Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/9d33ac20-39fa-3b0f-b5cc-5b29583ad971.roa
File:                     9d33ac20-39fa-3b0f-b5cc-5b29583ad971.roa (raw, json)
Hash identifier:          riuyVlFu1w3yUxGJrJ4XpQfCKGsuRUyI+2za/80aKJQ=
Subject key identifier:   A8:07:15:DD:3A:2B:57:06:91:84:B8:EC:72:51:3B:8E:31:26:80:50
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F4328583845B609CD5F01708FFC70C780
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/9d33ac20-39fa-3b0f-b5cc-5b29583ad971.roa
Signing time:             Mon 14 Dec 2020 05:00:00 +0000
ROA not before:           Mon 14 Dec 2020 05:00:00 +0000
ROA not after:            Sun 19 Mar 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        157.248.218.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:45:b6:09:cd:5f:01:70:8f:fc:70:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Dec 14 05:00:00 2020 GMT
            Not After : Mar 19 04:00:00 2023 GMT
        Subject: CN=108831d8-b01c-47ac-ba44-57a4e253b060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:05:1c:7e:c3:84:f5:29:f4:7d:55:bc:bb:4b:
                    cf:57:f5:8e:f2:35:93:f1:e3:9b:32:36:03:41:36:
                    e4:06:44:45:48:b5:da:d0:35:34:b7:40:35:6a:b9:
                    de:ec:60:e5:3e:4c:0e:5e:7b:10:26:97:64:d2:20:
                    e9:28:54:56:fe:cf:10:16:b7:3e:6a:33:85:77:ac:
                    61:64:99:bf:2c:43:3b:8e:c9:30:f1:ee:c1:6e:16:
                    3b:bd:b3:b4:35:f8:ea:c1:f7:bd:16:d0:7f:de:c9:
                    8e:07:02:55:e8:67:91:e3:54:5e:eb:6c:91:8c:8b:
                    48:8c:21:e4:d0:16:2f:71:c4:6c:e7:02:21:39:e5:
                    0c:31:dd:d8:ef:7c:53:a4:bf:16:9b:5d:68:1d:18:
                    fa:ae:52:99:f6:36:9c:e7:39:89:79:69:ee:b8:89:
                    34:c9:5d:ea:92:5d:85:c0:f7:50:56:f2:a4:7e:66:
                    3c:ec:fa:fa:2a:61:2a:1b:c1:9c:b8:f6:40:54:5f:
                    47:9b:80:f3:48:01:ef:c5:21:1a:f8:55:1c:c6:25:
                    c8:be:00:06:50:dc:21:50:e4:43:4e:27:53:a6:6d:
                    d6:f1:60:23:a9:d2:f8:f8:4a:0b:35:ff:56:52:1f:
                    2c:40:cf:87:8b:de:b3:8c:84:d8:17:1f:f1:e0:ef:
                    29:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:07:15:DD:3A:2B:57:06:91:84:B8:EC:72:51:3B:8E:31:26:80:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/9d33ac20-39fa-3b0f-b5cc-5b29583ad971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c5:a6:d3:17:cf:97:1c:d3:7c:e0:3c:9a:8b:29:c5:51:d5:
         7b:b1:24:92:a4:d0:bc:a2:35:9a:60:b7:55:bf:8d:ce:be:d0:
         c3:7f:41:75:fa:ff:f1:bc:c0:10:a3:89:37:b1:54:92:4e:98:
         85:7a:18:48:ed:37:af:a2:c2:dc:e2:cd:54:10:38:b1:95:a9:
         ed:43:72:53:d1:94:34:af:16:50:b4:b5:1e:30:89:de:36:83:
         1b:fe:5e:ec:4c:0c:4f:d0:30:3f:b9:d0:b5:93:da:9d:93:c9:
         93:e5:f3:4c:1c:33:be:cc:38:32:6d:43:9e:fd:af:21:3b:f1:
         fd:5b:27:04:03:25:92:0e:56:6b:6f:e0:bb:2a:0b:9f:dc:91:
         d5:a3:e2:e4:b7:51:6b:d2:db:06:fd:e7:06:77:7f:0c:0e:9e:
         13:7f:19:d9:45:f2:a3:10:72:cc:71:20:83:55:c3:09:28:c5:
         66:e7:dc:c5:6d:ef:1e:5a:55:09:18:8f:c3:92:e5:bf:bb:6c:
         a1:d7:5c:21:05:00:6c:0b:2c:64:a8:5a:e5:ad:51:a3:97:d9:
         6e:8f:d9:d9:5d:b5:36:6c:cb:8c:6d:55:37:bf:4d:af:5e:71:
         31:fe:f6:d0:4e:50:21:23:b0:2c:b2:6d:f4:d7:61:c4:2e:97:
         b0:bb:70:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDhFtgnNXwFwj/xwx4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4YWRlYWQtZmM4NS00Mzc3LWFlOGYtNzBlMDBjNDJi
MjIzMB4XDTIwMTIxNDA1MDAwMFoXDTIzMDMxOTA0MDAwMFowLzEtMCsGA1UEAxMk
MTA4ODMxZDgtYjAxYy00N2FjLWJhNDQtNTdhNGUyNTNiMDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngUcfsOE9Sn0fVW8u0vPV/WO8jWT8eObMjYD
QTbkBkRFSLXa0DU0t0A1arne7GDlPkwOXnsQJpdk0iDpKFRW/s8QFrc+ajOFd6xh
ZJm/LEM7jskw8e7BbhY7vbO0Nfjqwfe9FtB/3smOBwJV6GeR41Re62yRjItIjCHk
0BYvccRs5wIhOeUMMd3Y73xTpL8Wm11oHRj6rlKZ9jac5zmJeWnuuIk0yV3qkl2F
wPdQVvKkfmY87Pr6KmEqG8GcuPZAVF9Hm4DzSAHvxSEa+FUcxiXIvgAGUNwhUORD
TidTpm3W8WAjqdL4+EoLNf9WUh8sQM+Hi96zjITYFx/x4O8pfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKgHFd06K1cGkYS47HJRO44xJoBQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NThh
ZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUwMGM0MmIyMjMvOWQzM2FjMjAtMzlmYS0z
YjBmLWI1Y2MtNWIyOTU4M2FkOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU4YWRlYWQtZmM4NS00Mzc3LWFl
OGYtNzBlMDBjNDJiMjIzLzQ1OGFkZWFkLWZjODUtNDM3Ny1hZThmLTcwZTAwYzQy
YjIyMy5jcmwwHwYDVR0jBBgwFoAUgFwvkgT+eRfx4bKa4aKlQkaLRQowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NThhZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUw
MGM0MmIyMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnfjaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJbFptMXz5cc03zgPJqLKcVR1XuxJJKk0LyiNZpgt1W/jc6+0MN/QXX6
//G8wBCjiTexVJJOmIV6GEjtN6+iwtzizVQQOLGVqe1DclPRlDSvFlC0tR4wid42
gxv+XuxMDE/QMD+50LWT2p2TyZPl80wcM77MODJtQ579ryE78f1bJwQDJZIOVmtv
4LsqC5/ckdWj4uS3UWvS2wb95wZ3fwwOnhN/GdlF8qMQcsxxIINVwwkoxWbn3MVt
7x5aVQkYj8OS5b+7bKHXXCEFAGwLLGSoWuWtUaOX2W6P2dldtTZsy4xtVTe/Ta9e
cTH+9tBOUCEjsCyybfTXYcQul7C7cM4=
-----END CERTIFICATE-----