Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/40cc30a4-f7db-34ab-bfb1-6a8aa429b903.roa
File:                     40cc30a4-f7db-34ab-bfb1-6a8aa429b903.roa (raw, json)
Hash identifier:          uJB7+Ictq5+j2EHItbOQpWzrLASP0Sbdjz8cXGcqwDs=
Subject key identifier:   35:F5:8B:26:5D:D4:3C:12:57:99:35:BB:59:27:A5:47:06:A1:69:36
Certificate issuer:       /CN=2777da36-faff-4a3d-a4c5-1a6ce89b194a
Certificate serial:       010D0C9F4328576D51CC73C042CFC1722A7CB9C6
Authority key identifier: E7:0D:6D:9A:55:D3:D6:4C:FC:9F:A8:21:DD:5F:19:99:24:8D:9A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/40cc30a4-f7db-34ab-bfb1-6a8aa429b903.roa
Signing time:             Tue 19 May 2020 01:11:56 +0000
ROA not before:           Mon 18 May 2020 04:00:00 +0000
ROA not after:            Sun 21 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        212.8.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:2a:7c:b9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2777da36-faff-4a3d-a4c5-1a6ce89b194a
        Validity
            Not Before: May 18 04:00:00 2020 GMT
            Not After : Aug 21 04:00:00 2022 GMT
        Subject: CN=27305e34-1224-430a-852a-f573942743d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:df:36:ab:62:f9:6d:22:9c:48:13:09:c1:
                    05:95:fb:79:86:e8:fd:74:ac:8c:5c:38:74:5c:d5:
                    8c:24:f8:59:e4:2a:56:72:be:32:8a:d6:8d:07:63:
                    87:2f:58:63:08:18:58:c2:19:70:de:ed:82:41:eb:
                    80:7c:04:6e:5a:6c:2b:d1:36:c6:54:e7:f3:da:6b:
                    6a:bc:75:09:68:21:4e:59:22:b5:5a:c2:14:d4:1f:
                    fd:d4:a8:10:17:2b:f0:59:cc:0f:f2:26:a8:e0:17:
                    0d:98:cf:39:d0:fe:2c:96:2b:b0:52:d2:22:7c:c7:
                    60:f0:c3:3a:d8:3b:e8:31:02:49:71:fa:dd:76:20:
                    24:9a:db:52:0b:4d:32:e0:e9:5f:d5:c9:67:2f:a2:
                    3b:84:62:4b:d1:93:7b:98:a7:62:cf:36:31:30:be:
                    69:b8:a5:24:6c:2a:dd:88:ba:15:a3:86:ad:ce:c2:
                    31:96:4a:24:40:31:f5:bf:91:3e:48:e7:ea:91:85:
                    f2:49:17:cc:fd:47:11:2c:6a:de:10:ce:25:44:59:
                    4d:b7:b9:5c:9e:d7:87:d5:1e:20:ad:30:12:1b:53:
                    e6:8b:8a:70:96:fa:e9:d3:f6:9f:ac:c6:86:8c:86:
                    fe:f3:81:b3:43:de:02:ce:8c:e5:2e:37:9d:28:21:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F5:8B:26:5D:D4:3C:12:57:99:35:BB:59:27:A5:47:06:A1:69:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/40cc30a4-f7db-34ab-bfb1-6a8aa429b903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/2777da36-faff-4a3d-a4c5-1a6ce89b194a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:0D:6D:9A:55:D3:D6:4C:FC:9F:A8:21:DD:5F:19:99:24:8D:9A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.8.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:0d:4c:c1:cf:3f:67:dd:c2:95:bb:6e:5a:b0:6a:03:fc:59:
