Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/d0dd0db5-49e8-33cf-b43a-cee38485fc1a.roa
File:                     d0dd0db5-49e8-33cf-b43a-cee38485fc1a.roa (raw, json)
Hash identifier:          lajL+Ok5MdqcIWybnRJ91yyqQjk+qXMwcxvHMjyBylQ=
Subject key identifier:   05:51:10:0C:05:9F:C2:7D:87:3C:51:A9:19:4E:0A:73:35:12:B6:CB
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328583D42ED6D16344A5D221B1A6980
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/d0dd0db5-49e8-33cf-b43a-cee38485fc1a.roa
Signing time:             Thu 17 Mar 2022 04:00:00 +0000
ROA not before:           Thu 17 Mar 2022 04:00:00 +0000
ROA not after:            Sat 16 Apr 2022 04:00:00 +0000
asID:                     1239
IP address blocks:        139.5.20.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:42:ed:6d:16:34:4a:5d:22:1b:1a:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Mar 17 04:00:00 2022 GMT
            Not After : Apr 16 04:00:00 2022 GMT
        Subject: CN=d6284411-1a78-4c50-bc3d-7d3313e12e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:f2:52:6f:47:95:c1:09:6e:ea:44:6a:28:
                    0a:47:1a:08:36:15:82:20:46:32:0c:4d:d9:8a:42:
                    29:89:79:7e:7c:92:3f:c5:42:0c:e4:64:69:d0:60:
                    2a:bc:7c:8d:ac:e2:ac:55:d8:53:3a:e7:70:2b:cb:
                    ea:01:75:cb:45:8d:32:ef:90:e2:98:7e:e9:5d:4d:
                    02:b7:61:36:31:58:94:68:59:19:1e:c6:b8:3c:a7:
                    fb:66:dc:64:fd:b8:6f:bc:55:72:e6:3e:a8:1d:5c:
                    bb:cd:eb:aa:68:49:f9:87:6d:b4:86:6d:61:e8:74:
                    69:25:f6:a4:1b:32:40:d7:b5:3b:ce:0e:00:61:61:
                    f6:51:56:c0:f3:bf:64:58:69:0e:73:84:c5:ea:d0:
                    73:6f:09:6a:1c:92:71:e0:77:06:12:23:8b:e5:28:
                    62:e8:e6:8f:21:04:6c:c5:4f:b6:4d:16:8f:de:90:
                    b7:64:f3:e0:32:e1:c7:ff:dd:f2:b3:6a:0f:29:14:
                    05:d1:b4:47:99:4a:17:9a:9f:39:b4:42:b3:1e:89:
                    42:09:ff:1f:be:78:76:b3:18:b3:cf:0b:fd:88:6d:
                    c9:b6:36:bb:8f:75:40:4c:23:7d:b6:c9:b5:bb:62:
                    08:7d:ed:bd:9e:ea:ae:22:d9:84:eb:8b:8c:a2:a8:
                    e3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:51:10:0C:05:9F:C2:7D:87:3C:51:A9:19:4E:0A:73:35:12:B6:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/d0dd0db5-49e8-33cf-b43a-cee38485fc1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.5.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:32:c5:8b:41:c5:e5:1b:f1:37:cb:0c:3f:76:e1:10:60:32:
         ae:5b:b6:9a:66:2b:26:3f:51:4b:b5:e3:d5:d0:6e:8f:c7:d3:
         cd:a6:c1:9f:90:76:0d:f5:f7:f5:81:a6:da:5f:a4:ea:ca:58:
         c1:c6:3a:8d:97:f4:71:7d:10:5a:04:05:94:4d:b3:85:e9:eb:
         b0:0a:aa:f1:1a:b8:51:86:10:b5:30:86:55:1e:be:43:56:f5:
         d1:42:63:d3:81:d8:aa:54:4f:fc:4a:06:53:b0:e3:54:20:d8:
         f9:23:c9:f0:73:93:7c:d6:ca:ae:4e:25:23:07:fa:ba:64:da:
         66:f9:85:e9:58:ee:14:a0:a1:7f:68:fd:4b:03:d7:46:eb:a2:
         73:4a:49:8d:4d:28:6b:cf:93:d3:15:14:b1:52:12:44:27:6b:
         2d:8d:6d:f7:84:e0:0c:72:d6:69:53:6e:4d:a1:8b:3c:8d:f0:
         a1:af:f9:ae:18:d3:64:61:ec:cb:74:22:43:2c:4a:cb:32:8a:
         00:dc:05:1f:7b:9f:82:06:84:be:f6:16:2d:7e:36:cd:0b:2f:
         ba:cd:ac:81:0c:8a:1c:52:b3:76:b7:fd:ac:47:d0:e9:68:8d:
         ce:fc:87:2e:d3:8b:f7:3c:cb:fb:1a:ab:6d:14:98:8c:16:69:
         64:80:75:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1C7W0WNEpdIhsaaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTljMDUwYzgtYmQxZi00ZTQxLTkzMWYtMTZlYTdiOWVj
YWZhMB4XDTIyMDMxNzA0MDAwMFoXDTIyMDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDYyODQ0MTEtMWE3OC00YzUwLWJjM2QtN2QzMzEzZTEyZTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFryUm9HlcEJbupEaigKRxoINhWCIEYyDE3Z
ikIpiXl+fJI/xUIM5GRp0GAqvHyNrOKsVdhTOudwK8vqAXXLRY0y75DimH7pXU0C
t2E2MViUaFkZHsa4PKf7Ztxk/bhvvFVy5j6oHVy7zeuqaEn5h220hm1h6HRpJfak
GzJA17U7zg4AYWH2UVbA879kWGkOc4TF6tBzbwlqHJJx4HcGEiOL5Shi6OaPIQRs
xU+2TRaP3pC3ZPPgMuHH/93ys2oPKRQF0bRHmUoXmp85tEKzHolCCf8fvnh2sxiz
zwv9iG3Jtja7j3VATCN9tsm1u2IIfe29nuquItmE64uMoqjj0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAVREAwFn8J9hzxRqRlOCnM1ErbLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMw
NTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVhN2I5ZWNhZmEvZDBkZDBkYjUtNDllOC0z
M2NmLWI0M2EtY2VlMzg0ODVmYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTljMDUwYzgtYmQxZi00ZTQxLTkz
MWYtMTZlYTdiOWVjYWZhLzE5YzA1MGM4LWJkMWYtNGU0MS05MzFmLTE2ZWE3Yjll
Y2FmYS5jcmwwHwYDVR0jBBgwFoAUgMASK73s01oy3eeuG/C5I0LAtzMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMwNTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVh
N2I5ZWNhZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiwUUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0yxYtBxeUb8TfLDD924RBgMq5btppmKyY/UUu149XQbo/H082mwZ+Q
dg319/WBptpfpOrKWMHGOo2X9HF9EFoEBZRNs4Xp67AKqvEauFGGELUwhlUevkNW
9dFCY9OB2KpUT/xKBlOw41Qg2PkjyfBzk3zWyq5OJSMH+rpk2mb5helY7hSgoX9o
/UsD10bronNKSY1NKGvPk9MVFLFSEkQnay2NbfeE4Axy1mlTbk2hizyN8KGv+a4Y
02Rh7Mt0IkMsSssyigDcBR97n4IGhL72Fi1+Ns0LL7rNrIEMihxSs3a3/axH0Olo
jc78hy7Ti/c8y/saq20UmIwWaWSAdd0=
-----END CERTIFICATE-----