Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/edfc42e0-4af1-3e32-b5fe-d192327b94ee.roa
File:                     edfc42e0-4af1-3e32-b5fe-d192327b94ee.roa (raw, json)
Hash identifier:          P0CdTGy2COghd7XYrFh/kpQF4X5UQIc/DHBHnrFWMd0=
Subject key identifier:   2B:10:F8:1D:FE:2D:82:48:B0:4F:1A:CF:C4:2F:2D:61:69:7D:AC:9C
Certificate issuer:       /CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
Certificate serial:       010D0C9F4328583949733600F4413E3814DB66F0
Authority key identifier: 64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/edfc42e0-4af1-3e32-b5fe-d192327b94ee.roa
Signing time:             Wed 17 Mar 2021 04:00:00 +0000
ROA not before:           Wed 17 Mar 2021 04:00:00 +0000
ROA not after:            Fri 17 Mar 2023 04:00:00 +0000
asID:                     31849
IP address blocks:        67.213.128.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:49:73:36:00:f4:41:3e:38:14:db:66:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
        Validity
            Not Before: Mar 17 04:00:00 2021 GMT
            Not After : Mar 17 04:00:00 2023 GMT
        Subject: CN=bf2386fc-8988-400b-863c-0e7215e39bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:81:ce:c8:f6:98:5d:33:bd:e0:c2:dd:57:bd:
                    cc:a9:e8:a3:51:35:5a:51:e1:0c:24:a8:47:34:0d:
                    37:da:cb:c9:7d:66:27:58:21:15:cd:55:1b:ab:b6:
                    7d:66:de:74:46:7a:12:9a:bd:1e:b6:6e:52:5a:88:
                    cd:f8:f9:65:8b:ef:a1:6c:2a:2f:a6:02:f2:8d:1e:
                    70:fc:20:a7:0b:a6:b9:5b:4b:aa:cd:e3:bb:e2:60:
                    7a:4e:4f:35:0f:a0:bf:37:85:af:89:71:1f:8c:6f:
                    7e:2e:ee:90:b4:e4:f3:ab:4b:5f:99:fc:49:70:fb:
                    79:e8:4c:2b:4b:03:9d:ff:ae:60:c2:8c:96:7a:8a:
                    db:b9:eb:07:be:d3:a9:47:9f:bc:4f:74:cc:99:a8:
                    9b:3c:02:24:17:18:8e:72:3a:76:1c:b6:1f:6c:8c:
                    1d:b1:21:89:96:64:3a:05:77:3a:12:61:24:f8:4b:
                    a8:fa:ee:69:a9:5d:ee:34:15:68:00:74:0a:e4:51:
                    83:5d:f5:65:a2:bd:76:92:af:74:77:60:5c:54:44:
                    d9:ce:27:2d:ea:17:f2:30:f7:0e:9e:1b:22:aa:d6:
                    b1:1d:e9:f5:a1:58:2b:80:37:be:d5:44:ee:95:07:
                    e5:ee:d4:f6:74:e8:76:c6:19:28:d3:c3:49:9b:fc:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:10:F8:1D:FE:2D:82:48:B0:4F:1A:CF:C4:2F:2D:61:69:7D:AC:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/edfc42e0-4af1-3e32-b5fe-d192327b94ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl

            X509v3 Authority Key Identifier:
                keyid:64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:69:c3:1e:f2:b4:49:72:d4:f0:5c:a1:af:04:e8:3f:96:a1:
         59:99:0b:92:14:58:93:77:8b:6b:4a:b6:f2:29:46:7a:32:db:
         6e:32:ab:0f:f2:31:76:d5:db:a3:e4:eb:26:19:fa:5b:f2:5f:
         80:f2:7a:59:21:1e:5f:84:ea:de:01:7d:fa:26:82:3d:f6:d5:
         e8:0c:f1:3c:ed:a2:29:27:7f:4e:c0:2d:17:95:82:03:b8:a6:
         47:c8:6d:11:89:ce:64:62:e8:01:0a:da:5c:8a:e8:66:c2:5b:
         ee:5b:eb:49:1e:4f:07:4a:cf:0e:3b:e1:49:a9:6c:a9:50:97:
         0a:9b:66:eb:ed:4f:a0:14:2b:84:c4:03:4b:11:74:f4:e9:89:
         18:86:c4:86:2f:e4:06:33:38:42:0b:01:65:fb:63:91:2f:d6:
         f5:0c:01:b8:69:3e:45:fe:ce:cf:aa:78:15:c0:44:55:90:74:
         ee:1e:ac:35:66:b4:cf:2c:12:c4:0b:d3:0c:50:4b:c4:73:e2:
         75:8f:79:1d:78:1d:a0:75:55:8e:71:d4:42:09:29:47:68:89:
         f8:d8:99:47:8c:74:f8:b4:b9:3f:d3:94:a9:c6:67:86:b3:5a:
         6d:d1:5a:29:0f:2c:cd:a5:c2:aa:30:72:9e:a3:c0:96:8a:51:
         38:39:b9:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDlJczYA9EE+OBTbZvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4M2UtNjBlOTFmY2Q5
ZjQxMB4XDTIxMDMxNzA0MDAwMFoXDTIzMDMxNzA0MDAwMFowLzEtMCsGA1UEAxMk
YmYyMzg2ZmMtODk4OC00MDBiLTg2M2MtMGU3MjE1ZTM5YmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4HOyPaYXTO94MLdV73MqeijUTVaUeEMJKhH
NA032svJfWYnWCEVzVUbq7Z9Zt50RnoSmr0etm5SWojN+Plli++hbCovpgLyjR5w
/CCnC6a5W0uqzeO74mB6Tk81D6C/N4WviXEfjG9+Lu6QtOTzq0tfmfxJcPt56Ewr
SwOd/65gwoyWeorbuesHvtOpR5+8T3TMmaibPAIkFxiOcjp2HLYfbIwdsSGJlmQ6
BXc6EmEk+Euo+u5pqV3uNBVoAHQK5FGDXfVlor12kq90d2BcVETZzict6hfyMPcO
nhsiqtaxHen1oVgrgDe+1UTulQfl7tT2dOh2xhko08NJm/wJRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCsQ+B3+LYJIsE8az8QvLWFpfaycMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZm
MGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5MWZjZDlmNDEvZWRmYzQyZTAtNGFmMS0z
ZTMyLWI1ZmUtZDE5MjMyN2I5NGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4
M2UtNjBlOTFmY2Q5ZjQxL2E4NmYwZjZmLWRhNjctNGZmZi1hODNlLTYwZTkxZmNk
OWY0MS5jcmwwHwYDVR0jBBgwFoAUZKDSyOp4SNVqHvBQsMFRkE4g9AcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZmMGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5
MWZjZDlmNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ9WAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNpwx7ytEly1PBcoa8E6D+WoVmZC5IUWJN3i2tKtvIpRnoy224yqw/y
MXbV26Pk6yYZ+lvyX4DyelkhHl+E6t4Bffomgj321egM8Tztoiknf07ALReVggO4
pkfIbRGJzmRi6AEK2lyK6GbCW+5b60keTwdKzw474UmpbKlQlwqbZuvtT6AUK4TE
A0sRdPTpiRiGxIYv5AYzOEILAWX7Y5Ev1vUMAbhpPkX+zs+qeBXARFWQdO4erDVm
tM8sEsQL0wxQS8Rz4nWPeR14HaB1VY5x1EIJKUdoifjYmUeMdPi0uT/TlKnGZ4az
Wm3RWikPLM2lwqowcp6jwJaKUTg5ua4=
-----END CERTIFICATE-----