69:27:b4:3e:73:b6:05:77:61:65:f1:de:4c:6e:
         a4:a0:f2:51:1c:49:92:4a:ea:98:3b:eb:2f:86:8f:a1:81:b2:
         d9:ba:9c:78:af:f1:be:66:70:68:86:60:d1:14:2a:4b:54:83:
         3c:6a:0b:97:d7:83:69:98:f3:9b:24:8a:2b:02:63:7d:cd:ff:
         18:0b:92:de:73:ec:85:38:8c:f6:44:c0:13:7c:d1:85:b0:15:
         29:c9:3f:a3:62:6e:42:95:6e:99:35:4b:5e:75:46:fe:35:d2:
         66:2b:99:e2:f0:1c:a1:22:4c:a3:55:73:31:20:f1:d8:f0:30:
         bf:d6:6f:d6:df:d9:70:8e:28:a1:69:be:dc:03:e3:93:80:c2:
         cb:d3:a4:18:99:c2:45:ae:6f:8e:6d:cf:8e:cb:98:4b:d1:8e:
         bd:a6:e8:88:f5:61:8e:64:c0:1b:73:cf:dc:b0:53:b4:31:c7:
         9c:34:73:86
-----BEGIN CERTIFICATE-----
MIIGUzCCBT2gAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcEUWlV0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yMjA1MTkwNDAwMDBaMC8xLTArBgNVBAMTJDc2
NmJkZTg0LTdlOTItNGRlZC1hNjE5LTE1ZGU4ZWZmYzc0ZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANmyLgqEC4AeAO3k1abCpPA+X1QvP/KrDUWPYXMI
7j25yMt1KAuHcFt/SE9M7LxdOeko/iveKWG0wWmxV4n35kTXADddmkKnPG2Rd9EN
Ttb6u2yBBLNBM3oBzgBdnwOi9UWlYMqZsludoH3kXKWsjYGq60BZBYYbCNUS6PvU
gUbWhUC5VF+wHKAwC2YI8x191LXod4aAySNKbZTCF8BlF+P/NREc1F++Fwa7ioAy
JDSF+rZXAkBxTzWJHfGJhtJTb5cBM1CVFsaxvLccIdB3J/mqK0pm26zR1TVErIM4
+jw1jN5vn/U4Gfn9ZpiqfMEef5qX80QGaMcnImqNOGgxqIECAwEAAaOCA2kwggNl
MB0GA1UdDgQWBBRF+UDz+fxwc3VE2FII3I/Wgg4NNDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzViODNlZGYxLTc1NDEtMzIy
OS1hNjhjLTlmNzg5YjJlOGJkYS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAzBggrBgEFBQcBBwEB/wQkMCIwDQQCAAEwBwMFA6X+GPAwEQQC
AAIwCwMJACABBBgUVgsBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwCwYJKoZIhvcNAQELA4IBAQB7jKgr/eLDBU5MLyPDADx0EqYsl1B60WhX
qttLufsCdMehsnytVQyOnrAdcE+7063JAQ/F59n2XW2qviBlQ5hONlXKR0qO+j0E
O1EUaSe0PnO2BXdhZfHeTG6koPJRHEmSSuqYO+svho+hgbLZupx4r/G+ZnBohmDR
FCpLVIM8aguX14NpmPObJIorAmN9zf8YC5Lec+yFOIz2RMATfNGFsBUpyT+jYm5C
lW6ZNUtedUb+NdJmK5ni8ByhIkyjVXMxIPHY8DC/1m/W39lwjiihab7cA+OTgMLL
06QYmcJFrm+Obc+Oy5hL0Y69puiI9WGOZMAbc8/csFO0McecNHOG
-----END CERTIFICATE-----