Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/a0bce882-6c71-3487-b2a8-c976d3cc2782.roa
File:                     a0bce882-6c71-3487-b2a8-c976d3cc2782.roa (raw, json)
Hash identifier:          Svd5XiDhuIGVRMGIIlbnJLuQQz+GBcFowWcJQidRIwU=
Subject key identifier:   D3:C1:1A:0B:6F:9F:2B:ED:CC:71:A2:AC:1C:9E:73:20:38:56:68:97
Certificate issuer:       /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial:       010D0C9F4328576D51CC73C042CFC1740DC4E53C
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/a0bce882-6c71-3487-b2a8-c976d3cc2782.roa
Signing time:             Mon 10 Aug 2020 04:00:00 +0000
ROA not before:           Mon 10 Aug 2020 04:00:00 +0000
ROA not after:            Wed 23 Nov 2022 05:00:00 +0000
asID:                     16628
IP address blocks:        192.3.72.0/24 maxlen: 24
                          192.3.224.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:0d:c4:e5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
        Validity
            Not Before: Aug 10 04:00:00 2020 GMT
            Not After : Nov 23 05:00:00 2022 GMT
        Subject: CN=f02260a0-95f4-417c-8643-3f326616eee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bf:ea:58:47:06:78:4a:7a:73:ff:7c:ad:15:
                    fc:e9:d4:09:f1:ff:66:bc:f9:94:fc:5a:d3:07:1c:
                    f6:35:d8:5c:3e:02:0c:8b:79:d7:a4:ec:8e:50:dc:
                    49:3a:f2:c1:06:ff:d3:1a:09:83:6e:c0:44:98:4e:
                    59:51:2c:a6:d3:09:c3:5a:46:c3:e6:8c:a9:ea:a5:
                    c6:1c:43:f0:c2:ae:36:58:7b:4a:e1:9d:8c:d4:cc:
                    25:21:bb:35:49:da:66:91:15:70:df:6e:1f:97:ed:
                    fe:b4:7c:3e:2c:c9:91:ad:db:69:77:ac:c2:0f:e6:
                    b6:e2:af:3e:c2:11:2e:c6:c4:a2:e4:9a:f2:e4:ab:
                    62:42:0f:df:9f:0b:f3:4d:bf:1d:20:50:08:7f:38:
                    3e:2d:de:bb:86:c8:d6:49:d6:e7:2c:0b:b5:f5:1b:
                    8f:46:d2:ec:1d:ed:3d:44:79:97:d7:4e:4f:f1:c9:
                    f9:fb:a1:60:64:a5:83:ae:30:2e:92:b3:06:cc:41:
                    9b:7f:c4:e0:c9:cc:c6:f8:89:84:93:89:ce:3d:4c:
                    6f:0f:85:9a:32:03:c2:f8:1d:91:ae:e4:49:9c:64:
                    92:7a:0f:b9:83:10:59:e2:b4:e2:16:d0:35:ee:b0:
                    71:ee:cf:23:55:3c:63:80:48:fa:7c:5d:45:da:7c:
                    23:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C1:1A:0B:6F:9F:2B:ED:CC:71:A2:AC:1C:9E:73:20:38:56:68:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/a0bce882-6c71-3487-b2a8-c976d3cc2782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl

            X509v3 Authority Key Identifier:
                keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.3.72.0/24
