Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/379566cd-af2c-3bcc-a1c1-bbe336e2c68c.roa
File:                     379566cd-af2c-3bcc-a1c1-bbe336e2c68c.roa (raw, json)
Hash identifier:          9U3/JdrAQw7YqatelMs6f37Gei+pnVjCnjAL1R4QPXw=
Subject key identifier:   11:27:60:70:93:5A:D2:90:B1:4D:F1:43:A9:3C:F6:E5:26:03:AD:90
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7B7840A560784BF641D4100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/379566cd-af2c-3bcc-a1c1-bbe336e2c68c.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        35.193.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b7:84:0a:56:07:84:bf:64:1d:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=5076f914-73cc-4899-baa9-a1bf55f266df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:84:f2:10:69:88:8a:a3:76:f7:3e:8e:cd:a5:
                    8c:e7:31:5e:3f:56:f5:5d:a5:03:2f:50:9a:60:60:
                    ec:e3:a4:fe:76:9b:51:bc:ce:a4:36:c9:3d:69:f8:
                    49:8c:13:07:e7:bd:a1:5c:87:7e:ba:86:17:67:90:
                    82:d2:20:8b:b5:6b:e9:99:81:20:dd:7b:4f:4a:79:
                    36:8c:bc:a5:ed:77:e3:71:18:ad:67:fd:70:b8:fa:
                    4b:ad:dd:e0:37:fb:c0:92:fe:1e:f2:a0:90:9d:6b:
                    37:3e:50:f4:96:c8:10:2e:bd:6a:2c:92:1c:71:7a:
                    7e:fb:15:fb:1b:32:d6:67:1b:5c:fe:53:be:6f:1b:
                    c5:f1:bb:0d:09:44:e7:af:71:1d:a8:1e:ba:d0:1f:
                    f8:9f:f4:15:26:75:36:73:28:c9:81:4f:ac:15:27:
                    70:59:2f:7b:d3:19:a4:c9:7e:0a:6d:8f:ba:90:2a:
                    9c:87:21:83:d7:3f:80:c8:46:10:ec:0a:58:19:6f:
                    0c:c4:f9:c4:56:5f:35:e2:67:3a:8a:a3:e2:1c:47:
                    61:1a:b2:7e:26:5a:2a:2c:cd:f2:bd:e1:78:d3:fc:
                    da:66:bb:c9:b9:3d:62:c2:9e:7b:1b:9e:d9:7e:32:
                    06:9f:40:be:c6:46:a6:fa:54:c6:0a:c5:19:b2:61:
                    3a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:27:60:70:93:5A:D2:90:B1:4D:F1:43:A9:3C:F6:E5:26:03:AD:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/379566cd-af2c-3bcc-a1c1-bbe336e2c68c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.193.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ac:71:e5:30:27:4c:1e:06:3f:95:17:e4:32:87:79:8b:24:
         86:c3:d5:28:10:20:03:87:8a:cf:72:9d:54:ab:e7:7c:ec:9e:
         a9:46:65:07:1f:d9:6a:2d:4c:2c:77:2a:db:a7:7a:34:68:05:
         30:9c:32:64:1b:e0:2d:c8:b4:fd:b3:8b:33:84:1c:f5:89:52:
         2e:d2:42:5e:a8:0d:4b:0f:f4:7b:46:68:ac:c5:4d:d0:df:57:
         ad:9b:a4:65:0a:1f:26:93:06:34:11:89:62:fb:37:90:7e:c5:
         8a:15:28:b3:04:a4:e0:cb:67:45:8d:93:a8:6e:c0:18:89:f9:
         1b:19:4b:f6:e1:fc:bf:75:1f:66:19:90:e5:1d:4c:f0:95:31:
         61:79:03:29:01:4e:fd:5f:4d:3a:19:a4:1c:10:8f:ba:04:4e:
         8e:2b:48:46:f1:ae:9c:64:04:47:c1:9e:ff:bf:01:64:4a:89:
         85:38:d6:ea:38:89:79:91:0d:18:3c:c7:e1:ca:a7:3e:a0:85:
         ce:84:af:4e:ea:f2:c7:b5:97:33:18:9c:b0:de:83:66:a9:54:
         79:25:a4:07:b4:bd:78:22:0b:22:a9:7d:4d:33:d2:d5:94:ed:
         b3:dd:5c:43:88:e6:e7:da:a0:d7:f3:e8:35:82:9f:a3:ff:5b:
         d8:9b:8d:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnt4QKVgeEv2QdQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NTA3NmY5MTQtNzNjYy00ODk5LWJhYTktYTFiZjU1ZjI2NmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmITyEGmIiqN29z6OzaWM5zFeP1b1XaUDL1Ca
YGDs46T+dptRvM6kNsk9afhJjBMH572hXId+uoYXZ5CC0iCLtWvpmYEg3XtPSnk2
jLyl7XfjcRitZ/1wuPpLrd3gN/vAkv4e8qCQnWs3PlD0lsgQLr1qLJIccXp++xX7
GzLWZxtc/lO+bxvF8bsNCUTnr3EdqB660B/4n/QVJnU2cyjJgU+sFSdwWS970xmk
yX4KbY+6kCqchyGD1z+AyEYQ7ApYGW8MxPnEVl814mc6iqPiHEdhGrJ+JloqLM3y
veF40/zaZrvJuT1iwp57G57ZfjIGn0C+xkam+lTGCsUZsmE6nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBEnYHCTWtKQsU3xQ6k89uUmA62QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzc5NTY2Y2QtYWYyYy0z
YmNjLWExYzEtYmJlMzM2ZTJjNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8EwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADisceUwJ0weBj+VF+Qyh3mLJIbD1SgQIAOHis9ynVSr53zsnqlGZQcf
2WotTCx3KtunejRoBTCcMmQb4C3ItP2zizOEHPWJUi7SQl6oDUsP9HtGaKzFTdDf
V62bpGUKHyaTBjQRiWL7N5B+xYoVKLMEpODLZ0WNk6huwBiJ+RsZS/bh/L91H2YZ
kOUdTPCVMWF5AykBTv1fTToZpBwQj7oETo4rSEbxrpxkBEfBnv+/AWRKiYU41uo4
iXmRDRg8x+HKpz6ghc6Er07q8se1lzMYnLDeg2apVHklpAe0vXgiCyKpfU0z0tWU
7bPdXEOI5ufaoNfz6DWCn6P/W9ibjTw=
-----END CERTIFICATE-----