Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/305b59de-6d24-36cb-a599-b16105fe2332.roa
File:                     305b59de-6d24-36cb-a599-b16105fe2332.roa (raw, json)
Hash identifier:          jPNcXzaRZRRvpXRUe4hQQh3efH3jhSoGvfmPxqr2lWo=
Subject key identifier:   21:64:23:C4:21:DC:7E:CE:57:10:A7:F7:47:26:E2:97:7A:93:11:48
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7DE6EBF7A2A36CA7148E1A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/305b59de-6d24-36cb-a599-b16105fe2332.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        207.81.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:de:6e:bf:7a:2a:36:ca:71:48:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=6fc1246a-e56c-40a4-a2d4-63f83b8622d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:81:23:06:a3:41:60:01:00:2f:a5:de:47:60:
                    df:4f:7a:d3:b8:96:e1:75:d3:54:24:50:ec:7b:ab:
                    18:ef:79:11:21:ec:10:57:44:5f:66:5f:39:3a:8d:
                    ec:ac:f5:8f:8c:2f:c6:b3:de:6d:d4:c9:51:43:0e:
                    00:da:04:2d:48:69:83:98:8a:e1:3d:3b:fd:eb:ab:
                    95:a1:1c:a3:21:18:b0:ed:28:2f:5c:2f:40:ec:53:
                    05:c8:dd:d4:2c:88:24:b9:3c:7a:1a:54:92:a3:d5:
                    8d:75:a2:61:81:7d:7b:63:87:80:c3:e1:99:8e:c0:
                    2d:f0:8b:10:d6:df:7b:6a:ed:57:dc:0b:b1:b5:aa:
                    88:e6:3c:a9:8e:65:95:f9:8a:c7:10:e6:2f:71:08:
                    46:d1:6b:70:5f:59:a7:67:12:4b:5d:e4:69:72:57:
                    b8:8c:f3:cd:89:c8:73:eb:e4:7b:b1:69:71:34:0e:
                    53:b4:f3:17:68:77:62:7c:bd:84:41:b6:70:ed:5e:
                    35:88:e5:75:cd:5c:7c:9b:d3:05:ac:c7:c6:07:88:
                    6a:bf:7c:ec:16:d7:22:e0:29:26:09:67:af:40:c8:
                    59:1f:4b:0c:c4:64:5b:37:a5:c6:de:05:7b:f7:c9:
                    34:5b:6c:1a:68:f9:96:cd:ef:6d:e0:67:f9:4c:1c:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:64:23:C4:21:DC:7E:CE:57:10:A7:F7:47:26:E2:97:7A:93:11:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/305b59de-6d24-36cb-a599-b16105fe2332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.81.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:64:b0:79:8c:b4:75:54:81:b5:c6:18:7c:8b:cd:c4:9e:49:
         b0:09:56:cb:fd:b2:d3:57:91:75:9b:3c:aa:3e:5d:2d:c6:29:
         d8:fa:c9:23:9c:c9:1f:26:5f:f3:47:50:bd:50:31:09:53:82:
         c9:20:0c:4e:0b:9d:6f:f5:60:de:f3:47:6b:42:6d:93:3a:38:
         a2:1f:7c:3b:34:24:a0:00:68:17:3c:c0:af:0b:81:cd:92:53:
         0e:ba:da:e0:8d:94:ae:95:eb:9b:79:45:e5:cb:97:10:0d:12:
         a2:bf:e8:51:84:fa:f6:45:08:b5:e8:ee:77:82:92:ce:94:2b:
         ef:71:09:f7:da:95:0c:d6:9f:50:2d:f8:67:2f:6a:af:9b:39:
         84:4b:85:be:1b:de:b1:c4:03:78:6a:e5:18:48:d6:c4:eb:96:
         b0:4a:d7:fc:19:e3:f8:c5:e5:33:4d:83:ad:8d:11:e5:ec:56:
         d8:11:e1:22:6f:5d:89:62:8b:86:3b:07:db:a9:df:cf:d9:32:
         06:10:05:73:86:80:12:37:cf:a3:98:0c:fc:a1:99:7a:6d:30:
         e3:df:86:c1:68:61:89:5e:59:1d:eb:fd:d6:4f:6f:cb:18:5a:
         56:69:10:ca:76:de:dd:b9:08:e3:40:08:60:6e:f5:3d:4f:5c:
         c0:66:f1:9e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDf33m6/eio2ynFI4aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTIwMDkyMTA0MDAwMFoXDTIzMDIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
NmZjMTI0NmEtZTU2Yy00MGE0LWEyZDQtNjNmODNiODYyMmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoEjBqNBYAEAL6XeR2DfT3rTuJbhddNUJFDs
e6sY73kRIewQV0RfZl85Oo3srPWPjC/Gs95t1MlRQw4A2gQtSGmDmIrhPTv966uV
oRyjIRiw7SgvXC9A7FMFyN3ULIgkuTx6GlSSo9WNdaJhgX17Y4eAw+GZjsAt8IsQ
1t97au1X3AuxtaqI5jypjmWV+YrHEOYvcQhG0WtwX1mnZxJLXeRpcle4jPPNichz
6+R7sWlxNA5TtPMXaHdifL2EQbZw7V41iOV1zVx8m9MFrMfGB4hqv3zsFtci4Ckm
CWevQMhZH0sMxGRbN6XG3gV798k0W2waaPmWze9t4Gf5TBz+JQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCFkI8Qh3H7OVxCn90cm4pd6kxFIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzA1YjU5ZGUtNmQyNC0z
NmNiLWE1OTktYjE2MTA1ZmUyMzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAz1EwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAomSweYy0dVSBtcYYfIvNxJ5JsAlWy/2y01eRdZs8qj5dLcYp2PrJI5zJ
HyZf80dQvVAxCVOCySAMTgudb/Vg3vNHa0Jtkzo4oh98OzQkoABoFzzArwuBzZJT
Drra4I2UrpXrm3lF5cuXEA0Sor/oUYT69kUItejud4KSzpQr73EJ99qVDNafUC34
Zy9qr5s5hEuFvhvescQDeGrlGEjWxOuWsErX/Bnj+MXlM02DrY0R5exW2BHhIm9d
iWKLhjsH26nfz9kyBhAFc4aAEjfPo5gM/KGZem0w49+GwWhhiV5ZHev91k9vyxha
VmkQynbe3bkI40AIYG71PU9cwGbxng==
-----END CERTIFICATE-----