Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/042e2bc4-4061-3915-8d4c-1977704f43ab.roa
File:                     042e2bc4-4061-3915-8d4c-1977704f43ab.roa (raw, json)
Hash identifier:          L+5Sm2enbx9q9glJslCNEvH4NqMRPVZN+OLAvuOt/AU=
Subject key identifier:   6F:EB:B3:4A:4B:40:81:FC:E2:72:E8:86:01:A2:0A:95:83:0C:2A:AA
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328576D51CC73C042CFC17308808337
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/042e2bc4-4061-3915-8d4c-1977704f43ab.roa
Signing time:             Wed 01 Jul 2020 03:51:46 +0000
ROA not before:           Mon 29 Jun 2020 04:00:00 +0000
ROA not after:            Tue 04 Oct 2022 04:00:00 +0000
asID:                     24429
IP address blocks:        163.181.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:08:80:83:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Jun 29 04:00:00 2020 GMT
            Not After : Oct  4 04:00:00 2022 GMT
        Subject: CN=64aa00f3-0b6b-4cec-92ab-281d1e397162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f1:5d:9f:09:c0:a7:93:55:13:cd:bf:80:e0:
                    3c:42:68:93:d0:6b:5f:b5:6f:d3:10:fd:ba:46:ef:
                    86:47:36:31:6c:ca:b6:a5:d4:81:69:cb:bd:4c:a1:
                    c1:e4:76:4d:89:4a:14:b2:23:bc:57:99:55:30:29:
                    b3:91:e4:6e:bf:0c:d3:42:20:95:2f:fd:d7:98:c2:
                    47:d3:dc:07:f8:70:eb:46:e8:f9:36:d9:84:42:a9:
                    b8:f1:ec:c3:cb:26:b6:7d:b3:00:e9:21:fe:ff:ef:
                    da:1b:32:fe:f4:04:2d:ad:76:8c:27:f6:fa:16:bb:
                    fa:75:c6:d4:67:47:46:48:f2:9f:a0:83:c6:ef:81:
                    b7:42:3f:9c:7e:a2:26:05:e6:c9:cf:89:26:43:7d:
                    d3:d9:1d:32:67:d6:e8:ea:3f:ca:bf:8b:5a:4d:68:
                    b2:74:61:d7:ea:d3:da:49:f4:1c:19:1a:1b:f7:6d:
                    1c:cb:18:d6:c9:e2:1e:0e:41:ee:b6:40:99:92:0d:
                    31:c3:20:55:f8:22:a1:de:9f:d4:33:31:60:e9:cd:
                    18:c2:c3:75:6b:96:62:cd:b1:e9:38:9a:08:4b:3f:
                    38:fb:1d:59:23:60:2a:db:26:ab:d1:e1:a5:d1:78:
                    5f:1f:51:26:57:20:36:cb:40:e9:8a:51:74:16:66:
                    70:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EB:B3:4A:4B:40:81:FC:E2:72:E8:86:01:A2:0A:95:83:0C:2A:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/042e2bc4-4061-3915-8d4c-1977704f43ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:4d:41:77:f3:67:97:d7:d8:1e:a3:22:63:3e:b1:e8:7c:bc:
         7f:f2:ec:68:c2:43:cd:aa:6f:30:07:ef:fe:3b:1d:05:47:79:
         a3:37:94:80:9b:0a:df:5b:a6:02:3e:fc:ce:c5:c8:b8:dc:8c:
         94:c9:03:99:17:06:41:74:6c:ea:ab:8a:7f:3e:9a:57:58:10:
         21:4d:36:c8:bf:87:24:53:2f:2b:2e:dd:d5:4e:1f:41:3a:79:
         22:2e:7f:9d:d2:40:21:2e:ed:c3:ec:0f:39:9d:8b:cd:a2:7a:
         86:3a:4e:5e:8b:00:56:94:62:a0:3f:12:4d:d3:e3:c9:8d:63:
         d8:f4:e4:94:be:35:98:60:eb:62:e1:7c:09:d6:fe:ea:2b:a3:
         e8:f7:d0:8c:7b:58:59:7b:84:7f:89:bb:a3:dd:79:4e:b3:34:
         06:26:44:d4:d4:fa:3a:d7:7d:9e:fd:a8:96:6e:5a:b5:17:d7:
         5e:e3:66:7b:af:6d:aa:e3:13:9e:95:ce:9f:45:bf:f0:eb:76:
         38:e6:8f:86:ad:da:b8:75:eb:54:bf:91:b5:c9:d9:95:f7:f5:
         ae:ad:1d:fc:12:6d:52:93:e0:e9:4b:d0:fa:bb:4b:3e:19:4b:
         f6:c2:de:0d:6b:47:a9:c5:79:88:45:87:59:ab:5e:a9:3d:b4:
         b9:a3:86:b7
-----BEGIN CERTIFICATE-----
MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcwiAgzcwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGQ0MzE2MWU0LWRhYzEtNDA3Yi04ZjE2LTU1ZTZlZjEwMGQw
YTAeFw0yMDA2MjkwNDAwMDBaFw0yMjEwMDQwNDAwMDBaMC8xLTArBgNVBAMTJDY0
YWEwMGYzLTBiNmItNGNlYy05MmFiLTI4MWQxZTM5NzE2MjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKvxXZ8JwKeTVRPNv4DgPEJok9BrX7Vv0xD9ukbv
hkc2MWzKtqXUgWnLvUyhweR2TYlKFLIjvFeZVTAps5Hkbr8M00IglS/915jCR9Pc
B/hw60bo+TbZhEKpuPHsw8smtn2zAOkh/v/v2hsy/vQELa12jCf2+ha7+nXG1GdH
Rkjyn6CDxu+Bt0I/nH6iJgXmyc+JJkN909kdMmfW6Oo/yr+LWk1osnRh1+rT2kn0
HBkaG/dtHMsY1sniHg5B7rZAmZINMcMgVfgiod6f1DMxYOnNGMLDdWuWYs2x6Tia
CEs/OPsdWSNgKtsmq9HhpdF4Xx9RJlcgNstA6YpRdBZmcHMCAwEAAaOCA1QwggNQ
MB0GA1UdDgQWBBRv67NKS0CB/OJy6IYBogqVgwwqqjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQzMTYx
ZTQtZGFjMS00MDdiLThmMTYtNTVlNmVmMTAwZDBhLzA0MmUyYmM0LTQwNjEtMzkx
NS04ZDRjLTE5Nzc3MDRmNDNhYi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2Q0MzE2MWU0LWRhYzEtNDA3Yi04ZjE2
LTU1ZTZlZjEwMGQwYS9kNDMxNjFlNC1kYWMxLTQwN2ItOGYxNi01NWU2ZWYxMDBk
MGEuY3JsMB8GA1UdIwQYMBaAFA+t+kAia126yw04NTaMhiDM2V6zMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvZDQzMTYxZTQtZGFjMS00MDdiLThmMTYtNTVlNmVm
MTAwZDBhLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAKO1MFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB
AQArTUF382eX19geoyJjPrHofLx/8uxowkPNqm8wB+/+Ox0FR3mjN5SAmwrfW6YC
PvzOxci43IyUyQOZFwZBdGzqq4p/PppXWBAhTTbIv4ckUy8rLt3VTh9BOnkiLn+d
0kAhLu3D7A85nYvNonqGOk5eiwBWlGKgPxJN0+PJjWPY9OSUvjWYYOti4XwJ1v7q
K6Po99CMe1hZe4R/ibuj3XlOszQGJkTU1Po6132e/aiWblq1F9de42Z7r22q4xOe
lc6fRb/w63Y45o+Grdq4detUv5G1ydmV9/WurR38Em1Sk+DpS9D6u0s+GUv2wt4N
a0epxXmIRYdZq16pPbS5o4a3
-----END CERTIFICATE-----