Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/9be94a32-4688-36c0-9118-02b5c216236d.roa
File:                     9be94a32-4688-36c0-9118-02b5c216236d.roa (raw, json)
Hash identifier:          v2vtuXbwbkRiz1+q6r2FMiRMFp5t9PivcdaUvIgL+zo=
Subject key identifier:   5A:28:30:40:19:7C:7A:27:DA:9D:5C:BE:1F:43:D5:99:48:C0:77:A4
Certificate issuer:       /CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Certificate serial:       010D0C9F4328576D51CC73C042CFC1735D3AE023
Authority key identifier: C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/9be94a32-4688-36c0-9118-02b5c216236d.roa
Signing time:             Fri 17 Jul 2020 14:43:26 +0000
ROA not before:           Wed 15 Jul 2020 04:00:00 +0000
ROA not after:            Thu 20 Oct 2022 04:00:00 +0000
asID:                     27364
IP address blocks:        24.129.240.0/20 maxlen: 20
                          24.129.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:5d:3a:e0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044f7659-113e-4b3c-be9d-200821bc9a5b
        Validity
            Not Before: Jul 15 04:00:00 2020 GMT
            Not After : Oct 20 04:00:00 2022 GMT
        Subject: CN=555bb1b5-7bae-41f0-a366-0d40ae02a9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:18:87:1d:1a:7a:17:70:f7:03:89:54:bf:
                    fc:b1:b6:c1:c8:df:ec:eb:38:c4:a2:f9:dc:ab:cb:
                    84:7b:49:cb:36:8c:ce:8e:1a:e9:d2:c1:cd:05:10:
                    db:29:c0:e6:79:b2:99:46:37:65:3d:53:8c:5c:04:
                    3b:3f:5f:5e:b3:5d:08:75:4e:6e:c4:b4:24:53:0a:
                    68:bf:92:57:dc:7c:26:9e:06:8d:da:7e:d7:b9:c2:
                    51:ef:f4:ea:9b:56:cd:fe:5c:98:08:c9:e7:c1:9c:
                    56:a1:71:bc:64:d4:e2:98:08:8b:5c:f2:f8:fb:32:
                    d1:5a:11:08:3e:d3:44:ba:f7:de:34:f2:71:0a:cd:
                    d9:2d:a3:60:c9:0a:b9:68:8e:49:47:6d:8a:9e:4a:
                    d2:cf:0f:a7:75:44:a4:cc:66:7e:05:54:9d:ea:93:
                    ae:0c:e5:68:a2:99:f7:bc:31:b5:94:e2:35:0e:c3:
                    94:f2:a0:b0:53:ab:0e:6f:a2:a2:4c:fb:d2:b4:80:
                    b6:16:d9:72:4a:47:e0:2f:a0:d0:75:b5:2b:38:f2:
                    df:57:e3:b8:62:07:e3:b1:46:91:0e:88:24:08:29:
                    9e:6e:09:2f:f6:7f:cf:4b:d2:95:f1:10:b5:5e:16:
                    c8:2b:da:b8:ee:75:e8:d1:41:81:4b:fd:2f:c1:2d:
                    38:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:28:30:40:19:7C:7A:27:DA:9D:5C:BE:1F:43:D5:99:48:C0:77:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/9be94a32-4688-36c0-9118-02b5c216236d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl

            X509v3 Authority Key Identifier:
                keyid:C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.129.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:5a:94:f2:ba:31:cd:33:44:f3:88:15:fd:b0:4e:ec:d3:a4:
         72:99:aa:fd:cb:8f:d2:e5:12:d9:08:ed:9d:cb:ae:82:f8:b0:
         83:be:9a:3d:96:e6:3b:03:f7:9a:8f:85:65:e6:c9:bd:9c:d4:
         77:9e:d5:26:c9:a5:c1:06:07:e2:01:9f:13:53:b7:68:21:54:
         d4:51:ed:84:d8:97:e6:b4:9c:85:20:45:01:c3:4c:21:85:74:
         18:1e:e5:a7:63:7c:e9:9d:5d:11:e0:d4:f1:36:b6:7b:3c:5d:
         56:3d:50:ec:73:0b:d2:9a:bb:ea:78:58:06:d0:e8:a0:07:e9:
         be:01:39:ee:7c:34:11:77:7b:6e:d4:70:51:13:0d:79:a3:56:
         8a:e0:02:01:08:43:b4:0d:3b:b7:80:29:60:2e:0c:44:55:90:
         88:ca:96:5f:b3:ac:11:4f:36:5d:73:5c:16:c4:3f:ed:a8:7b:
         9e:e9:f5:ec:71:fd:c4:c4:52:32:50:16:92:0d:77:b9:27:35:
         db:da:28:4e:8a:ed:fc:b8:7c:50:35:53:33:da:7e:9f:c3:58:
         4b:88:6a:3b:cd:9b:b9:93:fc:87:79:10:7c:ec:19:3b:9a:44:
         ec:70:57:6e:0e:8c:1e:d5:8d:7e:84:8d:9a:a2:f5:04:12:de:
         ab:1e:16:6a
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc1064CMwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDA0NGY3NjU5LTExM2UtNGIzYy1iZTlkLTIwMDgyMWJjOWE1
YjAeFw0yMDA3MTUwNDAwMDBaFw0yMjEwMjAwNDAwMDBaMC8xLTArBgNVBAMTJDU1
NWJiMWI1LTdiYWUtNDFmMC1hMzY2LTBkNDBhZTAyYTlkNTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKMbGIcdGnoXcPcDiVS//LG2wcjf7Os4xKL53KvL
hHtJyzaMzo4a6dLBzQUQ2ynA5nmymUY3ZT1TjFwEOz9fXrNdCHVObsS0JFMKaL+S
V9x8Jp4Gjdp+17nCUe/06ptWzf5cmAjJ58GcVqFxvGTU4pgIi1zy+Psy0VoRCD7T
RLr33jTycQrN2S2jYMkKuWiOSUdtip5K0s8Pp3VEpMxmfgVUneqTrgzlaKKZ97wx
tZTiNQ7DlPKgsFOrDm+iokz70rSAthbZckpH4C+g0HW1Kzjy31fjuGIH47FGkQ6I
JAgpnm4JL/Z/z0vSlfEQtV4WyCvauO516NFBgUv9L8EtOFkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRaKDBAGXx6J9qdXL4fQ9WZSMB3pDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDQ0Zjc2
NTktMTEzZS00YjNjLWJlOWQtMjAwODIxYmM5YTViLzliZTk0YTMyLTQ2ODgtMzZj
MC05MTE4LTAyYjVjMjE2MjM2ZC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzA0NGY3NjU5LTExM2UtNGIzYy1iZTlk
LTIwMDgyMWJjOWE1Yi8wNDRmNzY1OS0xMTNlLTRiM2MtYmU5ZC0yMDA4MjFiYzlh
NWIuY3JsMB8GA1UdIwQYMBaAFMO6OXUfTY3vEV/94Rc9fuymgYDOMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvMDQ0Zjc2NTktMTEzZS00YjNjLWJlOWQtMjAwODIx
YmM5YTViLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBBiB8DBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAWFqU8roxzTNE84gV/bBO7NOkcpmq/cuP0uUS2Qjtncuugviwg76aPZbmOwP3
mo+FZebJvZzUd57VJsmlwQYH4gGfE1O3aCFU1FHthNiX5rSchSBFAcNMIYV0GB7l
p2N86Z1dEeDU8Ta2ezxdVj1Q7HML0pq76nhYBtDooAfpvgE57nw0EXd7btRwURMN
eaNWiuACAQhDtA07t4ApYC4MRFWQiMqWX7OsEU82XXNcFsQ/7ah7nun17HH9xMRS
MlAWkg13uSc129ooTort/Lh8UDVTM9p+n8NYS4hqO82buZP8h3kQfOwZO5pE7HBX
bg6MHtWNfoSNmqL1BBLeqx4Wag==
-----END CERTIFICATE-----