Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/71486191-e8d9-3458-a278-3aa5a37daf2b.roa
File:                     71486191-e8d9-3458-a278-3aa5a37daf2b.roa (raw, json)
Hash identifier:          zBt4leFpc0q8QBP5/H8K6nvohYWGoRqGuFnB/zwoCC0=
Subject key identifier:   71:6D:96:4A:2D:B4:7F:D2:29:CA:40:5E:B4:21:93:E8:3C:AC:F6:EA
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328583B67F057B7BF81A1B3AF1E0700
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/71486191-e8d9-3458-a278-3aa5a37daf2b.roa
Signing time:             Wed 30 Sep 2020 04:00:00 +0000
ROA not before:           Wed 30 Sep 2020 04:00:00 +0000
ROA not after:            Sat 31 Dec 2022 05:00:00 +0000
asID:                     21859
IP address blocks:        107.148.160.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:67:f0:57:b7:bf:81:a1:b3:af:1e:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 30 04:00:00 2020 GMT
            Not After : Dec 31 05:00:00 2022 GMT
        Subject: CN=1ac7cfcf-6d0c-460e-aada-e7d81a7f1507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:53:67:7a:fe:b1:ce:1b:6a:49:02:0c:7c:
                    a7:86:ab:40:07:20:ea:60:8a:1a:27:5c:1a:0d:a2:
                    6a:ca:df:e5:86:eb:ed:25:fd:22:78:65:14:50:15:
                    c1:d0:7f:c4:31:c4:7c:e2:5f:e8:3f:27:0c:43:54:
                    b3:8c:fc:f8:58:c8:60:8c:fc:7d:cf:62:4c:0e:0c:
                    b2:38:86:3b:8b:23:83:9b:61:02:1f:4b:32:a0:51:
                    dd:ca:26:ab:17:db:d2:6b:bb:e7:fe:19:9b:2b:bd:
                    b8:49:c4:22:3b:93:9d:ff:18:15:5e:74:b4:08:f5:
                    0b:ea:07:cc:77:ed:1e:ef:c2:fe:0a:aa:49:da:d3:
                    4b:bf:1b:3d:d3:45:b3:d3:ba:57:4a:6d:7f:87:1b:
                    07:f7:4c:b6:90:e4:65:c7:8b:df:f2:54:c6:9f:3b:
                    3f:8f:a9:59:33:98:40:96:0e:06:51:58:9f:e6:d5:
                    ed:e6:52:7e:ec:62:25:38:dd:de:be:82:af:87:5d:
                    76:65:f8:91:b4:2d:3a:f9:ea:f7:cc:0e:b7:87:2f:
                    e3:4f:83:cb:de:b8:be:97:c1:b6:f8:37:73:12:b0:
                    bb:11:72:de:20:82:3e:ff:99:0e:9f:95:9a:1c:de:
                    68:01:bc:8f:02:09:4d:84:a2:5b:c3:2f:d6:db:e8:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6D:96:4A:2D:B4:7F:D2:29:CA:40:5E:B4:21:93:E8:3C:AC:F6:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/71486191-e8d9-3458-a278-3aa5a37daf2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:53:0c:d8:2b:d6:80:cc:ea:92:57:4a:26:82:9c:15:15:2e:
         f6:e3:da:3d:5a:c6:9c:6d:14:10:15:62:f7:84:ea:d2:77:97:
         20:02:99:68:f2:c6:76:67:99:a6:f5:30:a3:8b:ba:96:f7:87:
         e4:a0:02:53:a0:56:9f:0b:e3:73:2e:25:03:b2:ec:83:0c:1c:
         a1:62:93:18:3c:64:c9:e5:a6:83:c8:38:a7:a0:e8:91:fa:96:
         05:1b:49:a8:6c:07:ab:7b:00:60:4e:93:f4:c4:0d:8c:2f:70:
         a6:df:b1:87:81:dd:81:50:e2:66:0d:98:76:a2:ca:a3:1d:52:
         3b:50:bd:80:71:47:31:43:bf:01:89:4f:23:e4:86:f4:26:5d:
         65:52:28:7f:eb:e9:1c:58:ab:c6:26:63:da:24:f8:a9:75:0d:
         12:ba:cb:c4:8c:ab:b4:a1:07:5d:26:89:7c:5c:74:e3:74:d6:
         f9:1f:f9:98:8d:94:8d:19:76:02:76:0e:b6:17:2c:7f:aa:7c:
         9b:23:7e:eb:42:1c:d0:0a:59:10:a6:57:e6:76:41:0d:07:a4:
         b6:74:2f:79:54:a6:ba:09:17:52:8c:ad:0e:a7:8f:0e:30:2d:
         d6:16:7d:0b:89:f3:68:aa:6b:b6:09:5b:51:b5:77:a2:d1:2b:
         f9:4a:1b:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDtn8Fe3v4Ghs68eBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTIwMDkzMDA0MDAwMFoXDTIyMTIzMTA1MDAwMFowLzEtMCsGA1UEAxMk
MWFjN2NmY2YtNmQwYy00NjBlLWFhZGEtZTdkODFhN2YxNTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWtTZ3r+sc4bakkCDHynhqtAByDqYIoaJ1wa
DaJqyt/lhuvtJf0ieGUUUBXB0H/EMcR84l/oPycMQ1SzjPz4WMhgjPx9z2JMDgyy
OIY7iyODm2ECH0syoFHdyiarF9vSa7vn/hmbK724ScQiO5Od/xgVXnS0CPUL6gfM
d+0e78L+CqpJ2tNLvxs900Wz07pXSm1/hxsH90y2kORlx4vf8lTGnzs/j6lZM5hA
lg4GUVif5tXt5lJ+7GIlON3evoKvh112ZfiRtC06+er3zA63hy/jT4PL3ri+l8G2
+DdzErC7EXLeIII+/5kOn5WaHN5oAbyPAglNhKJbwy/W2+hk8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFtlkottH/SKcpAXrQhk+g8rPbqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNzE0ODYxOTEtZThkOS0z
NDU4LWEyNzgtM2FhNWEzN2RhZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5SgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtTDNgr1oDM6pJXSiaCnBUVLvbj2j1axpxtFBAVYveE6tJ3lyACmWjy
xnZnmab1MKOLupb3h+SgAlOgVp8L43MuJQOy7IMMHKFikxg8ZMnlpoPIOKeg6JH6
lgUbSahsB6t7AGBOk/TEDYwvcKbfsYeB3YFQ4mYNmHaiyqMdUjtQvYBxRzFDvwGJ
TyPkhvQmXWVSKH/r6RxYq8YmY9ok+Kl1DRK6y8SMq7ShB10miXxcdON01vkf+ZiN
lI0ZdgJ2DrYXLH+qfJsjfutCHNAKWRCmV+Z2QQ0HpLZ0L3lUproJF1KMrQ6njw4w
LdYWfQuJ82iqa7YJW1G1d6LRK/lKG64=
-----END CERTIFICATE-----