Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/810a6f8e-b7b8-3904-95a9-fead1156b33e.roa
File:                     810a6f8e-b7b8-3904-95a9-fead1156b33e.roa (raw, json)
Hash identifier:          isvfMqwLvKfpWVmj629c/nVX3qIC+bMC7EDJvXkCeqg=
Subject key identifier:   3A:29:62:E7:91:EC:A2:15:E0:36:67:A9:E3:7F:72:0D:93:AA:B5:07
Certificate issuer:       /CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad
Certificate serial:       010D0C9F43285838C92C29089CDBCA28D9E57F00
Authority key identifier: 1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/810a6f8e-b7b8-3904-95a9-fead1156b33e.roa
Signing time:             Thu 28 Jan 2021 05:00:00 +0000
ROA not before:           Thu 28 Jan 2021 05:00:00 +0000
ROA not after:            Fri 05 May 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        203.89.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:c9:2c:29:08:9c:db:ca:28:d9:e5:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad
        Validity
            Not Before: Jan 28 05:00:00 2021 GMT
            Not After : May  5 04:00:00 2023 GMT
        Subject: CN=d0f3ee69-2de6-489f-b97c-fca8f01ca1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:c3:55:c4:70:61:59:d2:8d:d5:03:86:fb:
                    e7:c8:f7:35:38:75:83:96:91:e5:98:6c:23:a5:06:
                    1f:0d:67:f5:64:fd:26:c2:5b:c9:2c:cb:a4:6d:eb:
                    35:7a:e4:c2:76:b9:85:51:25:39:fb:2d:ea:cc:4a:
                    31:29:b9:9e:4c:e8:ef:95:b2:b1:5e:05:75:13:fc:
                    ca:8a:d3:c5:1b:8a:2c:b1:c4:3f:be:68:34:15:73:
                    d2:59:ad:73:7c:ed:41:eb:a4:13:be:15:34:8a:e6:
                    b5:07:c9:0b:cb:34:57:f3:ae:e8:ff:79:e1:33:d4:
                    68:24:7d:83:18:17:5f:4b:d7:7a:2e:68:43:96:32:
                    3b:cc:7e:71:68:a1:17:8b:d0:7c:9b:ee:fa:e1:d5:
                    ec:16:53:10:cb:fa:0e:03:0a:d4:18:73:ee:a4:8f:
                    9c:fb:ba:68:d3:a9:0d:7a:37:15:f3:4e:13:5a:65:
                    13:45:fe:0d:60:aa:96:df:c2:f2:01:50:6e:7a:f7:
                    28:b7:10:27:5b:70:cd:0f:a3:f7:9a:f7:af:6a:e0:
                    d9:a5:9c:ec:d6:1a:b1:7c:30:86:98:f8:fb:5d:31:
                    a0:1b:4a:f4:ed:0a:8c:d3:a1:5a:db:52:70:80:4c:
                    68:21:89:c4:d3:3f:a4:cd:fb:f2:a1:f6:0e:41:49:
                    36:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:29:62:E7:91:EC:A2:15:E0:36:67:A9:E3:7F:72:0D:93:AA:B5:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/810a6f8e-b7b8-3904-95a9-fead1156b33e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.crl

            X509v3 Authority Key Identifier:
                keyid:1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.89.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:80:b4:43:74:a0:c9:e6:7f:25:ee:52:2b:74:34:d0:d1:75:
         f1:59:12:0b:26:3c:ea:0f:41:1b:f2:43:17:e9:6d:f2:c2:9c:
         1d:85:2a:52:f6:35:5f:46:75:8f:04:99:d5:d6:5b:f1:c2:a9:
         b7:05:81:0f:18:f8:d5:9a:d5:cd:80:3c:1b:92:50:fd:da:45:
         cc:c5:4b:2c:50:0f:a1:3e:1b:41:2d:6b:76:7e:1e:bd:00:b4:
         32:d7:98:ff:6e:52:a2:9e:22:be:1e:32:f5:bc:b2:84:25:67:
         bd:03:33:25:1f:64:c0:a9:ae:97:e0:0c:e6:be:04:4a:1f:7a:
         16:4e:05:63:f3:b3:69:32:ef:04:31:b8:ef:ed:96:39:96:51:
         7c:6d:bb:f1:f6:38:bf:9b:6a:78:1f:09:30:8c:bd:62:47:ec:
         c5:06:f3:77:4f:0a:8b:5b:bd:62:8b:e7:d9:62:1b:7b:b4:a6:
         0b:62:27:d7:f7:50:8e:fb:f6:15:9b:b7:13:aa:48:8d:16:8f:
         dd:df:f9:4d:40:a8:51:e9:22:6e:01:db:ab:45:65:35:7c:5e:
         6c:4f:a9:9d:00:19:af:73:19:e1:23:d3:07:5f:e9:3c:41:2f:
         34:e3:17:b0:3e:9d:fe:64:56:04:15:40:12:06:b4:05:54:9d:
         7c:f3:1b:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDjJLCkInNvKKNnlfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1YzYyMTEtMTcxNy00YTc1LWE4MmEtMWQ3YTdhYmFj
MmFkMB4XDTIxMDEyODA1MDAwMFoXDTIzMDUwNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDBmM2VlNjktMmRlNi00ODlmLWI5N2MtZmNhOGYwMWNhMWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh/DVcRwYVnSjdUDhvvnyPc1OHWDlpHlmGwj
pQYfDWf1ZP0mwlvJLMukbes1euTCdrmFUSU5+y3qzEoxKbmeTOjvlbKxXgV1E/zK
itPFG4osscQ/vmg0FXPSWa1zfO1B66QTvhU0iua1B8kLyzRX867o/3nhM9RoJH2D
GBdfS9d6LmhDljI7zH5xaKEXi9B8m+764dXsFlMQy/oOAwrUGHPupI+c+7po06kN
ejcV804TWmUTRf4NYKqW38LyAVBuevcotxAnW3DND6P3mvevauDZpZzs1hqxfDCG
mPj7XTGgG0r07QqM06Fa21JwgExoIYnE0z+kzfvyofYOQUk2VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDopYueR7KIV4DZnqeN/cg2TqrUHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDVj
NjIxMS0xNzE3LTRhNzUtYTgyYS0xZDdhN2FiYWMyYWQvODEwYTZmOGUtYjdiOC0z
OTA0LTk1YTktZmVhZDExNTZiMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1YzYyMTEtMTcxNy00YTc1LWE4
MmEtMWQ3YTdhYmFjMmFkL2Q0NWM2MjExLTE3MTctNGE3NS1hODJhLTFkN2E3YWJh
YzJhZC5jcmwwHwYDVR0jBBgwFoAUHR39tAkXOr3+L6AjK0wqo3r6AdkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDVjNjIxMS0xNzE3LTRhNzUtYTgyYS0xZDdh
N2FiYWMyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy1lqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACyAtEN0oMnmfyXuUit0NNDRdfFZEgsmPOoPQRvyQxfpbfLCnB2FKlL2
NV9GdY8EmdXWW/HCqbcFgQ8Y+NWa1c2APBuSUP3aRczFSyxQD6E+G0Eta3Z+Hr0A
tDLXmP9uUqKeIr4eMvW8soQlZ70DMyUfZMCprpfgDOa+BEofehZOBWPzs2ky7wQx
uO/tljmWUXxtu/H2OL+bangfCTCMvWJH7MUG83dPCotbvWKL59liG3u0pgtiJ9f3
UI779hWbtxOqSI0Wj93f+U1AqFHpIm4B26tFZTV8XmxPqZ0AGa9zGeEj0wdf6TxB
LzTjF7A+nf5kVgQVQBIGtAVUnXzzG2E=
-----END CERTIFICATE-----