Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/94032b9c-69c1-3899-9d5b-36d5e2ebe3f3.roa
File:                     94032b9c-69c1-3899-9d5b-36d5e2ebe3f3.roa (raw, json)
Hash identifier:          TCU/tjLmUyo/8UT8MZF0G3+Cqg07VhSv+tY0HawJOSw=
Subject key identifier:   86:44:C2:A4:7D:97:EA:CA:33:94:66:F4:E7:25:86:A7:43:EE:86:A1
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583B9204AAF429D05AFCB3476740
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/94032b9c-69c1-3899-9d5b-36d5e2ebe3f3.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 15 Jan 2024 05:00:00 +0000
asID:                     397601
IP address blocks:        2001:418:1456:b22::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:92:04:aa:f4:29:d0:5a:fc:b3:47:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Jan 15 05:00:00 2024 GMT
        Subject: CN=fa2de8bb-5653-4514-9d6b-9b35d19e28ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:f8:13:9f:c5:f5:9e:a0:82:41:11:23:ec:
                    db:4b:75:4c:c4:88:9e:18:11:14:dc:a3:68:f3:9e:
                    8a:29:c8:de:9f:90:a3:a5:02:73:70:7e:a0:86:49:
                    bf:29:75:23:70:f9:14:fd:96:a8:61:06:5b:1a:dc:
                    ef:22:ac:59:fb:6b:22:a8:46:f6:cb:5f:d3:71:b2:
                    b7:02:57:68:45:45:e8:42:ad:7e:e5:28:c9:b5:6d:
                    e6:37:a8:42:a5:ce:7b:40:42:01:b0:64:52:cb:27:
                    69:2b:e7:c1:65:93:af:43:82:15:6d:55:ad:aa:64:
                    3f:1d:1a:3f:65:1f:71:7e:ba:b5:d1:33:2f:f8:1d:
                    b0:55:f6:cb:56:b3:cb:e2:f2:44:0f:93:15:ee:6d:
                    0e:06:df:74:61:72:68:85:4a:18:85:5e:e1:f9:33:
                    82:6b:43:88:ca:d3:e3:e3:8a:96:4a:46:4f:1e:a0:
                    7c:f9:51:93:d2:16:b4:f8:85:a6:9e:e4:93:91:ef:
                    63:60:2c:1f:1a:55:98:18:35:03:7b:7c:1b:3d:a9:
                    54:78:f5:45:f5:3e:da:d2:38:5e:3c:96:33:1f:99:
                    53:db:49:e4:85:78:68:f8:b9:16:b3:8d:f6:b1:48:
                    20:18:bb:79:9e:a3:76:6e:3f:ea:02:af:b3:3d:14:
                    15:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:44:C2:A4:7D:97:EA:CA:33:94:66:F4:E7:25:86:A7:43:EE:86:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/94032b9c-69c1-3899-9d5b-36d5e2ebe3f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b22::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:56:45:6f:3a:cf:81:4b:40:b9:cc:d8:18:6d:18:27:f0:89:
         c2:5d:1f:0c:00:07:ee:d8:ad:a4:09:db:b2:86:8d:6f:4e:95:
         ba:16:f3:1b:0b:94:47:60:c8:f4:96:67:29:ec:37:3d:e7:ec:
         43:f0:27:2f:87:69:94:42:be:f6:ec:49:f2:4d:5a:c0:0c:77:
         b4:97:e5:07:54:74:af:b1:ee:db:51:41:6e:3d:6e:45:bf:ef:
         ba:3a:d3:2e:a1:ae:b8:3b:5c:31:c3:02:85:fd:0c:1b:bf:85:
         d7:c8:69:53:23:46:02:1d:f7:79:64:c4:1c:fa:b9:b5:b7:dc:
         b0:a1:a9:63:4d:34:aa:8d:92:f2:34:55:83:89:74:4e:ca:be:
         57:27:08:b6:0a:de:91:19:fe:5d:d4:e7:a4:da:a4:af:d0:b7:
         fe:59:82:90:45:5b:70:12:21:da:f9:0c:5b:6c:60:fc:49:3f:
         1c:3b:58:7d:c3:cd:e2:ce:59:f7:4a:df:03:2d:77:b9:b6:72:
         52:c7:8a:d3:12:ad:66:5c:93:fd:58:f8:15:88:b2:3e:a7:93:
         da:1e:d2:6c:33:d4:f2:2f:32:ed:92:68:f9:26:1d:51:56:9a:
         23:6f:95:1e:e1:59:62:ee:e6:55:f8:1c:c5:6c:c4:90:61:bf:
         c8:21:da:8d
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWDuSBKr0KdBa/LNHZ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTE4MDQxMDA0MDAwMFoXDTI0MDExNTA1MDAwMFowLzEtMCsGA1UEAxMk
ZmEyZGU4YmItNTY1My00NTE0LTlkNmItOWIzNWQxOWUyOGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1or4E5/F9Z6ggkERI+zbS3VMxIieGBEU3KNo
856KKcjen5CjpQJzcH6ghkm/KXUjcPkU/ZaoYQZbGtzvIqxZ+2siqEb2y1/TcbK3
AldoRUXoQq1+5SjJtW3mN6hCpc57QEIBsGRSyydpK+fBZZOvQ4IVbVWtqmQ/HRo/
ZR9xfrq10TMv+B2wVfbLVrPL4vJED5MV7m0OBt90YXJohUoYhV7h+TOCa0OIytPj
44qWSkZPHqB8+VGT0ha0+IWmnuSTke9jYCwfGlWYGDUDe3wbPalUePVF9T7a0jhe
PJYzH5lT20nkhXho+LkWs432sUggGLt5nqN2bj/qAq+zPRQVtwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFIZEwqR9l+rKM5Rm9OclhqdD7oahMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTQwMzJiOWMtNjljMS0z
ODk5LTlkNWItMzZkNWUyZWJlM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBRW
CyIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAjVZFbzrPgUtAuczYGG0YJ/CJwl0fDAAH7titpAnbsoaNb06V
uhbzGwuUR2DI9JZnKew3PefsQ/AnL4dplEK+9uxJ8k1awAx3tJflB1R0r7Hu21FB
bj1uRb/vujrTLqGuuDtcMcMChf0MG7+F18hpUyNGAh33eWTEHPq5tbfcsKGpY000
qo2S8jRVg4l0Tsq+VycItgrekRn+XdTnpNqkr9C3/lmCkEVbcBIh2vkMW2xg/Ek/
HDtYfcPN4s5Z90rfAy13ubZyUseK0xKtZlyT/Vj4FYiyPqeT2h7SbDPU8i8y7ZJo
+SYdUVaaI2+VHuFZYu7mVfgcxWzEkGG/yCHajQ==
-----END CERTIFICATE-----