Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/97f6e8b5-6e96-3597-af37-f53f1adbf8d8.roa
File:                     97f6e8b5-6e96-3597-af37-f53f1adbf8d8.roa (raw, json)
Hash identifier:          lhsMhffNykphJgDg2fBYtZBwOZsxx8oipjQVf3xHrUY=
Subject key identifier:   4A:27:60:6E:B9:B5:07:B3:71:F1:A3:D2:4E:E6:E0:54:40:5F:E8:F9
Certificate issuer:       /CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
Certificate serial:       010D0C9F43285837830D35B16D5E80B76C8DC800
Authority key identifier: E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/97f6e8b5-6e96-3597-af37-f53f1adbf8d8.roa
Signing time:             Thu 24 Sep 2020 04:00:00 +0000
ROA not before:           Thu 24 Sep 2020 04:00:00 +0000
ROA not after:            Sun 08 Jan 2023 05:00:00 +0000
asID:                     212643
IP address blocks:        23.165.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:83:0d:35:b1:6d:5e:80:b7:6c:8d:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
        Validity
            Not Before: Sep 24 04:00:00 2020 GMT
            Not After : Jan  8 05:00:00 2023 GMT
        Subject: CN=19546025-3bc5-4bfc-92fa-bd1f91d7c9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:57:9d:5f:35:87:b1:94:5f:ee:ce:7e:b8:
                    c3:bd:25:bf:10:59:99:b9:57:79:ea:d0:c3:c8:5b:
                    c0:8d:b3:20:2d:34:15:d9:67:e7:f4:54:e5:3b:4a:
                    67:3c:03:24:0f:6d:b7:01:c7:d7:d3:07:37:2d:72:
                    27:fc:00:26:ce:61:4d:53:40:22:13:6f:0a:6c:3c:
                    ff:91:f2:51:cc:0f:41:51:2b:56:3d:99:3d:fc:7e:
                    03:5a:40:3d:b5:71:dc:7b:58:65:90:e5:94:2f:f5:
                    2b:6d:c5:69:c3:8e:9a:c4:ad:63:75:fa:09:d3:7f:
                    f2:29:77:d4:4e:36:6a:66:ba:9c:92:77:9e:ce:7a:
                    bf:3c:21:b8:c1:d6:aa:7f:e9:0d:9f:b7:2f:94:e5:
                    cc:f5:0c:f3:d1:68:7e:8e:28:54:c4:e5:94:2a:c5:
                    38:07:2d:83:57:e5:dc:22:bd:a2:04:11:d9:97:e2:
                    dc:39:85:63:a2:b4:bc:35:11:b0:d1:d1:cd:f2:8c:
                    2e:1f:77:15:39:80:75:42:63:83:ac:8d:8c:9a:87:
                    c8:d1:de:dc:e1:0b:0d:59:fa:46:08:5e:14:85:18:
                    bd:62:2f:a8:61:cb:d6:61:4c:13:cd:f2:38:b3:e2:
                    95:33:cb:3a:76:f2:54:bc:97:79:78:a1:c9:8e:60:
                    67:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:27:60:6E:B9:B5:07:B3:71:F1:A3:D2:4E:E6:E0:54:40:5F:E8:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/97f6e8b5-6e96-3597-af37-f53f1adbf8d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl

            X509v3 Authority Key Identifier:
