Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/be4b736f-8d3b-37d4-a410-f52fc6669184.roa
File:                     be4b736f-8d3b-37d4-a410-f52fc6669184.roa (raw, json)
Hash identifier:          isE6SEjrRjUKh7qT09ZsUyYBu9voyeAOozgKrvUJtnY=
Subject key identifier:   57:16:63:7C:31:AE:BF:E2:1D:76:1D:9B:68:7D:AD:7C:AC:32:13:A9
Certificate issuer:       /CN=ef0b1b44-6f91-4e5d-a42c-54259da394ab
Certificate serial:       010D0C9F4328576D51CC73C042CFC17219A80B00
Authority key identifier: 1B:98:1D:18:FD:64:C4:44:8D:CF:25:CA:BB:A5:70:87:31:12:91:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/be4b736f-8d3b-37d4-a410-f52fc6669184.roa
Signing time:             Fri 15 May 2020 18:45:42 +0000
ROA not before:           Fri 15 May 2020 04:00:00 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     393990
IP address blocks:        192.160.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:19:a8:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0b1b44-6f91-4e5d-a42c-54259da394ab
        Validity
            Not Before: May 15 04:00:00 2020 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=da70c24a-3c4e-45f3-bcb7-a29ea0fc7b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:f1:fa:e0:c8:54:74:78:85:da:79:60:81:
                    c9:5a:ee:8a:90:2e:a1:a8:c7:d1:29:bf:2b:6c:bb:
                    11:97:fb:ce:95:92:af:1b:48:e2:ee:9f:63:be:8c:
                    01:de:cc:e8:b7:3d:b4:ef:c9:2b:89:a1:4d:e6:40:
                    66:9d:ed:fb:bd:3c:ab:27:46:c5:1b:23:5f:51:73:
                    a9:79:fe:86:29:1d:74:ff:f5:30:b7:d8:ff:d7:aa:
                    27:ee:4d:8b:b5:71:e3:b5:fa:9d:8b:f7:9c:11:20:
                    aa:be:a5:a8:7e:3d:ca:96:9a:bd:ad:48:c3:99:cf:
                    12:26:44:e7:ea:45:76:55:3d:7f:95:81:04:26:86:
                    4f:b6:b7:f3:83:cb:7b:00:7a:6d:f9:af:ad:ec:ac:
                    5a:4f:d5:fc:ba:cc:17:63:43:cd:fb:97:f9:19:63:
                    b3:71:67:7f:bf:1e:26:ff:45:07:af:6a:76:d0:1c:
                    68:16:1d:5a:80:2d:c5:5a:a1:b6:75:0a:b5:e2:d9:
                    9a:7d:0a:f4:f1:9c:ba:91:78:9a:11:b9:f7:ef:21:
                    f8:35:bd:54:74:bc:9b:64:e3:13:f4:09:43:57:cc:
                    49:01:ed:79:0a:d4:49:0e:f5:bb:f7:bb:3d:db:63:
                    fe:05:cf:3c:7b:a7:c7:e2:6c:7f:77:df:39:25:24:
                    2e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:16:63:7C:31:AE:BF:E2:1D:76:1D:9B:68:7D:AD:7C:AC:32:13:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/be4b736f-8d3b-37d4-a410-f52fc6669184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/ef0b1b44-6f91-4e5d-a42c-54259da394ab.crl

            X509v3 Authority Key Identifier:
