Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0834de8d-4bbb-3cd1-8000-d441b894b70f.roa
File:                     0834de8d-4bbb-3cd1-8000-d441b894b70f.roa (raw, json)
Hash identifier:          Atm3e7mATXZU86fLZqxs797NDwyUiqbb1BsxqnFOk7o=
Subject key identifier:   AF:E4:34:53:0F:18:2B:EB:6F:32:4D:36:59:15:D4:EE:F3:30:01:07
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328576D51CC73C042CFC173FE6A1C55
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0834de8d-4bbb-3cd1-8000-d441b894b70f.roa
Signing time:             Mon 17 Aug 2020 04:00:00 +0000
ROA not before:           Mon 17 Aug 2020 04:00:00 +0000
ROA not after:            Sun 20 Nov 2022 05:00:00 +0000
asID:                     6453
IP address blocks:        2001:5a0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:fe:6a:1c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Aug 17 04:00:00 2020 GMT
            Not After : Nov 20 05:00:00 2022 GMT
        Subject: CN=7ab8ace1-a153-4334-ac7e-ce2369b8c164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8f:96:ab:0c:0b:8b:9d:7c:71:c5:6d:b2:d4:
                    03:be:b8:9a:2a:82:46:c8:4e:dc:f4:32:4e:de:61:
                    d9:73:7a:c8:22:2e:dc:73:61:e7:98:fc:69:13:da:
                    a8:bd:a4:06:40:83:ae:e1:ce:f4:df:e6:d6:41:a5:
                    c4:81:e5:5d:ca:f5:49:18:16:94:02:17:91:9a:a9:
                    af:71:72:aa:95:fd:88:f0:23:7d:6a:ba:5d:58:8b:
                    79:4d:fd:5c:41:66:6b:4d:9f:ae:68:d5:b3:99:44:
                    cc:33:ba:b9:a8:7f:e1:c7:3e:03:5e:04:62:14:18:
                    a2:bf:06:ea:ec:8c:a2:29:28:71:7c:8f:b0:f2:8d:
                    85:96:7c:9a:06:dd:9f:83:39:69:70:4e:9b:db:9b:
                    df:a0:8b:5b:0d:66:91:1b:61:4c:8c:f6:89:0f:01:
                    df:51:7c:05:89:f9:6c:87:cc:46:c5:ad:de:10:1d:
                    fc:3f:e6:53:e2:26:ab:ce:40:36:67:86:a7:21:39:
                    ba:5c:ce:36:ed:48:d3:3b:39:04:e9:d6:26:c8:be:
                    2c:e6:ec:ec:ab:ff:7e:d4:04:cd:4a:41:9e:81:96:
                    fa:25:54:73:51:a6:e8:17:e8:38:2a:ff:a9:54:31:
                    20:3f:ab:dd:58:b7:a7:56:eb:39:6c:db:1d:4b:57:
                    b3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E4:34:53:0F:18:2B:EB:6F:32:4D:36:59:15:D4:EE:F3:30:01:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0834de8d-4bbb-3cd1-8000-d441b894b70f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ea:e6:90:37:fc:9f:93:1a:f5:22:47:75:ad:77:8f:29:eb:
         21:57:88:a1:de:a1:bd:df:aa:d7:c6:4c:4b:e7:1b:8c:79:3a:
         5e:06:a2:82:d0:4e:bc:95:d4:83:f4:72:9e:21:61:2d:0d:92:
         37:a1:9f:56:57:28:20:6c:70:a8:e7:c0:34:55:cc:f1:0c:8b:
         34:4a:95:ec:4e:4b:3e:06:9a:c5:0e:28:73:0c:3b:39:67:54:
         cc:72:70:94:f8:d4:c6:3f:4e:b1:f8:f9:6b:4e:0b:d2:e5:03:
         a1:10:f6:60:0c:d3:b0:f3:6f:81:6d:71:33:da:c7:3a:f9:19:
         71:1e:55:cd:aa:7b:c9:62:f1:ec:9c:95:5c:e5:58:a4:9d:b5:
         1a:c6:32:f9:7a:30:49:48:51:f4:d3:04:7a:51:04:ba:55:1d:
         68:0a:44:fc:ce:25:25:7f:3c:4d:53:79:c0:bf:41:94:57:64:
         38:77:d0:76:2c:8e:99:10:cb:e1:9a:f0:82:27:18:1c:a4:12:
         59:8f:af:a2:ec:c3:82:f9:d9:5d:57:ee:93:49:5f:36:6d:06:
         7c:84:cf:10:a5:e0:04:15:70:b7:ec:50:2c:b2:e8:97:86:c7:
         32:4f:d9:9a:14:39:b9:26:f6:f6:85:ae:d4:60:3c:7d:4a:5c:
         bc:21:35:c3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc/5qHFUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTIwMDgxNzA0MDAwMFoXDTIyMTEyMDA1MDAwMFowLzEtMCsGA1UEAxMk
N2FiOGFjZTEtYTE1My00MzM0LWFjN2UtY2UyMzY5YjhjMTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74+WqwwLi518ccVtstQDvriaKoJGyE7c9DJO
3mHZc3rIIi7cc2HnmPxpE9qovaQGQIOu4c703+bWQaXEgeVdyvVJGBaUAheRmqmv
cXKqlf2I8CN9arpdWIt5Tf1cQWZrTZ+uaNWzmUTMM7q5qH/hxz4DXgRiFBiivwbq
7IyiKShxfI+w8o2FlnyaBt2fgzlpcE6b25vfoItbDWaRG2FMjPaJDwHfUXwFifls
h8xGxa3eEB38P+ZT4iarzkA2Z4anITm6XM427UjTOzkE6dYmyL4s5uzsq/9+1ATN
SkGegZb6JVRzUaboF+g4Kv+pVDEgP6vdWLenVus5bNsdS1ez5QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFK/kNFMPGCvrbzJNNlkV1O7zMAEHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMDgzNGRlOGQtNGJiYi0z
Y2QxLTgwMDAtZDQ0MWI4OTRiNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEFoDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAH6uaQN/yfkxr1Ikd1rXePKeshV4ih3qG936rXxkxL5xuMeTpeBqKC
0E68ldSD9HKeIWEtDZI3oZ9WVyggbHCo58A0VczxDIs0SpXsTks+BprFDihzDDs5
Z1TMcnCU+NTGP06x+PlrTgvS5QOhEPZgDNOw82+BbXEz2sc6+RlxHlXNqnvJYvHs
nJVc5ViknbUaxjL5ejBJSFH00wR6UQS6VR1oCkT8ziUlfzxNU3nAv0GUV2Q4d9B2
LI6ZEMvhmvCCJxgcpBJZj6+i7MOC+dldV+6TSV82bQZ8hM8QpeAEFXC37FAssuiX
hscyT9maFDm5Jvb2ha7UYDx9Sly8ITXD
-----END CERTIFICATE-----