                  192.3.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:29:92:d3:a1:e5:d1:e5:8d:af:e7:f3:c0:ad:db:4b:ce:29:
         5d:58:79:cc:7d:eb:b7:f0:26:7b:0f:83:b0:b1:87:7e:3e:c0:
         d4:7e:d7:13:3b:33:df:de:d4:63:dc:e7:6d:de:0d:f8:cd:f4:
         96:85:6e:a4:b2:68:a6:53:b3:b9:47:c7:b3:6c:24:dd:70:2e:
         ff:33:1a:e7:dd:bd:a4:88:ca:fb:fc:a6:e2:d8:5d:b7:74:26:
         12:6c:98:91:8c:2e:1a:44:6f:fc:55:ba:01:f4:2a:22:93:8e:
         25:ed:bb:77:37:ea:71:c1:86:37:51:98:82:5c:e7:c0:24:9e:
         2c:c1:ac:d0:bc:9b:15:dd:3f:79:1a:1a:3b:c5:92:f0:83:9f:
         e0:2f:ff:d9:ca:88:08:fc:d5:54:86:ca:cf:59:49:fd:38:98:
         c5:79:49:88:ab:92:36:20:3f:10:a5:18:81:0c:98:5f:79:eb:
         c2:fa:05:95:3d:21:4b:b8:e7:38:19:4e:db:8b:57:ad:ac:81:
         00:bb:07:41:a1:38:f3:4c:71:b3:ff:19:e4:d5:f9:f4:c0:0a:
         92:2a:2e:d9:ce:d0:95:21:df:69:51:be:6b:90:fb:f2:dc:18:
         1c:6c:5c:11:ce:53:cc:6c:ec:6a:5f:df:b6:08:17:05:91:8b:
         5c:87:a8:c5
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BdA3E5TwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTAyMzgyYzctYWJkNS00MjkzLWE3YTItMzM0MDEzZTEy
ODRiMB4XDTIwMDgxMDA0MDAwMFoXDTIyMTEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZjAyMjYwYTAtOTVmNC00MTdjLTg2NDMtM2YzMjY2MTZlZWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb/qWEcGeEp6c/98rRX86dQJ8f9mvPmU/FrT
Bxz2NdhcPgIMi3nXpOyOUNxJOvLBBv/TGgmDbsBEmE5ZUSym0wnDWkbD5oyp6qXG
HEPwwq42WHtK4Z2M1MwlIbs1SdpmkRVw324fl+3+tHw+LMmRrdtpd6zCD+a24q8+
whEuxsSi5Jry5KtiQg/fnwvzTb8dIFAIfzg+Ld67hsjWSdbnLAu19RuPRtLsHe09
RHmX105P8cn5+6FgZKWDrjAukrMGzEGbf8TgyczG+ImEk4nOPUxvD4WaMgPC+B2R
ruRJnGSSeg+5gxBZ4rTiFtA17rBx7s8jVTxjgEj6fF1F2nwjzQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNPBGgtvnyvtzHGirByecyA4VmiXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMDIz
ODJjNy1hYmQ1LTQyOTMtYTdhMi0zMzQwMTNlMTI4NGIvYTBiY2U4ODItNmM3MS0z
NDg3LWIyYTgtYzk3NmQzY2MyNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTAyMzgyYzctYWJkNS00MjkzLWE3
YTItMzM0MDEzZTEyODRiL2UwMjM4MmM3LWFiZDUtNDI5My1hN2EyLTMzNDAxM2Ux
Mjg0Yi5jcmwwHwYDVR0jBBgwFoAUlTu5dQ4dUDZOf9DY3qJs8GzvRUEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMDIzODJjNy1hYmQ1LTQyOTMtYTdhMi0zMzQw
MTNlMTI4NGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwANIAwQA
wAPgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEEpktOh5dHlja/n88Ct20vOKV1Yecx967fwJnsPg7Cxh34+
wNR+1xM7M9/e1GPc523eDfjN9JaFbqSyaKZTs7lHx7NsJN1wLv8zGufdvaSIyvv8
puLYXbd0JhJsmJGMLhpEb/xVugH0KiKTjiXtu3c36nHBhjdRmIJc58AknizBrNC8
mxXdP3kaGjvFkvCDn+Av/9nKiAj81VSGys9ZSf04mMV5SYirkjYgPxClGIEMmF95
68L6BZU9IUu45zgZTtuLV62sgQC7B0GhOPNMcbP/GeTV+fTACpIqLtnO0JUh32lR
vmuQ+/LcGBxsXBHOU8xs7Gpf37YIFwWRi1yHqMU=
-----END CERTIFICATE-----