Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5454b7c6-c5d4-3ff3-b117-777e8e136088.roa
File:                     5454b7c6-c5d4-3ff3-b117-777e8e136088.roa (raw, json)
Hash identifier:          SJY8yp3SkaDxWtVuLscYtzEexjZZCeINgTWBFZIB/q0=
Subject key identifier:   DF:AC:03:84:F5:E5:76:37:BC:64:FB:FB:C3:24:CD:3C:3C:E6:B7:CA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7B566295E7C863B48F2B500
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5454b7c6-c5d4-3ff3-b117-777e8e136088.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b5:66:29:5e:7c:86:3b:48:f2:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=a423079a-e558-47e0-8a1a-cb4399847d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:97:84:8a:6b:1d:41:ef:5c:0f:8f:ba:8a:c1:
                    d9:d6:c4:df:31:03:d5:77:63:5c:17:5a:22:29:e2:
                    b6:13:51:32:a9:bf:67:fb:40:52:a9:ff:5a:93:e1:
                    57:9b:68:47:f6:d5:0d:db:9a:32:4c:aa:1b:50:67:
                    3c:72:4b:49:0c:20:ca:97:ff:5e:d1:ed:d1:e7:99:
                    86:5e:d9:8a:f8:b1:f8:4b:be:69:1d:f6:51:b2:06:
                    c5:fe:9d:4c:3d:c8:4c:a2:9b:69:74:da:a7:39:26:
                    81:77:f2:dc:07:54:d7:9a:01:5b:42:f6:ac:89:2d:
                    9c:ac:a6:a5:d5:27:bb:7b:63:e2:89:a5:92:57:28:
                    08:08:16:94:90:60:9d:e7:22:11:ad:3a:e8:17:bf:
                    1f:64:52:1a:1a:ef:d6:91:6a:b1:fe:96:a8:75:55:
                    fc:b7:48:18:72:db:ef:f3:fd:9c:32:78:14:5c:40:
                    05:c3:15:a7:85:f2:a8:dd:c7:eb:a1:cf:34:28:e3:
                    82:77:dd:46:f2:ad:f2:df:11:9f:52:75:33:ab:af:
                    20:31:91:b0:a9:e9:a2:2d:0f:bd:e4:2f:37:0e:54:
                    98:64:e2:9a:a5:e0:4a:5d:6c:b3:d7:80:6d:72:51:
                    fa:80:3a:37:c9:b4:62:39:06:7b:5a:fd:5c:f4:8a:
                    01:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AC:03:84:F5:E5:76:37:BC:64:FB:FB:C3:24:CD:3C:3C:E6:B7:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5454b7c6-c5d4-3ff3-b117-777e8e136088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5a:e7:65:7e:23:b1:49:98:73:f6:b6:6e:c8:f3:64:43:42:
         49:8e:0d:70:60:25:da:5c:b1:07:41:2f:8d:dd:0a:df:c7:f4:
         d7:d3:0c:b2:ee:c9:a6:51:10:78:2b:a7:34:be:be:8f:ce:3e:
         72:13:72:2a:b0:c1:3e:3e:5e:40:7b:c5:05:36:9d:49:68:ab:
         af:55:f2:9f:4f:8a:37:a1:dc:d0:95:5a:58:80:7e:4a:59:a7:
         2e:25:28:2f:70:14:3e:47:6d:d2:f4:05:c4:db:df:9f:6c:bf:
         c9:1e:d5:51:f8:75:f0:be:f3:4a:d5:5b:98:72:95:d1:0a:4f:
         53:24:26:6c:ed:4c:ec:05:d4:88:28:04:e2:09:e2:c1:0c:d8:
         02:cb:61:08:de:f8:87:de:91:d6:80:8c:d1:3c:c7:bc:89:0d:
         24:7d:20:bf:13:f7:d8:93:12:41:e8:e2:d7:75:4b:54:29:4b:
         96:d5:e3:f7:72:0c:81:e8:54:8d:f3:62:35:53:ff:4c:50:56:
         ed:2f:fd:29:32:71:07:e7:e3:f6:9e:38:a7:83:73:aa:e3:51:
         8f:dd:27:41:0f:b1:f1:c2:73:e8:85:f9:e2:30:08:50:13:ee:
         a9:de:61:61:62:d8:bd:f4:9e:91:06:3f:ba:c4:1a:56:3c:d3:
         19:fd:de:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqntWYpXnyGO0jytQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YTQyMzA3OWEtZTU1OC00N2UwLThhMWEtY2I0Mzk5ODQ3ZDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5eEimsdQe9cD4+6isHZ1sTfMQPVd2NcF1oi
KeK2E1Eyqb9n+0BSqf9ak+FXm2hH9tUN25oyTKobUGc8cktJDCDKl/9e0e3R55mG
XtmK+LH4S75pHfZRsgbF/p1MPchMoptpdNqnOSaBd/LcB1TXmgFbQvasiS2crKal
1Se7e2PiiaWSVygICBaUkGCd5yIRrTroF78fZFIaGu/WkWqx/paodVX8t0gYctvv
8/2cMngUXEAFwxWnhfKo3cfroc80KOOCd91G8q3y3xGfUnUzq68gMZGwqemiLQ+9
5C83DlSYZOKapeBKXWyz14BtclH6gDo3ybRiOQZ7Wv1c9IoBKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN+sA4T15XY3vGT7+8MkzTw85rfKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNTQ1NGI3YzYtYzVkNC0z
ZmYzLWIxMTctNzc3ZThlMTM2MDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAn1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBa52V+I7FJmHP2tm7I82RDQkmODXBgJdpcsQdBL43dCt/H9NfTDLLu
yaZREHgrpzS+vo/OPnITciqwwT4+XkB7xQU2nUloq69V8p9Pijeh3NCVWliAfkpZ
py4lKC9wFD5HbdL0BcTb359sv8ke1VH4dfC+80rVW5hyldEKT1MkJmztTOwF1Igo
BOIJ4sEM2ALLYQje+IfekdaAjNE8x7yJDSR9IL8T99iTEkHo4td1S1QpS5bV4/dy
DIHoVI3zYjVT/0xQVu0v/SkycQfn4/aeOKeDc6rjUY/dJ0EPsfHCc+iF+eIwCFAT
7qneYWFi2L30npEGP7rEGlY80xn93o8=
-----END CERTIFICATE-----