Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/e5ba0989-835a-3f24-8559-676a2a14bacb.roa
File:                     e5ba0989-835a-3f24-8559-676a2a14bacb.roa (raw, json)
Hash identifier:          D2RT5WJQQrL/Mq3Uco5vT6TgCJqIEdp2PJzWIt+4Yp8=
Subject key identifier:   34:96:FE:30:85:30:6F:8A:97:1A:52:4B:69:27:95:B1:61:2A:BC:D1
Certificate issuer:       /CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
Certificate serial:       010D0C9F43285837831792BA2F9F6334EF42E640
Authority key identifier: DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/e5ba0989-835a-3f24-8559-676a2a14bacb.roa
Signing time:             Mon 05 Oct 2020 04:00:00 +0000
ROA not before:           Mon 05 Oct 2020 04:00:00 +0000
ROA not after:            Sun 08 Jan 2023 05:00:00 +0000
asID:                     396982
IP address blocks:        144.49.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:83:17:92:ba:2f:9f:63:34:ef:42:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
        Validity
            Not Before: Oct  5 04:00:00 2020 GMT
            Not After : Jan  8 05:00:00 2023 GMT
        Subject: CN=47bc57ae-d6dd-445f-b561-17d316fdac29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9c:69:b0:79:1b:4f:61:11:5e:c2:39:07:6f:
                    d6:66:e0:f4:4f:73:51:08:4a:9c:1f:0b:87:51:79:
                    79:34:a1:96:57:ca:bd:86:dc:a7:23:af:26:04:f2:
                    8f:9d:ca:39:54:42:52:aa:0f:6b:35:23:b2:20:05:
                    de:66:23:0c:34:f2:d4:1c:e2:d6:cb:b1:f5:63:a1:
                    60:eb:21:47:ec:2d:0f:e1:e5:fc:19:64:28:23:33:
                    cf:c1:2c:be:38:b0:19:c5:e4:6b:3c:a3:41:0f:5d:
                    47:ff:4e:66:06:49:1d:76:23:de:f0:16:a3:b7:a4:
                    17:ef:7c:5d:fc:97:27:1b:b1:3c:98:73:2f:3f:6a:
                    78:3e:b3:b9:87:93:c1:0a:91:88:92:43:83:ef:9e:
                    aa:2c:a2:68:a2:d2:d0:7b:ef:fe:0c:3b:ec:65:69:
                    0d:f6:8e:bc:d8:92:32:01:a4:03:71:c0:0d:b6:35:
                    51:3e:1f:d9:25:29:1a:cd:88:3a:8e:2f:c5:7a:3f:
                    33:5a:93:21:dd:45:74:0c:8b:ca:87:ec:70:a7:6f:
                    2e:f2:7d:17:79:63:fe:ec:fd:95:d2:cf:c0:b0:f9:
                    d0:79:30:a7:90:26:07:8e:af:db:ba:5f:83:fe:57:
                    7a:42:7b:8a:e0:24:a9:17:27:d8:51:1d:ff:97:14:
                    34:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:96:FE:30:85:30:6F:8A:97:1A:52:4B:69:27:95:B1:61:2A:BC:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/e5ba0989-835a-3f24-8559-676a2a14bacb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.crl

            X509v3 Authority Key Identifier:
                keyid:DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.49.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:21:0c:fc:d9:c2:fb:35:ec:02:f0:50:16:07:99:d7:ab:3c:
         39:57:49:73:ce:97:a8:3a:cd:14:d0:42:37:a8:36:1a:60:b0:
         f6:f7:66:f6:4a:49:cd:69:7a:5a:aa:63:77:4d:f9:c1:5e:e9:
         88:18:12:ac:1f:37:02:30:25:56:3a:6e:e8:04:a5:98:23:a9:
         46:70:0a:3b:9a:37:95:3d:95:db:0c:8a:95:04:8f:0f:7d:fd:
         9d:92:20:c8:a4:8f:8d:f7:cd:45:8a:5f:71:4d:12:9d:49:2a:
         33:32:98:04:23:87:dd:47:ee:43:a3:1f:c8:53:b9:39:52:6d:
         49:78:0a:06:f6:b7:dd:ed:32:e3:0f:ca:a2:8b:b0:54:0c:ce:
         27:4a:fe:65:67:d8:40:94:5c:a6:1d:bb:78:95:d1:70:32:1b:
         cf:00:d7:57:e2:e2:ae:9b:03:a9:ef:ab:11:69:16:9b:45:26:
         0d:b1:8c:17:95:26:5c:67:b0:44:7e:4f:a2:7b:21:6e:79:70:
         39:6e:98:72:eb:f0:f3:5c:87:93:b9:18:a7:9a:37:19:d2:94:
         d1:0c:9c:7e:d1:f8:7e:a7:97:2e:24:eb:4a:c2:87:30:95:b8:
         41:61:e4:06:5d:d0:a2:72:6c:9b:3c:a8:67:4d:d7:a3:fa:fe:
         3f:dd:de:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDeDF5K6L59jNO9C5kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTJmZjdjY2YtYzEzOC00ZTI1LWIzYmItZGMyMDY1MTJh
ZjNhMB4XDTIwMTAwNTA0MDAwMFoXDTIzMDEwODA1MDAwMFowLzEtMCsGA1UEAxMk
NDdiYzU3YWUtZDZkZC00NDVmLWI1NjEtMTdkMzE2ZmRhYzI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJxpsHkbT2ERXsI5B2/WZuD0T3NRCEqcHwuH
UXl5NKGWV8q9htynI68mBPKPnco5VEJSqg9rNSOyIAXeZiMMNPLUHOLWy7H1Y6Fg
6yFH7C0P4eX8GWQoIzPPwSy+OLAZxeRrPKNBD11H/05mBkkddiPe8Bajt6QX73xd
/JcnG7E8mHMvP2p4PrO5h5PBCpGIkkOD756qLKJootLQe+/+DDvsZWkN9o682JIy
AaQDccANtjVRPh/ZJSkazYg6ji/Fej8zWpMh3UV0DIvKh+xwp28u8n0XeWP+7P2V
0s/AsPnQeTCnkCYHjq/bul+D/ld6QnuK4CSpFyfYUR3/lxQ0ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSW/jCFMG+KlxpSS2knlbFhKrzRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZm
N2NjZi1jMTM4LTRlMjUtYjNiYi1kYzIwNjUxMmFmM2EvZTViYTA5ODktODM1YS0z
ZjI0LTg1NTktNjc2YTJhMTRiYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTJmZjdjY2YtYzEzOC00ZTI1LWIz
YmItZGMyMDY1MTJhZjNhL2EyZmY3Y2NmLWMxMzgtNGUyNS1iM2JiLWRjMjA2NTEy
YWYzYS5jcmwwHwYDVR0jBBgwFoAU3A/7yt2uLzVgKb+8/bZvLQOf5OAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZmN2NjZi1jMTM4LTRlMjUtYjNiYi1kYzIw
NjUxMmFmM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFkDFgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALUhDPzZwvs17ALwUBYHmderPDlXSXPOl6g6zRTQQjeoNhpgsPb3ZvZK
Sc1pelqqY3dN+cFe6YgYEqwfNwIwJVY6bugEpZgjqUZwCjuaN5U9ldsMipUEjw99
/Z2SIMikj433zUWKX3FNEp1JKjMymAQjh91H7kOjH8hTuTlSbUl4Cgb2t93tMuMP
yqKLsFQMzidK/mVn2ECUXKYdu3iV0XAyG88A11fi4q6bA6nvqxFpFptFJg2xjBeV
JlxnsER+T6J7IW55cDlumHLr8PNch5O5GKeaNxnSlNEMnH7R+H6nly4k60rChzCV
uEFh5AZd0KJybJs8qGdN16P6/j/d3ns=
-----END CERTIFICATE-----