         0c:95:0b:2b:35:91:20:f0:28:5f:be:23:ff:eb:47:8d:99:c0:
         2e:71:10:64:75:e1:cd:94:63:67:1b:01:e5:44:6e:36:9f:40:
         74:7b:35:43:58:de:af:14:55:96:fd:b4:6b:e6:2a:54:23:80:
         df:aa:cb:b2:72:f3:11:1d:b7:0c:f6:24:bf:cd:58:bd:af:67:
         9b:f3:13:1d:af:3a:a8:e9:94:aa:8e:4a:89:6a:88:d4:3d:38:
         28:8f:4b:c2:d4:39:88:49:e1:6c:08:e3:7b:fa:79:8a:2a:fb:
         04:bf:12:b0:c6:0d:22:ab:67:dd:fb:8d:13:4d:39:a6:f3:67:
         82:dc:56:e3:e7:ce:22:d8:c5:96:1a:b5:e8:b7:f1:30:f9:1a:
         7d:16:fc:13:8c:f5:d5:58:92:9d:33:0f:93:f9:cb:2f:85:0b:
         78:ed:d8:86:e3:57:50:d6:3f:81:6f:5d:fa:4c:6c:8b:60:8e:
         fa:87:53:c9:49:40:40:e5:f1:17:c5:34:0b:55:d7:42:f0:73:
         7d:8b:6e:cc:5b:90:b8:94:34:f2:b8:2f:7c:d1:25:d6:a0:81:
         8a:2f:69:9a:9e:23:9c:2d:08:4f:df:0b:4c:15:0b:a2:12:a7:
         ef:35:95:85
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcip8ucYwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI3NzdkYTM2LWZhZmYtNGEzZC1hNGM1LTFhNmNlODliMTk0
YTAeFw0yMDA1MTgwNDAwMDBaFw0yMjA4MjEwNDAwMDBaMC8xLTArBgNVBAMTJDI3
MzA1ZTM0LTEyMjQtNDMwYS04NTJhLWY1NzM5NDI3NDNkODCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMr/3zarYvltIpxIEwnBBZX7eYbo/XSsjFw4dFzV
jCT4WeQqVnK+MorWjQdjhy9YYwgYWMIZcN7tgkHrgHwEblpsK9E2xlTn89prarx1
CWghTlkitVrCFNQf/dSoEBcr8FnMD/ImqOAXDZjPOdD+LJYrsFLSInzHYPDDOtg7
6DECSXH63XYgJJrbUgtNMuDpX9XJZy+iO4RiS9GTe5inYs82MTC+abilJGwq3Yi6
FaOGrc7CMZZKJEAx9b+RPkjn6pGF8kkXzP1HESxq3hDOJURZTbe5XJ7Xh9UeIK0w
EhtT5ouKcJb66dP2n6zGhoyG/vOBs0PeAs6M5S43nSghAukCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQ19YsmXdQ8EleZNbtZJ6VHBqFpNjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjc3N2Rh
MzYtZmFmZi00YTNkLWE0YzUtMWE2Y2U4OWIxOTRhLzQwY2MzMGE0LWY3ZGItMzRh
Yi1iZmIxLTZhOGFhNDI5YjkwMy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzI3NzdkYTM2LWZhZmYtNGEzZC1hNGM1
LTFhNmNlODliMTk0YS8yNzc3ZGEzNi1mYWZmLTRhM2QtYTRjNS0xYTZjZTg5YjE5
NGEuY3JsMB8GA1UdIwQYMBaAFOcNbZpV09ZM/J+oId1fGZkkjZruMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvMjc3N2RhMzYtZmFmZi00YTNkLWE0YzUtMWE2Y2U4
OWIxOTRhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQI8TBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAWQ1Mwc8/Z93ClbtuWrBqA/xZDJULKzWRIPAoX74j/+tHjZnALnEQZHXhzZRj
ZxsB5URuNp9AdHs1Q1jerxRVlv20a+YqVCOA36rLsnLzER23DPYkv81Yva9nm/MT
Ha86qOmUqo5KiWqI1D04KI9LwtQ5iEnhbAjje/p5iir7BL8SsMYNIqtn3fuNE005
pvNngtxW4+fOItjFlhq16LfxMPkafRb8E4z11ViSnTMPk/nLL4ULeO3YhuNXUNY/
gW9d+kxsi2CO+odTyUlAQOXxF8U0C1XXQvBzfYtuzFuQuJQ08rgvfNEl1qCBii9p
mp4jnC0IT98LTBULohKn7zWVhQ==
-----END CERTIFICATE-----