Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/569f972b-897a-3f41-a8cf-463f4822f9ea.roa
File:                     569f972b-897a-3f41-a8cf-463f4822f9ea.roa (raw, json)
Hash identifier:          cKXtxtUAuJ5poVscIIoEoj8hzUnujXh2Ua4Kb3HmFH4=
Subject key identifier:   35:67:25:E2:1F:A6:E2:A0:B2:22:1F:8E:AE:A7:60:27:D8:C9:3B:5D
Certificate issuer:       /CN=d191e4e9-53d8-40a2-82a9-2c8ce3155c43
Certificate serial:       010D0C9F4328583D3ABC8660B51096AF1F06BC00
Authority key identifier: A1:CA:18:8C:7E:0C:D7:8B:DB:EC:8B:25:9F:CC:62:01:1B:85:EF:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/569f972b-897a-3f41-a8cf-463f4822f9ea.roa
Signing time:             Tue 22 Dec 2020 05:00:00 +0000
ROA not before:           Tue 22 Dec 2020 05:00:00 +0000
ROA not after:            Thu 15 Jun 2023 04:00:00 +0000
asID:                     1239
IP address blocks:        199.48.176.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3a:bc:86:60:b5:10:96:af:1f:06:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d191e4e9-53d8-40a2-82a9-2c8ce3155c43
        Validity
            Not Before: Dec 22 05:00:00 2020 GMT
            Not After : Jun 15 04:00:00 2023 GMT
        Subject: CN=277917e2-9490-4c95-af98-cb1046d40712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:9e:28:d4:ee:68:3d:78:2b:d8:93:0c:1d:
                    f3:51:6a:01:95:83:10:5c:83:cf:93:4d:d7:7c:b3:
                    2f:29:f6:40:5f:5c:70:00:58:7a:9c:b5:1f:8f:c9:
                    dd:1a:86:11:3a:47:52:35:bc:32:2a:8f:71:a3:d1:
                    55:33:7a:ba:b3:99:fc:f9:cb:9a:1a:8c:68:22:f6:
                    32:32:7b:22:63:88:ee:17:f2:c5:2b:d8:04:58:94:
                    c4:33:6c:c6:bb:42:5c:dd:05:d2:fc:c8:08:8c:ea:
                    e4:1a:43:99:90:d4:03:b7:52:d1:bb:ca:2c:7a:4a:
                    b8:3a:8e:2b:6d:ce:99:5c:d5:2a:cb:83:25:c2:a1:
                    41:82:c7:67:e1:09:fe:7c:c2:82:11:07:6d:65:7f:
                    9a:a9:ed:87:bc:61:2a:a4:79:05:d8:b1:2d:50:ab:
                    a9:67:1e:e7:f2:3c:26:3a:0b:ac:d9:40:13:fb:ee:
                    16:e4:99:6c:0b:39:4c:ad:9c:23:5e:c3:82:99:cb:
                    c2:71:d2:1d:ac:31:43:af:c4:7b:17:f0:cd:fe:6e:
                    6f:cd:b9:46:e4:b9:0e:b9:44:99:e6:d6:67:57:41:
                    ab:c4:a7:9c:70:89:ff:cb:a8:21:a8:1b:59:80:80:
                    14:f1:35:1c:ee:f8:b7:66:77:e3:08:ac:8f:44:40:
                    3b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:67:25:E2:1F:A6:E2:A0:B2:22:1F:8E:AE:A7:60:27:D8:C9:3B:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/569f972b-897a-3f41-a8cf-463f4822f9ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/d191e4e9-53d8-40a2-82a9-2c8ce3155c43.crl

            X509v3 Authority Key Identifier:
                keyid:A1:CA:18:8C:7E:0C:D7:8B:DB:EC:8B:25:9F:CC:62:01:1B:85:EF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a7:58:d4:bb:16:b5:b1:59:52:69:81:8f:e4:00:5b:4b:b0:
         46:1a:e5:f0:0d:ba:ad:a8:10:7d:b0:9e:a8:0e:b2:20:6b:0d:
         14:87:65:08:30:df:ab:c8:6d:04:0a:7e:e6:7e:9c:d8:c4:26:
         12:9e:cf:30:9f:75:1a:8b:aa:af:3b:5e:c9:9c:1b:12:93:28:
         58:37:92:05:fc:f1:77:bc:5c:35:d4:46:3b:60:61:df:74:61:
         40:54:33:cd:c0:9b:14:63:a2:a0:d7:da:06:f7:bb:40:f6:fd:
         55:59:73:6e:f5:88:66:1a:a1:f4:53:5d:d8:8a:69:d7:07:41:
         63:47:b7:6b:6d:e8:bc:0a:91:97:ac:3e:2f:23:18:d4:13:8a:
         06:ab:49:19:70:9d:dc:ee:cc:e7:49:48:1b:ab:36:00:bd:d8:
         b8:f1:84:bf:8a:bf:94:f8:14:03:72:5d:18:67:17:a3:0b:bd:
         3a:f2:e2:4a:4f:2f:9c:3f:9f:3b:be:6c:6e:21:38:9d:de:e1:
         ed:0c:e2:84:93:30:30:3b:f9:b8:6d:98:8d:35:e9:f0:cd:c1:
         12:3d:10:38:12:d4:87:1d:3c:6e:a0:e0:07:78:3b:26:6f:4f:
         bb:3e:cb:54:c8:a0:48:2a:5b:40:10:5e:6a:b9:dc:61:8f:9c:
         d1:9b:44:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD06vIZgtRCWrx8GvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDE5MWU0ZTktNTNkOC00MGEyLTgyYTktMmM4Y2UzMTU1
YzQzMB4XDTIwMTIyMjA1MDAwMFoXDTIzMDYxNTA0MDAwMFowLzEtMCsGA1UEAxMk
Mjc3OTE3ZTItOTQ5MC00Yzk1LWFmOTgtY2IxMDQ2ZDQwNzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmaeKNTuaD14K9iTDB3zUWoBlYMQXIPPk03X
fLMvKfZAX1xwAFh6nLUfj8ndGoYROkdSNbwyKo9xo9FVM3q6s5n8+cuaGoxoIvYy
MnsiY4juF/LFK9gEWJTEM2zGu0Jc3QXS/MgIjOrkGkOZkNQDt1LRu8osekq4Oo4r
bc6ZXNUqy4MlwqFBgsdn4Qn+fMKCEQdtZX+aqe2HvGEqpHkF2LEtUKupZx7n8jwm
Ogus2UAT++4W5JlsCzlMrZwjXsOCmcvCcdIdrDFDr8R7F/DN/m5vzblG5LkOuUSZ
5tZnV0GrxKeccIn/y6ghqBtZgIAU8TUc7vi3ZnfjCKyPREA7xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVnJeIfpuKgsiIfjq6nYCfYyTtdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTkx
ZTRlOS01M2Q4LTQwYTItODJhOS0yYzhjZTMxNTVjNDMvNTY5Zjk3MmItODk3YS0z
ZjQxLWE4Y2YtNDYzZjQ4MjJmOWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE5MWU0ZTktNTNkOC00MGEyLTgy
YTktMmM4Y2UzMTU1YzQzL2QxOTFlNGU5LTUzZDgtNDBhMi04MmE5LTJjOGNlMzE1
NWM0My5jcmwwHwYDVR0jBBgwFoAUocoYjH4M14vb7Isln8xiARuF718wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTkxZTRlOS01M2Q4LTQwYTItODJhOS0yYzhj
ZTMxNTVjNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzCwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOnWNS7FrWxWVJpgY/kAFtLsEYa5fANuq2oEH2wnqgOsiBrDRSHZQgw
36vIbQQKfuZ+nNjEJhKezzCfdRqLqq87XsmcGxKTKFg3kgX88Xe8XDXURjtgYd90
YUBUM83AmxRjoqDX2gb3u0D2/VVZc271iGYaofRTXdiKadcHQWNHt2tt6LwKkZes
Pi8jGNQTigarSRlwndzuzOdJSBurNgC92LjxhL+Kv5T4FANyXRhnF6MLvTry4kpP
L5w/nzu+bG4hOJ3e4e0M4oSTMDA7+bhtmI016fDNwRI9EDgS1IcdPG6g4Ad4OyZv
T7s+y1TIoEgqW0AQXmq53GGPnNGbRE4=
-----END CERTIFICATE-----