Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/572d0828-4463-3382-a93c-8e348f2482ff.roa
File:                     572d0828-4463-3382-a93c-8e348f2482ff.roa (raw, json)
Hash identifier:          tFihBg+tyQS09T+XYX1hipDa+Y9HFpRMhDdnZIBRQ4M=
Subject key identifier:   23:8A:18:07:7B:CE:44:29:1A:30:95:D5:56:9C:F6:56:ED:1F:77:37
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583A10CE34E4B71C6153A0810B00
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/572d0828-4463-3382-a93c-8e348f2482ff.roa
Signing time:             Wed 26 May 2021 04:00:00 +0000
ROA not before:           Wed 26 May 2021 04:00:00 +0000
ROA not after:            Wed 30 Aug 2023 04:00:00 +0000
asID:                     55293
IP address blocks:        75.98.160.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:10:ce:34:e4:b7:1c:61:53:a0:81:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: May 26 04:00:00 2021 GMT
            Not After : Aug 30 04:00:00 2023 GMT
        Subject: CN=7f14f995-bc38-4d5a-8f56-d01b86598933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:23:88:e7:ae:7b:b3:3b:0f:fe:48:a0:e2:14:
                    84:53:0f:d0:60:32:3c:f1:44:8f:7b:96:da:14:c9:
                    b8:b4:51:c2:0c:09:b4:92:da:17:ee:98:bc:a8:4b:
                    4c:02:c0:d6:51:09:7b:78:fb:97:7f:4c:fa:4e:5e:
                    c4:c4:c7:e6:5d:76:7a:77:91:a2:23:a1:d3:77:65:
                    2a:4f:f2:3f:a9:70:2b:21:51:33:7e:0f:bd:ce:05:
                    be:68:29:0f:60:9e:22:93:cf:61:31:77:56:fc:cc:
                    a6:1b:f9:85:fe:be:b6:37:b5:e9:1e:d4:93:6b:6b:
                    72:1e:ce:14:f9:2c:77:ed:4f:a1:fe:6d:22:10:f0:
                    e1:fa:d3:92:17:c5:f6:e3:86:bb:6f:4e:f3:7c:71:
                    ec:72:bf:ae:d0:e9:2f:23:6a:23:af:c1:bc:72:70:
                    6c:0e:4b:57:bb:dc:fc:ba:28:c2:b7:a0:0a:03:fc:
                    35:87:e2:6c:c9:32:c5:6b:a9:d1:8d:34:ad:a2:72:
                    bb:68:a1:fd:fa:8f:4a:08:d3:85:a2:b3:b5:30:01:
                    0e:85:37:29:78:99:b4:a0:4d:60:2a:50:a6:d8:06:
                    34:56:03:ea:30:28:8a:f0:09:39:88:82:81:72:76:
                    e5:6f:fa:3d:63:42:84:b5:49:85:ba:a2:7b:c2:27:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8A:18:07:7B:CE:44:29:1A:30:95:D5:56:9C:F6:56:ED:1F:77:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/572d0828-4463-3382-a93c-8e348f2482ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.98.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c9:b8:8e:11:fc:d2:4e:fe:1f:5d:59:87:2d:d1:6a:1c:44:
         98:b5:d8:96:11:f8:c6:33:3e:05:be:f7:76:ba:b8:a6:05:50:
         5e:95:3d:45:b6:e0:95:8f:3c:e9:84:f1:4d:dd:de:fc:0d:8f:
         1b:fd:85:69:92:74:eb:dd:74:5d:c3:03:3e:16:1f:1e:23:08:
         38:b8:16:3e:51:f1:b4:1c:f6:56:b4:9e:57:c3:04:d9:d5:01:
         af:87:51:76:ac:9b:9b:92:e4:19:cc:4a:3c:4c:a8:e9:37:48:
         4e:0c:1b:d9:b6:ab:1a:c9:19:0a:01:50:e7:c1:64:48:9a:a1:
         20:62:29:a4:b8:65:68:51:57:df:c3:4a:e3:d0:63:2f:b9:9f:
         9b:fe:8c:15:d9:41:00:aa:5b:5d:45:73:e8:a6:6a:ae:f0:18:
         cd:38:99:bd:56:9b:0c:07:af:e0:f8:6f:b5:e3:b8:04:e7:4a:
         4b:f0:88:b1:c4:6e:43:b5:6a:bc:f3:e9:25:24:49:cb:c6:bb:
         55:96:50:e4:33:36:ec:24:d6:6f:8a:fb:0d:3b:00:7e:11:02:
         17:2d:5c:f9:ab:59:c8:3a:69:a4:a7:c7:4e:7b:76:0f:02:a3:
         e9:dd:f1:1c:49:33:44:f7:fc:66:d4:60:fb:47:3d:2a:fb:ec:
         59:0a:d4:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDoQzjTktxxhU6CBCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTIxMDUyNjA0MDAwMFoXDTIzMDgzMDA0MDAwMFowLzEtMCsGA1UEAxMk
N2YxNGY5OTUtYmMzOC00ZDVhLThmNTYtZDAxYjg2NTk4OTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniOI5657szsP/kig4hSEUw/QYDI88USPe5ba
FMm4tFHCDAm0ktoX7pi8qEtMAsDWUQl7ePuXf0z6Tl7ExMfmXXZ6d5GiI6HTd2Uq
T/I/qXArIVEzfg+9zgW+aCkPYJ4ik89hMXdW/MymG/mF/r62N7XpHtSTa2tyHs4U
+Sx37U+h/m0iEPDh+tOSF8X244a7b07zfHHscr+u0OkvI2ojr8G8cnBsDktXu9z8
uijCt6AKA/w1h+JsyTLFa6nRjTStonK7aKH9+o9KCNOForO1MAEOhTcpeJm0oE1g
KlCm2AY0VgPqMCiK8Ak5iIKBcnblb/o9Y0KEtUmFuqJ7wieWKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCOKGAd7zkQpGjCV1Vac9lbtH3c3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNTcyZDA4MjgtNDQ2My0z
MzgyLWE5M2MtOGUzNDhmMjQ4MmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES2KgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDJuI4R/NJO/h9dWYct0WocRJi12JYR+MYzPgW+93a6uKYFUF6VPUW2
4JWPPOmE8U3d3vwNjxv9hWmSdOvddF3DAz4WHx4jCDi4Fj5R8bQc9la0nlfDBNnV
Aa+HUXasm5uS5BnMSjxMqOk3SE4MG9m2qxrJGQoBUOfBZEiaoSBiKaS4ZWhRV9/D
SuPQYy+5n5v+jBXZQQCqW11Fc+imaq7wGM04mb1WmwwHr+D4b7XjuATnSkvwiLHE
bkO1arzz6SUkScvGu1WWUOQzNuwk1m+K+w07AH4RAhctXPmrWcg6aaSnx057dg8C
o+nd8RxJM0T3/GbUYPtHPSr77FkK1Ec=
-----END CERTIFICATE-----