                keyid:1B:98:1D:18:FD:64:C4:44:8D:CF:25:CA:BB:A5:70:87:31:12:91:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:3f:01:6c:af:03:4d:d1:07:95:df:c1:45:2b:10:e2:b0:c6:
         f9:07:74:dd:0d:2e:5a:37:79:56:31:72:51:cd:4f:d5:9d:5b:
         a4:35:be:c0:ca:8c:02:b0:b9:fc:3f:f7:a1:0e:4d:2f:1c:92:
         24:52:c2:a8:6e:84:63:4f:03:a8:d0:cd:bc:f5:7e:8b:fb:f6:
         a5:19:41:3a:ab:bf:23:f2:9b:2e:3b:55:d9:c9:da:c8:d2:b3:
         78:c8:d1:b6:22:33:2a:d2:0c:b5:68:af:35:62:03:c1:5f:18:
         a0:65:72:46:c8:e1:11:46:36:ab:90:f1:4b:6c:b7:09:ad:9b:
         35:8d:a1:52:3a:05:30:29:e9:07:4b:3d:24:9e:88:f7:5b:1a:
         b7:85:15:4e:2f:38:d9:ef:52:71:e3:0f:53:c3:ff:9d:4f:21:
         cb:bb:3d:9a:d4:5b:b0:52:dc:6c:3a:e2:9b:45:d4:70:50:19:
         e5:46:89:69:21:e7:a5:9c:48:dc:83:c9:71:ae:c8:36:a5:60:
         eb:de:02:d5:85:98:33:d8:40:d3:26:aa:15:e6:35:6b:81:5b:
         8a:6b:15:d9:4e:49:1f:6a:f6:ca:05:f3:5d:d0:2f:1e:da:7e:
         e1:64:62:13:04:d2:5c:e7:0a:8a:41:ce:08:c2:34:88:31:40:
         89:7b:c5:53
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BchmoCwAwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGVmMGIxYjQ0LTZmOTEtNGU1ZC1hNDJjLTU0MjU5ZGEzOTRh
YjAeFw0yMDA1MTUwNDAwMDBaFw0yMjA4MTgwNDAwMDBaMC8xLTArBgNVBAMTJGRh
NzBjMjRhLTNjNGUtNDVmMy1iY2I3LWEyOWVhMGZjN2IxYjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALMZ8frgyFR0eIXaeWCByVruipAuoajH0Sm/K2y7
EZf7zpWSrxtI4u6fY76MAd7M6Lc9tO/JK4mhTeZAZp3t+708qydGxRsjX1FzqXn+
hikddP/1MLfY/9eqJ+5Ni7Vx47X6nYv3nBEgqr6lqH49ypaava1Iw5nPEiZE5+pF
dlU9f5WBBCaGT7a384PLewB6bfmvreysWk/V/LrMF2NDzfuX+Rljs3Fnf78eJv9F
B69qdtAcaBYdWoAtxVqhtnUKteLZmn0K9PGcupF4mhG59+8h+DW9VHS8m2TjE/QJ
Q1fMSQHteQrUSQ71u/e7Pdtj/gXPPHunx+Jsf3ffOSUkLl0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRXFmN8Ma6/4h12HZtofa18rDITqTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYwYjFi
NDQtNmY5MS00ZTVkLWE0MmMtNTQyNTlkYTM5NGFiL2JlNGI3MzZmLThkM2ItMzdk
NC1hNDEwLWY1MmZjNjY2OTE4NC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2VmMGIxYjQ0LTZmOTEtNGU1ZC1hNDJj
LTU0MjU5ZGEzOTRhYi9lZjBiMWI0NC02ZjkxLTRlNWQtYTQyYy01NDI1OWRhMzk0
YWIuY3JsMB8GA1UdIwQYMBaAFBuYHRj9ZMREjc8lyrulcIcxEpGvMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvZWYwYjFiNDQtNmY5MS00ZTVkLWE0MmMtNTQyNTlk
YTM5NGFiLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMCg/zBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAjj8BbK8DTdEHld/BRSsQ4rDG+Qd03Q0uWjd5VjFyUc1P1Z1bpDW+wMqMArC5
/D/3oQ5NLxySJFLCqG6EY08DqNDNvPV+i/v2pRlBOqu/I/KbLjtV2cnayNKzeMjR
tiIzKtIMtWivNWIDwV8YoGVyRsjhEUY2q5DxS2y3Ca2bNY2hUjoFMCnpB0s9JJ6I
91sat4UVTi842e9SceMPU8P/nU8hy7s9mtRbsFLcbDrim0XUcFAZ5UaJaSHnpZxI
3IPJca7INqVg694C1YWYM9hA0yaqFeY1a4FbimsV2U5JH2r2ygXzXdAvHtp+4WRi
EwTSXOcKikHOCMI0iDFAiXvFUw==
-----END CERTIFICATE-----