Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/d4252ec4-6761-39f8-8c65-70b25d5fae7f.roa
File:                     d4252ec4-6761-39f8-8c65-70b25d5fae7f.roa (raw, json)
Hash identifier:          l5sy7n0o+YknQpfsVyGX+siL6NmfGaCytIbNvePDZgs=
Subject key identifier:   D6:84:9E:18:9B:47:24:2C:35:E0:9F:1B:C6:97:F8:08:89:51:B0:C7
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F43285837B1DF2561F837BCBA9F511D80
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/d4252ec4-6761-39f8-8c65-70b25d5fae7f.roa
Signing time:             Fri 17 Jul 2020 04:00:00 +0000
ROA not before:           Fri 17 Jul 2020 04:00:00 +0000
ROA not after:            Wed 25 Jan 2023 05:00:00 +0000
asID:                     812
IP address blocks:        72.143.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:b1:df:25:61:f8:37:bc:ba:9f:51:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Jul 17 04:00:00 2020 GMT
            Not After : Jan 25 05:00:00 2023 GMT
        Subject: CN=a5971ae3-ac9e-4a2d-9713-4521b6d829d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:bf:76:53:eb:b4:37:9d:fe:4a:9b:80:01:
                    9f:3d:6b:77:53:12:22:56:32:ad:33:6b:60:23:5e:
                    dd:44:97:c9:ce:4b:4f:f9:6f:91:67:0b:32:3d:b3:
                    2a:ac:21:08:65:25:50:f9:77:bb:89:78:44:24:f2:
                    f7:b0:ee:37:94:20:2f:1c:5d:85:5a:82:ad:62:8d:
                    3b:b4:32:79:06:c8:e9:02:83:13:d4:b9:58:b5:61:
                    43:87:6f:1e:23:2d:36:8a:f3:ff:43:93:a4:2e:ca:
                    fa:3c:84:5e:9b:bd:30:b5:c3:6b:30:2c:fa:35:34:
                    92:91:06:72:7c:c7:83:fa:eb:8b:03:92:1b:80:e2:
                    c0:24:91:38:46:bb:74:10:15:82:54:ec:d8:45:8f:
                    a7:23:53:06:de:98:97:8b:54:f8:2e:dc:35:d3:c5:
                    64:2d:c4:53:a2:73:7a:d6:21:3e:34:c8:ac:b5:12:
                    0d:af:b0:7c:2b:8e:b6:1f:60:fa:0a:93:6b:35:12:
                    22:cd:45:ed:26:09:b1:5e:97:f2:b0:b9:9b:24:5c:
                    33:6d:2e:30:bb:cd:b7:b0:33:de:4f:19:fb:d2:3e:
                    08:05:aa:59:f6:2d:6d:ca:21:c4:47:b7:7b:ab:a9:
                    ea:50:d0:e6:2d:8e:e4:ab:90:44:69:76:55:4a:f8:
                    ef:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:84:9E:18:9B:47:24:2C:35:E0:9F:1B:C6:97:F8:08:89:51:B0:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/d4252ec4-6761-39f8-8c65-70b25d5fae7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.143.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2e:9e:84:53:96:16:d9:29:29:20:ba:0f:15:30:db:c4:16:
         3f:24:71:3a:3e:f1:99:64:94:b0:cb:b4:bf:11:ce:03:4b:f9:
         47:b1:04:05:83:bd:11:58:56:98:e7:df:54:24:3e:e1:e5:76:
         43:21:18:0c:11:ab:eb:73:30:72:67:ca:56:da:4f:2f:6d:72:
         e2:f8:e5:9f:ad:2d:c6:58:6e:e4:c4:4a:d2:9e:5a:02:ae:ad:
         11:2b:3b:8c:d0:10:f7:f8:d5:7f:e2:32:8f:1f:ce:61:3c:4b:
         d8:e6:28:cb:0e:dc:b4:b9:2e:60:90:f4:94:53:ee:cd:43:b3:
         ce:f1:2a:15:ce:2a:3a:15:5b:37:d6:3f:a5:40:c2:a5:ed:73:
         e0:85:a7:74:96:c7:60:90:39:f4:5f:12:93:f3:b5:32:3e:4a:
         b8:07:43:e6:af:57:e7:ca:d1:22:e5:8a:d2:4b:2a:fb:08:df:
         c5:02:3f:40:59:e8:7c:8a:5d:09:cd:e6:e3:19:f5:38:6f:bd:
         7b:c4:9b:f6:bd:ae:b4:b3:01:95:be:80:c3:17:45:f6:f7:71:
         69:2d:54:ea:1b:5f:97:f1:16:c1:80:5c:ee:05:bb:06:61:8d:
         ef:3c:7e:f0:d0:2f:34:db:0f:b6:9e:fd:39:e2:e3:97:38:d6:
         9b:37:6d:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDex3yVh+De8up9RHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUyNzk5MTgtZjViMS00M2Y3LTk3NDgtOTVhYTBjNjQ2
OWYzMB4XDTIwMDcxNzA0MDAwMFoXDTIzMDEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
YTU5NzFhZTMtYWM5ZS00YTJkLTk3MTMtNDUyMWI2ZDgyOWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQm/dlPrtDed/kqbgAGfPWt3UxIiVjKtM2tg
I17dRJfJzktP+W+RZwsyPbMqrCEIZSVQ+Xe7iXhEJPL3sO43lCAvHF2FWoKtYo07
tDJ5BsjpAoMT1LlYtWFDh28eIy02ivP/Q5OkLsr6PIRem70wtcNrMCz6NTSSkQZy
fMeD+uuLA5IbgOLAJJE4Rrt0EBWCVOzYRY+nI1MG3piXi1T4Ltw108VkLcRTonN6
1iE+NMistRINr7B8K462H2D6CpNrNRIizUXtJgmxXpfysLmbJFwzbS4wu823sDPe
Txn70j4IBapZ9i1tyiHER7d7q6nqUNDmLY7kq5BEaXZVSvjvYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNaEnhibRyQsNeCfG8aX+AiJUbDHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNTI3
OTkxOC1mNWIxLTQzZjctOTc0OC05NWFhMGM2NDY5ZjMvZDQyNTJlYzQtNjc2MS0z
OWY4LThjNjUtNzBiMjVkNWZhZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDUyNzk5MTgtZjViMS00M2Y3LTk3
NDgtOTVhYTBjNjQ2OWYzLzA1Mjc5OTE4LWY1YjEtNDNmNy05NzQ4LTk1YWEwYzY0
NjlmMy5jcmwwHwYDVR0jBBgwFoAUcgH1iAdeZMnpAPYfP2ut8NzCz9YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNTI3OTkxOC1mNWIxLTQzZjctOTc0OC05NWFh
MGM2NDY5ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESI/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYunoRTlhbZKSkgug8VMNvEFj8kcTo+8ZlklLDLtL8RzgNL+UexBAWD
vRFYVpjn31QkPuHldkMhGAwRq+tzMHJnylbaTy9tcuL45Z+tLcZYbuTEStKeWgKu
rRErO4zQEPf41X/iMo8fzmE8S9jmKMsO3LS5LmCQ9JRT7s1Ds87xKhXOKjoVWzfW
P6VAwqXtc+CFp3SWx2CQOfRfEpPztTI+SrgHQ+avV+fK0SLlitJLKvsI38UCP0BZ
6HyKXQnN5uMZ9ThvvXvEm/a9rrSzAZW+gMMXRfb3cWktVOobX5fxFsGAXO4FuwZh
je88fvDQLzTbD7ae/Tni45c41ps3bSI=
-----END CERTIFICATE-----