Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a7c42529-0e16-3181-b545-c702ef18a4ec.roa
File:                     a7c42529-0e16-3181-b545-c702ef18a4ec.roa (raw, json)
Hash identifier:          tnX2VQImP4Z7IResifGcj8NIxK5mQRtVX+e2AKclkow=
Subject key identifier:   4B:D8:85:1A:D5:C7:7B:4B:50:87:CE:2B:AD:42:45:4C:93:3E:34:89
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC17063B42DDC
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a7c42529-0e16-3181-b545-c702ef18a4ec.roa
Signing time:             Thu 20 Feb 2020 17:45:17 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Wed 25 May 2022 04:00:00 +0000
asID:                     397131
IP address blocks:        204.2.59.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:63:b4:2d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : May 25 04:00:00 2022 GMT
        Subject: CN=38f8ca2a-dcd0-4079-91b7-5a8491ea2077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:4a:82:fc:a5:ec:62:6e:39:40:f8:65:56:
                    3f:6e:bf:36:48:7c:95:83:f9:7b:b9:19:dd:50:9a:
                    dd:24:88:cf:fd:38:d2:1c:58:53:d0:25:2c:bb:86:
                    9a:21:e6:9c:5b:9a:65:95:df:ec:70:39:a2:82:a6:
                    f0:02:1e:35:ee:0f:a6:01:29:f3:c8:64:06:a2:e6:
                    0f:c9:88:a7:54:6b:32:ab:f8:25:2e:cb:ed:1e:17:
                    66:c2:81:47:cb:c2:45:52:e0:d5:80:f9:c5:e2:5b:
                    85:a9:58:d2:e3:cd:51:29:2e:58:b8:f6:49:db:77:
                    e2:cc:7a:81:da:33:b2:b5:b8:4e:36:0e:66:0d:a0:
                    21:f2:3c:f9:a3:58:64:32:d5:ac:92:4a:89:e7:eb:
                    1a:f0:55:84:b2:cd:7b:19:b0:20:3c:40:91:25:3d:
                    c1:e9:d5:9c:30:66:22:ef:ed:87:1a:f3:6b:df:a3:
                    9e:be:b9:34:e9:a0:68:37:88:c4:73:c9:ed:40:4b:
                    ee:52:f3:be:ab:84:96:83:99:3a:86:f4:8c:4b:1b:
                    26:09:9e:06:ed:33:d5:52:a5:e6:73:bf:55:0b:40:
                    12:26:cb:67:0b:09:95:32:fe:63:ba:51:c7:cf:a2:
                    26:98:fb:bf:48:9d:f0:13:9a:e8:7d:dd:26:a3:f4:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D8:85:1A:D5:C7:7B:4B:50:87:CE:2B:AD:42:45:4C:93:3E:34:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a7c42529-0e16-3181-b545-c702ef18a4ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:fa:9e:17:f9:46:78:02:71:60:24:39:d3:18:37:14:d3:7d:
         04:7a:d0:0a:27:c2:98:a8:0a:8e:6b:b4:7d:bc:d8:11:c1:8c:
         83:9e:fe:d8:7b:ba:06:22:db:d4:8a:ce:89:4f:60:44:d7:93:
         b9:88:a4:31:b0:cc:1b:3f:6f:ef:04:b3:c8:65:55:88:d8:91:
         5a:21:d7:40:f9:14:b1:20:5b:22:31:ca:fe:29:ab:06:ed:03:
         37:11:09:bc:35:8b:94:39:56:1b:f9:19:32:e1:8e:2f:59:b1:
         51:97:1d:cb:6b:5b:c3:b0:a7:5e:35:c0:c4:e7:b4:37:5e:84:
         aa:ef:9c:14:18:8c:a8:73:32:f9:79:5b:1d:2e:8e:a6:58:23:
         fb:33:63:db:3c:86:2b:42:ec:15:b9:f3:eb:cb:c0:3a:d9:8f:
         dc:cb:32:03:46:33:16:06:56:12:19:4a:4c:c2:4e:6d:66:ff:
         1d:36:05:e2:f7:ce:ba:af:d0:1e:3b:be:b1:b8:f7:54:47:ec:
         b6:ee:97:94:82:f1:61:11:2f:87:66:ca:68:48:90:63:02:37:
         90:84:b5:93:09:5b:ec:d7:db:68:eb:d3:b9:f0:e2:f2:8c:1d:
         56:6b:d0:77:72:1b:4f:40:9e:f7:44:49:7b:9f:af:8d:66:22:
         9d:c5:f6:4a
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcGO0LdwwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yMjA1MjUwNDAwMDBaMC8xLTArBgNVBAMTJDM4
ZjhjYTJhLWRjZDAtNDA3OS05MWI3LTVhODQ5MWVhMjA3NzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALfKSoL8pexibjlA+GVWP26/Nkh8lYP5e7kZ3VCa
3SSIz/040hxYU9AlLLuGmiHmnFuaZZXf7HA5ooKm8AIeNe4PpgEp88hkBqLmD8mI
p1RrMqv4JS7L7R4XZsKBR8vCRVLg1YD5xeJbhalY0uPNUSkuWLj2Sdt34sx6gdoz
srW4TjYOZg2gIfI8+aNYZDLVrJJKiefrGvBVhLLNexmwIDxAkSU9wenVnDBmIu/t
hxrza9+jnr65NOmgaDeIxHPJ7UBL7lLzvquEloOZOob0jEsbJgmeBu0z1VKl5nO/
VQtAEibLZwsJlTL+Y7pRx8+iJpj7v0id8BOa6H3dJqP0GrUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRL2IUa1cd7S1CHziutQkVMkz40iTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2E3YzQyNTI5LTBlMTYtMzE4
MS1iNTQ1LWM3MDJlZjE4YTRlYy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMwCOzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAGvqeF/lGeAJxYCQ50xg3FNN9BHrQCifCmKgKjmu0fbzYEcGMg57+2Hu6BiLb
1IrOiU9gRNeTuYikMbDMGz9v7wSzyGVViNiRWiHXQPkUsSBbIjHK/imrBu0DNxEJ
vDWLlDlWG/kZMuGOL1mxUZcdy2tbw7CnXjXAxOe0N16Equ+cFBiMqHMy+XlbHS6O
plgj+zNj2zyGK0LsFbnz68vAOtmP3MsyA0YzFgZWEhlKTMJObWb/HTYF4vfOuq/Q
Hju+sbj3VEfstu6XlILxYREvh2bKaEiQYwI3kIS1kwlb7NfbaOvTufDi8owdVmvQ
d3IbT0Ce90RJe5+vjWYincX2Sg==
-----END CERTIFICATE-----