Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/900fee6c-ab66-3df5-8b32-a333d2e913d1.roa
File:                     900fee6c-ab66-3df5-8b32-a333d2e913d1.roa (raw, json)
Hash identifier:          xc4k0hX11avdI9CM0GgA9PBYOeteiY6xbXt6HrHGdqE=
Subject key identifier:   B1:F3:ED:B1:15:F8:F3:43:51:1B:C8:C8:21:02:FA:9F:10:7B:6C:AF
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7A24359CA2B37056EFC1D00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/900fee6c-ab66-3df5-8b32-a333d2e913d1.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.237.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a2:43:59:ca:2b:37:05:6e:fc:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=58536901-9bab-41b2-8a37-b9adf70ffa71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:65:bf:bb:61:19:21:87:a0:a7:e9:7a:22:e7:
                    92:39:a7:e7:af:3c:b1:48:7d:93:49:54:52:fe:36:
                    78:1a:de:7e:09:84:56:04:96:54:fe:25:96:c6:2b:
                    b0:94:95:a7:29:f4:11:01:04:52:3c:f3:22:d7:20:
                    29:19:05:1a:ed:82:e6:55:7f:c9:e2:be:07:e5:bd:
                    9d:e9:36:74:0b:01:c4:4e:a7:78:45:43:5f:3b:ac:
                    5f:02:cd:1d:6c:c6:7d:78:3c:f6:1a:73:de:40:4f:
                    05:92:0e:5e:c5:52:94:e8:71:66:3b:5b:a9:83:c6:
                    8d:fd:e8:fa:c0:f1:58:fa:0f:74:f0:fa:fa:c8:77:
                    06:ee:78:68:9c:5d:37:ed:65:af:ac:c7:ff:57:47:
                    55:e9:2a:2a:b5:b7:ef:89:e6:fe:3d:68:0b:36:0b:
                    4b:57:fc:a8:09:a0:55:15:d3:10:de:ea:03:90:a3:
                    6f:3e:aa:df:ba:f7:a6:34:19:2a:3a:f3:84:24:e1:
                    ba:1c:7b:b5:1a:27:34:86:be:4d:58:86:67:cc:9c:
                    e9:a7:05:8d:be:2e:db:8e:e4:bb:7e:63:b3:a0:fd:
                    09:98:44:04:9f:87:d1:d5:df:bf:7f:af:52:be:1b:
                    59:22:2c:1c:12:de:b9:93:f0:99:51:54:cf:af:60:
                    bc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F3:ED:B1:15:F8:F3:43:51:1B:C8:C8:21:02:FA:9F:10:7B:6C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/900fee6c-ab66-3df5-8b32-a333d2e913d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ee:d0:a3:97:64:8d:67:8f:2b:cb:79:58:27:b5:28:d8:23:
         65:e5:6b:75:4a:bd:b7:7b:ca:5e:e4:fd:a9:64:b3:9f:cc:b9:
         ab:ec:db:f9:32:05:b1:f5:fc:46:2f:ca:57:b3:74:6c:a1:0e:
         dd:56:c3:ef:76:69:44:d7:56:6f:62:61:f2:1e:c4:d6:5b:f9:
         f8:60:79:20:ad:3e:df:27:e2:5a:53:11:20:18:45:23:58:89:
         3c:66:83:eb:48:ec:e6:63:c5:bf:95:ae:39:39:c0:97:99:c4:
         e0:7e:e1:28:3f:4b:fe:5b:9e:c0:36:2f:e2:c7:1d:83:8b:bd:
         45:a7:70:55:19:e2:67:4d:6d:be:a8:64:fa:6c:1d:e3:a7:32:
         cf:80:c7:98:33:0b:a1:f1:b5:1a:6b:86:79:7d:ad:8c:3d:53:
         0d:d9:fc:f5:62:93:87:8c:19:9c:34:9c:02:44:1d:d5:02:14:
         22:16:56:99:7d:bd:a9:be:b6:c7:e1:1c:10:07:a8:0a:2a:82:
         bd:6f:f1:7d:a5:92:5a:e2:08:06:c4:68:c0:0a:4f:98:4f:25:
         6f:67:09:31:01:e8:cd:22:c6:45:e6:77:9f:a0:f1:d3:d6:62:
         a8:00:37:b3:35:1f:fe:f6:73:2c:9e:a1:56:9f:25:b3:cd:d9:
         71:59:2f:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnokNZyis3BW78HQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NTg1MzY5MDEtOWJhYi00MWIyLThhMzctYjlhZGY3MGZmYTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGW/u2EZIYegp+l6IueSOafnrzyxSH2TSVRS
/jZ4Gt5+CYRWBJZU/iWWxiuwlJWnKfQRAQRSPPMi1yApGQUa7YLmVX/J4r4H5b2d
6TZ0CwHETqd4RUNfO6xfAs0dbMZ9eDz2GnPeQE8Fkg5exVKU6HFmO1upg8aN/ej6
wPFY+g908Pr6yHcG7nhonF037WWvrMf/V0dV6Soqtbfvieb+PWgLNgtLV/yoCaBV
FdMQ3uoDkKNvPqrfuvemNBkqOvOEJOG6HHu1Gic0hr5NWIZnzJzppwWNvi7bjuS7
fmOzoP0JmEQEn4fR1d+/f69SvhtZIiwcEt65k/CZUVTPr2C8QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLHz7bEV+PNDURvIyCEC+p8Qe2yvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvOTAwZmVlNmMtYWI2Ni0z
ZGY1LThiMzItYTMzM2QyZTkxM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAntMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDu0KOXZI1njyvLeVgntSjYI2Xla3VKvbd7yl7k/alks5/Muavs2/ky
BbH1/EYvylezdGyhDt1Ww+92aUTXVm9iYfIexNZb+fhgeSCtPt8n4lpTESAYRSNY
iTxmg+tI7OZjxb+Vrjk5wJeZxOB+4Sg/S/5bnsA2L+LHHYOLvUWncFUZ4mdNbb6o
ZPpsHeOnMs+Ax5gzC6HxtRprhnl9rYw9Uw3Z/PVik4eMGZw0nAJEHdUCFCIWVpl9
vam+tsfhHBAHqAoqgr1v8X2lklriCAbEaMAKT5hPJW9nCTEB6M0ixkXmd5+g8dPW
YqgAN7M1H/72cyyeoVafJbPN2XFZL3g=
-----END CERTIFICATE-----