Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/2e54ffe0-da3b-341c-bbc8-9a3823110ca1.roa
File:                     2e54ffe0-da3b-341c-bbc8-9a3823110ca1.roa (raw, json)
Hash identifier:          76Sc6BR3ZYhXPAWstrpchojXI5Q2iJXk8HFogYEI45U=
Subject key identifier:   CE:ED:26:2C:40:EA:22:29:57:04:E0:0E:FA:E0:E7:B2:DC:3A:75:EA
Certificate issuer:       /CN=45a3fe8d-acf7-4107-b540-5163b9d101d0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172C7AB9FA2
Authority key identifier: 0E:6A:2F:F5:54:3B:E4:7E:D9:FA:E2:97:BF:DE:BF:B2:41:79:A6:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/2e54ffe0-da3b-341c-bbc8-9a3823110ca1.roa
Signing time:             Thu 18 Jun 2020 13:43:33 +0000
ROA not before:           Thu 18 Jun 2020 04:00:00 +0000
ROA not after:            Wed 21 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        52.144.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:c7:ab:9f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45a3fe8d-acf7-4107-b540-5163b9d101d0
        Validity
            Not Before: Jun 18 04:00:00 2020 GMT
            Not After : Sep 21 04:00:00 2022 GMT
        Subject: CN=111872b6-d841-416c-a304-9175182f4ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:8b:bd:06:88:6c:a7:52:3e:4d:b2:5f:9b:
                    de:07:37:3f:3b:e4:8e:8c:c6:3f:68:4c:4b:e4:37:
                    60:29:a6:a9:0c:05:98:bb:b7:1d:ff:4b:ec:ae:78:
                    6f:37:06:fe:57:66:cc:7b:ad:10:62:b0:75:42:b5:
                    49:0e:cb:d3:d6:bd:5e:14:0c:9d:f3:e9:0b:7d:7d:
                    85:e3:13:55:26:42:4e:cf:c2:0d:dd:b6:0d:aa:af:
                    aa:10:78:95:dc:9b:b9:be:d4:08:fc:85:d6:71:1b:
                    40:45:f9:89:ac:f5:35:3b:f7:e6:e2:fa:9f:da:b2:
                    e9:67:09:30:05:13:4a:8e:3e:5f:ef:bb:c2:9f:d8:
                    da:9d:fa:a0:be:ba:53:bd:2b:7e:4b:a6:ed:0b:95:
                    e3:d1:b4:d5:d1:1b:38:ed:86:b8:47:94:f3:79:92:
                    d2:a8:4d:a9:48:c0:24:e3:eb:0d:f9:36:8e:13:59:
                    63:11:04:e1:03:c8:9c:db:a6:59:4b:38:f7:bb:67:
                    44:1a:3a:a2:aa:a3:b5:e7:e1:36:c8:66:af:32:6d:
                    00:4c:28:f4:de:aa:20:79:a6:d3:c1:ab:0d:4c:ad:
                    ac:81:a9:c4:6e:7d:87:88:53:c5:3c:fa:fe:c7:eb:
                    79:32:a2:1a:9b:18:9b:4b:5c:84:7e:c0:3e:b1:51:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:ED:26:2C:40:EA:22:29:57:04:E0:0E:FA:E0:E7:B2:DC:3A:75:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/2e54ffe0-da3b-341c-bbc8-9a3823110ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0/45a3fe8d-acf7-4107-b540-5163b9d101d0.crl

            X509v3 Authority Key Identifier:
                keyid:0E:6A:2F:F5:54:3B:E4:7E:D9:FA:E2:97:BF:DE:BF:B2:41:79:A6:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/45a3fe8d-acf7-4107-b540-5163b9d101d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:64:50:83:0d:61:cd:81:fa:9d:e7:83:bf:89:11:c5:b5:40:
         9f:b7:a0:00:89:6d:99:04:c9:dd:75:5f:af:8a:12:e2:d3:60:
         06:31:20:9f:f9:c0:df:29:97:99:6e:21:d9:df:dd:d9:c5:4b:
         bc:a2:72:28:1f:58:b2:97:32:3a:5c:3d:b3:30:bc:9b:ac:bb:
         89:7c:b4:28:b8:0e:07:22:46:23:12:bd:37:58:f1:6a:0a:0b:
         2f:1e:5b:82:c6:0c:81:e1:99:49:6e:e4:01:f9:2f:8d:86:39:
         75:7b:69:81:c8:80:59:e0:62:b5:39:98:fb:d2:ae:c0:2e:20:
         e7:d2:d4:59:26:4c:44:02:e8:ac:38:fe:8e:f3:d5:29:10:b6:
         bc:e6:a4:18:ec:58:cc:0c:5c:29:3b:42:84:8b:36:2e:28:05:
         2c:71:35:5e:6e:f8:90:74:33:58:6f:58:28:e1:4d:2a:3b:50:
         b3:a0:19:4a:4c:35:2b:50:23:24:6d:99:b4:ae:18:d5:0d:44:
         48:da:ed:40:74:af:80:75:f9:aa:4e:cb:57:ce:b2:e4:c3:82:
         53:dd:9f:19:b7:a8:4b:9d:43:c3:6f:30:aa:b6:cd:20:69:06:
         35:d8:03:f4:f1:89:3a:80:65:75:a0:aa:33:74:a0:7c:76:a5:
         5b:03:67:bd
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcsern6IwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDQ1YTNmZThkLWFjZjctNDEwNy1iNTQwLTUxNjNiOWQxMDFk
MDAeFw0yMDA2MTgwNDAwMDBaFw0yMjA5MjEwNDAwMDBaMC8xLTArBgNVBAMTJDEx
MTg3MmI2LWQ4NDEtNDE2Yy1hMzA0LTkxNzUxODJmNGJhMjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMwYi70GiGynUj5Nsl+b3gc3PzvkjozGP2hMS+Q3
YCmmqQwFmLu3Hf9L7K54bzcG/ldmzHutEGKwdUK1SQ7L09a9XhQMnfPpC319heMT
VSZCTs/CDd22DaqvqhB4ldybub7UCPyF1nEbQEX5iaz1NTv35uL6n9qy6WcJMAUT
So4+X++7wp/Y2p36oL66U70rfkum7QuV49G01dEbOO2GuEeU83mS0qhNqUjAJOPr
Dfk2jhNZYxEE4QPInNumWUs497tnRBo6oqqjtefhNshmrzJtAEwo9N6qIHmm08Gr
DUytrIGpxG59h4hTxTz6/sfreTKiGpsYm0tchH7APrFR51UCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTO7SYsQOoiKVcE4A764Oey3Dp16jCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDVhM2Zl
OGQtYWNmNy00MTA3LWI1NDAtNTE2M2I5ZDEwMWQwLzJlNTRmZmUwLWRhM2ItMzQx
Yy1iYmM4LTlhMzgyMzExMGNhMS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzQ1YTNmZThkLWFjZjctNDEwNy1iNTQw
LTUxNjNiOWQxMDFkMC80NWEzZmU4ZC1hY2Y3LTQxMDctYjU0MC01MTYzYjlkMTAx
ZDAuY3JsMB8GA1UdIwQYMBaAFA5qL/VUO+R+2fril7/ev7JBeaZ/MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvNDVhM2ZlOGQtYWNmNy00MTA3LWI1NDAtNTE2M2I5
ZDEwMWQwLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADSQPTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEADGRQgw1hzYH6neeDv4kRxbVAn7egAIltmQTJ3XVfr4oS4tNgBjEgn/nA3ymX
mW4h2d/d2cVLvKJyKB9YspcyOlw9szC8m6y7iXy0KLgOByJGIxK9N1jxagoLLx5b
gsYMgeGZSW7kAfkvjYY5dXtpgciAWeBitTmY+9KuwC4g59LUWSZMRALorDj+jvPV
KRC2vOakGOxYzAxcKTtChIs2LigFLHE1Xm74kHQzWG9YKOFNKjtQs6AZSkw1K1Aj
JG2ZtK4Y1Q1ESNrtQHSvgHX5qk7LV86y5MOCU92fGbeoS51Dw28wqrbNIGkGNdgD
9PGJOoBldaCqM3SgfHalWwNnvQ==
-----END CERTIFICATE-----