Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/0e313c85-10cb-38f3-af39-d817c593b491.roa
File:                     0e313c85-10cb-38f3-af39-d817c593b491.roa (raw, json)
Hash identifier:          UIC4LunYhlmebjjdXQ/51HOE0peYckt3jOIq5da7X2o=
Subject key identifier:   EB:42:E4:35:47:B8:F6:62:27:F5:ED:61:AB:F1:5D:A4:23:EA:1A:D0
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7C51D09EBD65142CDE4EC80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/0e313c85-10cb-38f3-af39-d817c593b491.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c5:1d:09:eb:d6:51:42:cd:e4:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=35491afc-58f8-4060-8f24-1498ca30afff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:8e:05:21:86:83:f5:ca:86:74:7e:f5:18:
                    97:29:77:b5:7c:15:80:07:58:b7:91:e1:de:a7:66:
                    12:4d:ad:39:b7:aa:3a:ad:7e:fb:02:0f:97:e6:1a:
                    e4:b2:0f:35:9d:dc:f5:5b:cc:7f:14:48:1a:5e:eb:
                    a1:02:f3:e8:27:29:fa:a0:8d:13:f5:1a:34:b5:33:
                    74:e4:84:eb:b7:b9:57:43:d7:be:46:5f:18:82:45:
                    c0:33:cf:08:3e:37:6a:e1:b5:f4:32:99:d5:07:6b:
                    1d:a3:de:30:d8:c7:40:9b:97:bf:82:dc:c9:d7:5d:
                    87:a2:42:8c:bd:95:44:24:24:4a:92:9c:b9:7e:e1:
                    db:44:87:d9:d3:c4:c8:4e:32:58:c4:46:d5:c6:b8:
                    81:e4:ce:ea:9c:05:2a:65:72:a8:24:8e:82:fc:cd:
                    0a:77:db:2c:ea:83:87:f5:c2:31:7d:b5:ea:4f:eb:
                    34:16:79:69:44:84:95:47:ea:f8:cd:d5:70:60:93:
                    ca:c5:40:6c:75:15:44:b1:24:c3:b6:41:c4:23:f5:
                    f2:5e:46:c4:75:04:e5:a2:99:0b:4a:15:a4:6c:d3:
                    c9:1a:57:5a:e4:a8:ff:8c:a9:9c:b9:5e:b6:1a:64:
                    b8:29:b0:78:b7:2c:02:36:79:1d:41:88:32:34:cb:
                    68:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:42:E4:35:47:B8:F6:62:27:F5:ED:61:AB:F1:5D:A4:23:EA:1A:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/0e313c85-10cb-38f3-af39-d817c593b491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:4d:f3:d6:b7:80:89:ed:a7:87:95:91:63:57:35:8f:91:3b:
         52:5c:e7:c7:cf:ef:2e:e9:22:25:1f:8c:55:d8:dd:5f:70:3a:
         0f:cf:10:3b:a1:10:82:82:7f:b2:4b:f3:6e:47:a2:8e:f6:1b:
         e5:47:3a:de:73:32:07:6d:b0:bc:c9:cd:bd:a4:44:c6:09:87:
         73:37:08:82:b1:3a:38:02:7d:6c:7a:41:3a:a7:7c:49:2a:19:
         e7:a8:f0:bf:24:b7:6f:ff:4a:32:e6:12:f8:9a:6b:06:64:21:
         aa:64:be:c6:65:42:58:39:4c:da:f5:91:af:7a:ad:f6:e1:2c:
         76:2b:f7:0b:46:a3:da:46:e2:ec:17:d9:e3:a0:4e:c5:4d:ac:
         37:cc:40:01:23:96:f7:60:56:3f:3e:f5:ee:d4:d0:03:41:a2:
         16:a3:c1:21:68:93:46:b4:7c:84:1c:1d:44:e8:56:7c:85:0b:
         36:96:b8:6d:d0:e5:1d:53:ef:ba:b1:a4:3c:c0:86:00:69:9d:
         5f:e8:96:cf:3d:f1:14:e5:07:99:11:8e:07:38:c2:14:67:e7:
         f6:52:dc:e4:86:ab:cf:82:36:63:eb:ad:4b:96:3a:86:d5:ce:
         05:aa:bc:d2:27:50:8d:80:5e:7a:8f:67:7b:48:fd:b7:87:30:
         cd:06:5d:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnxR0J69ZRQs3k7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MzU0OTFhZmMtNThmOC00MDYwLThmMjQtMTQ5OGNhMzBhZmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+6OBSGGg/XKhnR+9RiXKXe1fBWAB1i3keHe
p2YSTa05t6o6rX77Ag+X5hrksg81ndz1W8x/FEgaXuuhAvPoJyn6oI0T9Ro0tTN0
5ITrt7lXQ9e+Rl8YgkXAM88IPjdq4bX0MpnVB2sdo94w2MdAm5e/gtzJ112HokKM
vZVEJCRKkpy5fuHbRIfZ08TITjJYxEbVxriB5M7qnAUqZXKoJI6C/M0Kd9ss6oOH
9cIxfbXqT+s0FnlpRISVR+r4zdVwYJPKxUBsdRVEsSTDtkHEI/XyXkbEdQTlopkL
ShWkbNPJGlda5Kj/jKmcuV62GmS4KbB4tywCNnkdQYgyNMtoNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOtC5DVHuPZiJ/XtYavxXaQj6hrQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMGUzMTNjODUtMTBjYi0z
OGYzLWFmMzktZDgxN2M1OTNiNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO23MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALNN89a3gIntp4eVkWNXNY+RO1Jc58fP7y7pIiUfjFXY3V9wOg/PEDuh
EIKCf7JL825Hoo72G+VHOt5zMgdtsLzJzb2kRMYJh3M3CIKxOjgCfWx6QTqnfEkq
Geeo8L8kt2//SjLmEviaawZkIapkvsZlQlg5TNr1ka96rfbhLHYr9wtGo9pG4uwX
2eOgTsVNrDfMQAEjlvdgVj8+9e7U0ANBohajwSFok0a0fIQcHUToVnyFCzaWuG3Q
5R1T77qxpDzAhgBpnV/ols898RTlB5kRjgc4whRn5/ZS3OSGq8+CNmPrrUuWOobV
zgWqvNInUI2AXnqPZ3tI/beHMM0GXV4=
-----END CERTIFICATE-----