Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b7e7f60-5352-3ab8-9e5f-d7e806d2be3b.roa
File:                     4b7e7f60-5352-3ab8-9e5f-d7e806d2be3b.roa (raw, json)
Hash identifier:          eIU+seusn1KECi5BpFTFA5lq/56iiwHBm5yDHGapaoQ=
Subject key identifier:   73:7F:8E:E3:04:66:E0:F6:46:CB:B3:EA:89:C2:64:E2:06:CC:29:E8
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837E4E1579BE33CF850BFD230F0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b7e7f60-5352-3ab8-9e5f-d7e806d2be3b.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 12 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        209.29.124.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:e4:e1:57:9b:e3:3c:f8:50:bf:d2:30:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 12 05:00:00 2023 GMT
        Subject: CN=76fb5df6-5f10-49a4-8e4f-1a6432e968dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:03:26:b2:40:51:76:5d:5a:14:0f:6d:b4:61:
                    4d:f9:12:4f:e7:c7:86:c7:40:a6:48:24:1f:e6:5b:
                    3d:de:2f:35:f1:99:a8:ab:08:20:02:ac:79:20:46:
                    9b:ac:ef:53:d8:a2:88:0d:19:70:45:79:04:3b:ef:
                    50:d3:76:e1:99:6e:a1:d0:9e:41:b2:64:6a:00:af:
                    dd:2a:ff:3d:34:74:0f:25:75:5c:8f:39:cc:95:65:
                    bd:84:bf:e7:b3:1e:48:b4:4d:a9:06:33:1e:bc:e3:
                    59:26:51:24:98:1f:14:37:bf:ae:d9:7a:06:95:75:
                    7d:47:89:e8:c2:3c:2f:3b:d3:77:4a:f8:18:37:05:
                    d4:ef:51:82:49:2e:88:87:1c:85:52:82:ed:4a:85:
                    3b:e0:2d:a8:3f:dd:18:ea:0a:df:07:ac:bb:24:9a:
                    6a:1f:41:5d:91:33:83:c4:64:1b:8e:20:7f:a7:1f:
                    20:c6:f0:24:eb:f6:1d:b3:1b:2c:1d:8b:98:7e:66:
                    77:a3:d5:62:f8:9f:97:ac:32:7a:37:36:32:4b:4e:
                    b8:14:b2:8b:33:1d:96:c6:23:97:14:89:90:a6:09:
                    d7:dd:e1:fb:c5:89:65:a3:0d:d8:cf:58:f9:ca:be:
                    34:12:ed:e8:3c:8c:af:2c:3e:6d:4f:3a:1c:64:c1:
                    21:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7F:8E:E3:04:66:E0:F6:46:CB:B3:EA:89:C2:64:E2:06:CC:29:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b7e7f60-5352-3ab8-9e5f-d7e806d2be3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.29.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:49:77:79:6e:d9:34:f6:f7:a6:62:1f:49:93:1d:78:41:a1:
         79:10:84:38:8b:45:48:44:fa:9a:2a:5b:a6:54:1b:a3:20:7d:
         3d:79:7b:49:d5:af:3d:84:1a:f8:26:6c:d3:d0:e6:b5:e5:95:
         da:9e:29:91:12:ed:c5:2e:54:4c:f2:fe:ab:0f:f6:c6:2b:8e:
         fa:ea:71:0a:79:0e:4d:f6:80:f9:7c:93:85:c2:18:c5:62:c3:
         36:14:10:0f:07:46:cc:70:89:e4:21:39:2d:9e:4b:2c:83:22:
         4c:9e:91:51:03:6b:d4:03:ed:75:4d:2a:14:c6:09:71:50:b6:
         de:e7:8d:99:13:48:81:3c:64:65:9f:fd:b0:9c:5b:50:31:a0:
         1b:db:98:fe:a8:b0:2a:4c:9c:d3:f2:19:23:83:92:fe:31:a7:
         57:cb:41:c4:7f:26:bc:58:5f:4f:dc:b4:ff:e7:d7:e5:ce:44:
         80:0c:27:78:22:88:69:24:e9:1f:11:97:7e:02:04:da:9c:f6:
         a8:85:f3:e5:23:92:2c:3e:75:9f:14:12:29:6d:00:0c:0a:ff:
         eb:30:8c:05:66:85:8b:f3:0d:68:e4:a6:69:3c:df:24:8a:3e:
         d8:62:bb:70:09:e4:01:34:fa:61:f7:24:6a:a6:63:13:16:2b:
         8d:4f:bb:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDfk4Veb4zz4UL/SMPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTIwMDkyMTA0MDAwMFoXDTIzMDIxMjA1MDAwMFowLzEtMCsGA1UEAxMk
NzZmYjVkZjYtNWYxMC00OWE0LThlNGYtMWE2NDMyZTk2OGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AMmskBRdl1aFA9ttGFN+RJP58eGx0CmSCQf
5ls93i818ZmoqwggAqx5IEabrO9T2KKIDRlwRXkEO+9Q03bhmW6h0J5BsmRqAK/d
Kv89NHQPJXVcjznMlWW9hL/nsx5ItE2pBjMevONZJlEkmB8UN7+u2XoGlXV9R4no
wjwvO9N3SvgYNwXU71GCSS6IhxyFUoLtSoU74C2oP90Y6grfB6y7JJpqH0FdkTOD
xGQbjiB/px8gxvAk6/YdsxssHYuYfmZ3o9Vi+J+XrDJ6NzYyS064FLKLMx2WxiOX
FImQpgnX3eH7xYllow3Yz1j5yr40Eu3oPIyvLD5tTzocZMEhEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHN/juMEZuD2Rsuz6onCZOIGzCnoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNGI3ZTdmNjAtNTM1Mi0z
YWI4LTllNWYtZDdlODA2ZDJiZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0R18MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE9Jd3lu2TT296ZiH0mTHXhBoXkQhDiLRUhE+poqW6ZUG6MgfT15e0nV
rz2EGvgmbNPQ5rXlldqeKZES7cUuVEzy/qsP9sYrjvrqcQp5Dk32gPl8k4XCGMVi
wzYUEA8HRsxwieQhOS2eSyyDIkyekVEDa9QD7XVNKhTGCXFQtt7njZkTSIE8ZGWf
/bCcW1AxoBvbmP6osCpMnNPyGSODkv4xp1fLQcR/JrxYX0/ctP/n1+XORIAMJ3gi
iGkk6R8Rl34CBNqc9qiF8+Ujkiw+dZ8UEiltAAwK/+swjAVmhYvzDWjkpmk83ySK
Pthiu3AJ5AE0+mH3JGqmYxMWK41PuyQ=
-----END CERTIFICATE-----