                keyid:E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:98:8f:9c:44:bf:87:99:f4:18:a9:fc:84:18:a6:d1:c9:c0:
         fd:35:01:a0:44:f4:fd:ab:4e:70:7d:be:d9:28:7d:de:18:11:
         22:6c:12:81:a1:2d:67:61:c8:74:f9:dd:e7:64:86:4c:04:f6:
         67:a1:5e:df:fd:85:10:e5:d0:4d:e6:a5:9b:28:78:0e:3a:1f:
         48:89:8a:42:97:1c:f0:57:7f:98:12:2c:5f:c1:6e:3c:4d:83:
         86:c7:31:f1:74:fe:9e:10:4d:bd:71:ec:f7:49:74:cc:3a:16:
         da:0b:25:24:29:f4:67:e9:9e:3c:38:20:36:27:bc:90:d3:35:
         03:80:49:d3:56:18:8c:2e:32:92:c2:9e:da:cd:3c:01:61:43:
         53:ca:42:7e:8e:4c:38:c7:96:de:7d:0c:5e:c9:c0:27:d3:f6:
         b4:ba:89:ec:50:94:e4:47:1e:47:ec:56:92:98:b1:c1:8a:35:
         6e:8a:c6:1a:3d:67:81:72:bc:e7:b9:2d:20:e7:bd:16:3c:bd:
         ff:2b:ca:7d:8d:61:f0:a8:25:e5:30:5c:23:2d:f0:25:f1:45:
         0c:1b:14:6e:79:4d:9f:11:e4:eb:81:3b:64:dc:91:5c:1a:57:
         e4:86:f1:98:d5:44:82:e0:86:8d:7d:31:0e:95:b5:d8:6c:08:
         ff:f2:9a:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDeDDTWxbV6At2yNyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmNjNDM5YTEtZjVlZC00OTM3LWI0NzgtNjRkYTZiNGZl
ODg3MB4XDTIwMDkyNDA0MDAwMFoXDTIzMDEwODA1MDAwMFowLzEtMCsGA1UEAxMk
MTk1NDYwMjUtM2JjNS00YmZjLTkyZmEtYmQxZjkxZDdjOWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor1XnV81h7GUX+7OfrjDvSW/EFmZuVd56tDD
yFvAjbMgLTQV2Wfn9FTlO0pnPAMkD223AcfX0wc3LXIn/AAmzmFNU0AiE28KbDz/
kfJRzA9BUStWPZk9/H4DWkA9tXHce1hlkOWUL/UrbcVpw46axK1jdfoJ03/yKXfU
TjZqZrqckneeznq/PCG4wdaqf+kNn7cvlOXM9Qzz0Wh+jihUxOWUKsU4By2DV+Xc
Ir2iBBHZl+LcOYVjorS8NRGw0dHN8owuH3cVOYB1QmODrI2MmofI0d7c4QsNWfpG
CF4UhRi9Yi+oYcvWYUwTzfI4s+KVM8s6dvJUvJd5eKHJjmBnHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEonYG65tQezcfGj0k7m4FRAX+j5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82Y2M0
MzlhMS1mNWVkLTQ5MzctYjQ3OC02NGRhNmI0ZmU4ODcvOTdmNmU4YjUtNmU5Ni0z
NTk3LWFmMzctZjUzZjFhZGJmOGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmNjNDM5YTEtZjVlZC00OTM3LWI0
NzgtNjRkYTZiNGZlODg3LzZjYzQzOWExLWY1ZWQtNDkzNy1iNDc4LTY0ZGE2YjRm
ZTg4Ny5jcmwwHwYDVR0jBBgwFoAU54Oux1f+8aa2yRyYWepU8k0eWVQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82Y2M0MzlhMS1mNWVkLTQ5MzctYjQ3OC02NGRh
NmI0ZmU4ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6WQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOYj5xEv4eZ9Bip/IQYptHJwP01AaBE9P2rTnB9vtkofd4YESJsEoGh
LWdhyHT53edkhkwE9mehXt/9hRDl0E3mpZsoeA46H0iJikKXHPBXf5gSLF/BbjxN
g4bHMfF0/p4QTb1x7PdJdMw6FtoLJSQp9Gfpnjw4IDYnvJDTNQOASdNWGIwuMpLC
ntrNPAFhQ1PKQn6OTDjHlt59DF7JwCfT9rS6iexQlORHHkfsVpKYscGKNW6Kxho9
Z4FyvOe5LSDnvRY8vf8ryn2NYfCoJeUwXCMt8CXxRQwbFG55TZ8R5OuBO2TckVwa
V+SG8ZjVRILgho19MQ6VtdhsCP/ymjc=
-----END CERTIFICATE-----