Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/da436e79-e94e-3a55-aef8-3934c2571ca6.roa
File:                     da436e79-e94e-3a55-aef8-3934c2571ca6.roa (raw, json)
Hash identifier:          1BsS4k0iS4I107QDHm048dW3azfHftczzcjYkShLoh8=
Subject key identifier:   A3:5E:F8:F7:30:E0:87:C4:4D:FA:F8:0B:3B:7A:71:ED:6B:E9:AB:CC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837E483BE2C678F6860AC0B8B00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/da436e79-e94e-3a55-aef8-3934c2571ca6.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 12 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        207.34.243.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:e4:83:be:2c:67:8f:68:60:ac:0b:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 12 05:00:00 2023 GMT
        Subject: CN=5a8b367b-7ba1-451f-8bf0-9a769c4895f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d5:53:f8:bc:87:ef:8b:ae:9b:f7:ad:81:02:
                    eb:99:7d:94:ce:6b:4f:25:13:5f:c0:0b:43:1d:ac:
                    bc:d9:f5:60:8e:0b:32:f5:8e:92:c6:4d:e0:d8:2f:
                    65:6a:58:24:d8:db:be:f4:a1:60:8f:42:9d:e3:dd:
                    45:9c:74:e9:22:a8:1e:a0:83:c9:ed:37:68:a4:1d:
                    8f:28:bd:4c:55:58:97:ff:09:78:95:be:ea:98:fd:
                    35:65:97:74:31:40:c7:1c:fa:24:44:83:57:63:04:
                    92:6a:f5:06:7d:64:c6:a8:b1:ee:d4:60:3a:ba:ce:
                    be:53:3b:d1:ed:76:b2:ac:37:80:34:3f:98:e3:9e:
                    18:b4:0b:43:23:20:65:ba:83:df:fe:70:b8:ed:3d:
                    d3:85:be:66:a2:95:a3:25:dc:2a:06:b1:3a:a7:68:
                    28:a6:d7:a6:99:fd:6e:a8:30:86:12:42:b8:a1:1e:
                    74:95:96:b1:03:8f:f8:2f:03:a7:22:e4:b1:24:53:
                    32:4a:1a:3a:9d:d7:04:61:34:ee:8f:03:dc:ad:a0:
                    af:4a:7f:be:43:48:d8:7c:09:58:ae:19:3f:ff:cf:
                    71:56:3c:91:1c:73:54:e2:e4:20:e2:fe:48:f6:95:
                    db:8f:76:42:8a:50:1c:bc:46:42:9e:07:ce:41:ca:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5E:F8:F7:30:E0:87:C4:4D:FA:F8:0B:3B:7A:71:ED:6B:E9:AB:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/da436e79-e94e-3a55-aef8-3934c2571ca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:9a:56:31:2b:f3:ed:09:ea:39:86:a0:0d:04:b7:c1:a5:79:
         30:71:c3:cd:5c:34:88:ac:ac:2b:ed:f5:41:5a:c8:37:98:de:
         af:6d:00:ad:b3:7e:a2:81:1a:ae:1e:f5:16:8e:42:59:ba:6a:
         c8:43:a3:38:c9:37:7e:fc:08:eb:36:f2:ee:34:80:0f:50:0f:
         fc:6b:ce:c8:76:ac:1f:19:ee:7e:ed:39:8c:e3:ac:14:ff:b0:
         a2:7b:41:61:64:db:8d:88:35:5e:47:48:5f:5f:2a:c4:d7:05:
         f4:b0:f5:ff:2a:e4:9b:c9:cb:f9:fd:03:3d:5c:ae:0a:75:a2:
         9e:c8:3b:6b:61:7d:12:71:f9:58:79:e8:de:6a:d3:cb:e2:d6:
         6b:09:57:fb:66:de:25:06:f0:cd:39:a8:9b:27:c7:50:81:2d:
         2a:66:6a:b4:78:77:49:7e:f8:c6:00:dd:df:31:a6:eb:ef:c0:
         3d:4d:17:1a:2d:52:42:26:2b:b0:28:00:e5:6b:88:98:5c:5b:
         3f:83:f0:f5:08:d8:cd:87:e6:4f:f9:0e:33:3a:ce:87:b1:24:
         28:a0:74:dd:c1:31:4f:ec:d3:ae:9d:61:1a:83:88:85:1a:1e:
         f0:82:b1:e2:7c:ab:03:08:8a:fb:2f:66:94:05:90:5b:fb:4e:
         82:b1:1f:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDfkg74sZ49oYKwLiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTIwMDkyMTA0MDAwMFoXDTIzMDIxMjA1MDAwMFowLzEtMCsGA1UEAxMk
NWE4YjM2N2ItN2JhMS00NTFmLThiZjAtOWE3NjljNDg5NWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNVT+LyH74uum/etgQLrmX2UzmtPJRNfwAtD
Hay82fVgjgsy9Y6Sxk3g2C9lalgk2Nu+9KFgj0Kd491FnHTpIqgeoIPJ7TdopB2P
KL1MVViX/wl4lb7qmP01ZZd0MUDHHPokRINXYwSSavUGfWTGqLHu1GA6us6+UzvR
7XayrDeAND+Y454YtAtDIyBluoPf/nC47T3Thb5mopWjJdwqBrE6p2goptemmf1u
qDCGEkK4oR50lZaxA4/4LwOnIuSxJFMySho6ndcEYTTujwPcraCvSn++Q0jYfAlY
rhk//89xVjyRHHNU4uQg4v5I9pXbj3ZCilAcvEZCngfOQco52wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKNe+Pcw4IfETfr4Czt6ce1r6avMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGE0MzZlNzktZTk0ZS0z
YTU1LWFlZjgtMzkzNGMyNTcxY2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyLzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICaVjEr8+0J6jmGoA0Et8GleTBxw81cNIisrCvt9UFayDeY3q9tAK2z
fqKBGq4e9RaOQlm6ashDozjJN378COs28u40gA9QD/xrzsh2rB8Z7n7tOYzjrBT/
sKJ7QWFk242INV5HSF9fKsTXBfSw9f8q5JvJy/n9Az1crgp1op7IO2thfRJx+Vh5
6N5q08vi1msJV/tm3iUG8M05qJsnx1CBLSpmarR4d0l++MYA3d8xpuvvwD1NFxot
UkImK7AoAOVriJhcWz+D8PUI2M2H5k/5DjM6zoexJCigdN3BMU/s066dYRqDiIUa
HvCCseJ8qwMIivsvZpQFkFv7ToKxHz4=
-----END CERTIFICATE-----