Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/e92196ae-b17d-3c65-962d-d78af6b82bfa.roa
File:                     e92196ae-b17d-3c65-962d-d78af6b82bfa.roa (raw, json)
Hash identifier:          0jZhfP99uxbyhSs47F9QkaQ/TcRRJHdyobsMOOxg+SM=
Subject key identifier:   53:3E:C3:98:5D:56:65:17:58:64:8E:B6:FE:EF:65:57:87:39:4A:38
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F4328576D51CC73C042CFC1739005E79B
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/e92196ae-b17d-3c65-962d-d78af6b82bfa.roa
Signing time:             Mon 27 Jul 2020 11:26:12 +0000
ROA not before:           Fri 15 May 2020 04:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     398143
IP address blocks:        96.46.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:90:05:e7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: May 15 04:00:00 2020 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=2e0e839f-caba-4c64-a3ae-3d1fdc104d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:e4:36:8a:12:d5:4a:21:40:95:a7:1d:d0:
                    47:41:2a:c8:6f:c7:17:cc:0b:38:3c:d5:aa:92:17:
                    ad:a0:2d:84:ff:4c:9a:b3:e3:2f:83:72:97:b4:6b:
                    1b:8e:08:d1:d8:9c:8e:9a:6b:16:04:63:34:a7:70:
                    9a:e4:78:2a:f4:52:1c:0f:9c:43:25:0f:4b:e4:b3:
                    18:7b:ea:9c:13:b8:f6:16:69:6a:7f:ec:4a:6f:21:
                    44:ac:53:a3:00:b5:ca:da:ff:94:3d:d1:2f:d9:d0:
                    d8:ba:38:fb:9c:0b:89:16:f0:1c:20:8f:d6:12:eb:
                    74:b0:a6:ae:b8:72:47:ec:67:e8:b4:3f:b2:6a:39:
                    4d:69:2b:58:2d:ff:3b:55:71:14:be:53:57:62:b2:
                    fd:c2:3f:a4:a4:62:19:98:cd:b0:36:00:c9:0f:1f:
                    bc:a2:4e:4c:c6:b7:4e:ff:5b:34:f7:e4:fd:c1:57:
                    41:08:8f:80:58:b2:54:59:be:0a:eb:3b:28:35:0f:
                    69:2d:f5:f0:8d:c5:23:9c:ff:85:c1:82:62:ba:38:
                    c2:64:94:bd:2a:bc:92:73:c4:11:cd:ca:06:ad:63:
                    8b:6b:f7:31:78:d5:72:f8:82:88:85:5c:36:1e:5f:
                    e4:94:ef:d4:55:e2:ee:91:e2:a9:29:76:f4:a5:1d:
                    a0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3E:C3:98:5D:56:65:17:58:64:8E:B6:FE:EF:65:57:87:39:4A:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/e92196ae-b17d-3c65-962d-d78af6b82bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.46.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d5:33:8f:61:f1:ec:af:76:11:73:f0:27:f6:56:aa:f1:74:
         7d:44:d2:fa:e1:16:0b:b7:69:84:22:56:19:72:00:f7:30:97:
         9b:86:51:67:2e:ed:15:b9:5c:9c:fd:80:2e:d8:2a:ac:c0:9d:
         fe:cb:fc:60:66:60:2d:4c:df:28:2d:3e:1e:40:51:ae:3f:62:
         83:67:3d:78:89:57:f4:a2:8d:ff:36:c2:4b:78:0d:c5:49:a8:
         e5:c2:dd:76:f0:39:34:ff:a3:87:3c:3a:c2:7a:eb:3c:dc:70:
         33:72:dd:3d:d2:c0:15:9e:8b:60:f4:4a:73:b8:40:a2:ed:28:
         b5:eb:5f:f7:ed:11:2d:15:e7:8d:92:0a:f5:4f:f7:06:df:0c:
         8d:e7:8d:df:f0:d3:a8:04:04:51:d9:d1:c9:34:db:21:77:08:
         62:d8:fc:ef:3e:d7:93:bc:f8:7d:e5:37:f2:4a:11:45:21:9b:
         2c:42:30:ed:08:81:ca:ac:04:06:0b:1e:36:fd:c7:31:8c:7f:
         7d:8b:fe:12:be:e0:e4:68:19:36:fa:38:0c:a0:ea:e8:da:07:
         f4:09:21:97:11:ff:88:de:b0:45:96:82:8f:78:b9:3b:f0:e9:
         0e:ea:dd:6f:be:2e:34:26:ab:e5:e3:d1:0d:ad:2b:cd:a9:35:
         c6:a1:5b:0f
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc5AF55swCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRlYWFk
OTAeFw0yMDA1MTUwNDAwMDBaFw0yMjEwMzAwNDAwMDBaMC8xLTArBgNVBAMTJDJl
MGU4MzlmLWNhYmEtNGM2NC1hM2FlLTNkMWZkYzEwNGQ0MTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJ7t5DaKEtVKIUCVpx3QR0EqyG/HF8wLODzVqpIX
raAthP9MmrPjL4Nyl7RrG44I0dicjpprFgRjNKdwmuR4KvRSHA+cQyUPS+SzGHvq
nBO49hZpan/sSm8hRKxTowC1ytr/lD3RL9nQ2Lo4+5wLiRbwHCCP1hLrdLCmrrhy
R+xn6LQ/smo5TWkrWC3/O1VxFL5TV2Ky/cI/pKRiGZjNsDYAyQ8fvKJOTMa3Tv9b
NPfk/cFXQQiPgFiyVFm+Cus7KDUPaS318I3FI5z/hcGCYro4wmSUvSq8knPEEc3K
Bq1ji2v3MXjVcviCiIVcNh5f5JTv1FXi7pHiqSl29KUdoOUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRTPsOYXVZlF1hkjrb+72VXhzlKODCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2
YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVhYWQ5L2U5MjE5NmFlLWIxN2QtM2M2
NS05NjJkLWQ3OGFmNmI4MmJmYS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0
LTdkNDQ4YTRlYWFkOS82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFh
ZDkuY3JsMB8GA1UdIwQYMBaAFCLyDITDChq93o3h3xxfE3jD2URfMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhh
NGVhYWQ5LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGAuADBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAX9Uzj2Hx7K92EXPwJ/ZWqvF0fUTS+uEWC7dphCJWGXIA9zCXm4ZRZy7tFblc
nP2ALtgqrMCd/sv8YGZgLUzfKC0+HkBRrj9ig2c9eIlX9KKN/zbCS3gNxUmo5cLd
dvA5NP+jhzw6wnrrPNxwM3LdPdLAFZ6LYPRKc7hAou0otetf9+0RLRXnjZIK9U/3
Bt8MjeeN3/DTqAQEUdnRyTTbIXcIYtj87z7Xk7z4feU38koRRSGbLEIw7QiByqwE
BgseNv3HMYx/fYv+Er7g5GgZNvo4DKDq6NoH9AkhlxH/iN6wRZaCj3i5O/DpDurd
b74uNCar5ePRDa0rzak1xqFbDw==
-----END CERTIFICATE-----