Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/04e866d9-d671-3dec-975c-7442fccb43b6.roa
File:                     04e866d9-d671-3dec-975c-7442fccb43b6.roa (raw, json)
Hash identifier:          pTI1et6yurp+JmtvE9w+fYGb4E0QPh7mi7pk06qxprQ=
Subject key identifier:   E2:39:2F:96:CB:A8:E6:94:B9:E5:85:59:82:10:27:4D:8F:9D:38:F6
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837BDA9274BD1E838E7BC270580
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/04e866d9-d671-3dec-975c-7442fccb43b6.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 29 Jan 2023 05:00:00 +0000
asID:                     25668
IP address blocks:        207.34.148.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:bd:a9:27:4b:d1:e8:38:e7:bc:27:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Jan 29 05:00:00 2023 GMT
        Subject: CN=bd903b9d-a3ee-49db-bbd5-d0f24aedb670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:1d:55:eb:b6:eb:fd:3c:b5:0d:51:5c:9d:
                    0f:b5:c9:c3:f6:26:57:77:05:8a:81:e8:83:b4:93:
                    22:4d:12:c7:07:ec:90:86:98:dc:4a:4e:d5:43:f7:
                    d9:03:ef:e3:b5:8b:fe:5c:06:63:47:4e:cd:a6:3b:
                    77:71:57:70:b8:13:14:f7:55:25:55:a9:c3:40:18:
                    85:9c:c7:db:3f:b5:8b:11:b3:68:8d:c1:c7:f3:62:
                    bd:b8:87:84:70:a0:d6:5c:39:a4:f8:79:6a:ec:d6:
                    0e:e6:9c:b3:6b:10:d5:16:53:90:61:b5:05:63:3a:
                    e9:b6:f5:80:44:e4:63:86:c8:f4:f0:b7:10:44:04:
                    81:43:46:4c:94:c4:22:33:74:27:48:11:34:17:a0:
                    2b:dd:d4:00:5b:45:41:ee:c4:4a:df:74:9c:d3:ac:
                    24:a3:52:98:d2:fe:e2:f9:29:20:8c:05:1c:1b:69:
                    d3:75:bf:1e:7f:ae:2f:28:b0:27:91:16:49:31:7a:
                    b7:e7:b6:6d:74:61:fc:8a:7b:76:4c:2c:9e:18:c9:
                    bb:5e:96:ed:07:97:38:84:4b:4a:2a:81:8b:ae:03:
                    90:ad:62:09:e1:a4:48:7b:b5:d6:29:fe:4e:d6:63:
                    86:be:b0:d7:d9:b4:52:33:21:2d:e9:fa:f3:ae:7c:
                    1e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:39:2F:96:CB:A8:E6:94:B9:E5:85:59:82:10:27:4D:8F:9D:38:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/04e866d9-d671-3dec-975c-7442fccb43b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:ec:15:68:fb:ba:d0:52:6b:6f:41:03:6a:4a:6c:ef:c7:7e:
         c8:bc:18:6b:a6:6c:32:aa:45:d7:be:a5:13:45:d2:fd:89:ae:
         e9:cb:0b:2f:74:38:4f:4c:1e:46:67:af:14:42:2d:e5:c0:bd:
         46:c8:61:bf:f2:86:f3:ca:34:28:39:45:97:b9:bc:7c:c8:64:
         7d:51:28:4d:d8:50:cd:05:61:93:72:1f:a1:a2:45:4f:a5:09:
         c5:5d:48:2c:99:c7:72:1a:fb:b8:ed:ea:1d:d7:f5:85:f1:d5:
         01:71:9f:3c:3a:3a:8f:db:5c:72:4c:9b:7f:04:7a:0c:a4:3a:
         da:45:3f:dd:37:c9:dd:5c:37:31:f7:58:1f:64:56:a8:68:c2:
         d0:19:7a:e7:d4:65:52:8f:77:d4:ac:7c:77:d3:05:95:aa:eb:
         64:27:ac:a0:f3:b3:fd:b8:ac:f5:6c:33:31:30:d9:92:ea:a5:
         57:23:fc:18:9c:1f:da:18:ba:c5:c6:fa:d0:8b:9d:34:1e:db:
         dc:2f:2d:a1:ed:b4:ac:10:04:f5:80:7e:12:d5:e6:6c:5e:e3:
         5f:a1:16:eb:65:3f:a9:73:30:5b:dc:58:e7:be:4e:37:dd:19:
         7b:07:50:5b:b5:59:ca:72:d4:53:01:f0:82:30:ca:83:62:b5:
         cf:b5:07:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDe9qSdL0eg457wnBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTIwMDkyMTA0MDAwMFoXDTIzMDEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
YmQ5MDNiOWQtYTNlZS00OWRiLWJiZDUtZDBmMjRhZWRiNjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc0dVeu26/08tQ1RXJ0PtcnD9iZXdwWKgeiD
tJMiTRLHB+yQhpjcSk7VQ/fZA+/jtYv+XAZjR07Npjt3cVdwuBMU91UlVanDQBiF
nMfbP7WLEbNojcHH82K9uIeEcKDWXDmk+Hlq7NYO5pyzaxDVFlOQYbUFYzrptvWA
RORjhsj08LcQRASBQ0ZMlMQiM3QnSBE0F6Ar3dQAW0VB7sRK33Sc06wko1KY0v7i
+SkgjAUcG2nTdb8ef64vKLAnkRZJMXq357ZtdGH8int2TCyeGMm7XpbtB5c4hEtK
KoGLrgOQrWIJ4aRIe7XWKf5O1mOGvrDX2bRSMyEt6frzrnweTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOI5L5bLqOaUueWFWYIQJ02PnTj2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDRlODY2ZDktZDY3MS0z
ZGVjLTk3NWMtNzQ0MmZjY2I0M2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyKUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALPsFWj7utBSa29BA2pKbO/Hfsi8GGumbDKqRde+pRNF0v2JrunLCy90
OE9MHkZnrxRCLeXAvUbIYb/yhvPKNCg5RZe5vHzIZH1RKE3YUM0FYZNyH6GiRU+l
CcVdSCyZx3Ia+7jt6h3X9YXx1QFxnzw6Oo/bXHJMm38EegykOtpFP903yd1cNzH3
WB9kVqhowtAZeufUZVKPd9SsfHfTBZWq62QnrKDzs/24rPVsMzEw2ZLqpVcj/Bic
H9oYusXG+tCLnTQe29wvLaHttKwQBPWAfhLV5mxe41+hFutlP6lzMFvcWOe+Tjfd
GXsHUFu1Wcpy1FMB8IIwyoNitc+1B+A=
-----END CERTIFICATE-----