Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/bf406a0a-a170-3b3c-889b-140f502290d5.roa
File:                     bf406a0a-a170-3b3c-889b-140f502290d5.roa (raw, json)
Hash identifier:          ML67SudA66CveDUkHGkftjroC5dcdrZJRkGW8fnjXIM=
Subject key identifier:   CC:6F:AD:8E:2D:5F:59:98:0A:B8:50:30:64:84:31:93:8C:48:98:38
Certificate issuer:       /CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Certificate serial:       010D0C9F43285838E8D4EA03C86C85D31CFAEF10
Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/bf406a0a-a170-3b3c-889b-140f502290d5.roa
Signing time:             Wed 10 Feb 2021 05:00:00 +0000
ROA not before:           Wed 10 Feb 2021 05:00:00 +0000
ROA not after:            Tue 16 May 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        98.142.144.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:e8:d4:ea:03:c8:6c:85:d3:1c:fa:ef:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0
        Validity
            Not Before: Feb 10 05:00:00 2021 GMT
            Not After : May 16 04:00:00 2023 GMT
        Subject: CN=48891963-b3b1-4982-ac30-7d3b5fc8c8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:5a:15:00:8a:42:f5:ec:c4:f1:4c:cf:74:
                    4c:1e:a3:70:51:4a:6d:da:dc:98:38:f3:d8:e9:cc:
                    b5:7c:4c:7c:7e:50:31:21:93:66:27:89:b3:a3:0e:
                    73:bb:0c:2b:e9:5d:1a:4b:56:c9:83:40:05:9a:26:
                    d7:1a:ba:2b:82:dd:fc:4a:f7:00:fe:ac:f9:e4:41:
                    dd:2c:43:63:ac:fd:00:64:a8:b8:14:c7:39:e0:0e:
                    64:2d:9f:34:8f:e9:ab:2b:4a:4b:11:fe:56:31:35:
                    c1:c5:92:89:2d:58:88:48:01:b3:24:e0:56:95:27:
                    ce:1c:7e:07:e6:5e:de:cb:0f:14:9a:52:26:37:d7:
                    71:d7:92:e1:6d:6a:22:95:88:12:d3:d5:6a:03:55:
                    cf:46:e8:39:95:0e:11:29:c0:da:01:ff:79:6b:fb:
                    da:83:61:e9:e4:5c:68:06:36:69:4e:dd:cb:f0:83:
                    b1:d3:3b:d4:d8:e0:32:87:ea:4e:bb:55:19:ed:80:
                    e7:74:45:d7:0b:53:e8:a9:a3:3e:7f:4b:69:b3:fa:
                    fd:64:55:19:79:22:93:87:42:8a:c2:82:39:f0:86:
                    71:5e:e0:79:e4:bf:0a:84:e3:e6:4d:11:76:3b:1e:
                    32:61:bf:67:06:b5:0d:36:9c:2c:b8:d6:24:14:2d:
                    39:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6F:AD:8E:2D:5F:59:98:0A:B8:50:30:64:84:31:93:8C:48:98:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/bf406a0a-a170-3b3c-889b-140f502290d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl

            X509v3 Authority Key Identifier:
                keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:56:13:82:eb:52:c7:fa:8d:d8:a5:48:69:15:f0:3e:91:ea:
         17:32:0b:76:8d:86:2b:27:a6:d5:6f:fd:27:a3:87:e7:ed:fa:
         8f:24:23:f6:d3:e0:f7:50:dc:bd:01:f6:1a:5d:a0:15:9f:61:
         0d:9b:aa:e1:a4:48:00:ad:ff:54:23:5d:6e:35:ba:20:1a:cd:
         3e:aa:d5:30:47:dd:7a:a6:9d:a3:c5:1f:83:e5:68:cc:f0:a3:
         a8:46:db:7d:cd:5c:3d:93:56:72:43:6b:7e:fc:dc:21:2d:a9:
         25:5f:12:9f:62:6e:87:48:d7:bb:34:32:83:f9:29:15:05:c5:
         44:d4:79:5e:5f:4f:13:d4:03:98:6b:93:08:95:4d:04:26:4c:
         94:28:34:84:6f:9b:a6:55:13:e1:53:a5:ac:12:9d:52:58:e3:
         d3:e7:aa:eb:ac:31:bf:2b:69:2f:df:2d:29:ef:1a:91:1d:51:
         55:ea:b7:16:6b:8c:0c:d6:46:9a:d4:77:d1:0c:d3:64:f3:49:
         f2:d2:87:02:4f:20:64:ed:cb:c3:0b:fa:32:e2:0b:1b:a3:14:
         51:4b:1b:25:61:72:cf:b6:3b:79:d0:a1:3f:12:81:7e:04:27:
         e1:f2:f2:2b:f0:0b:2a:df:7e:ab:10:53:15:37:a7:f6:49:1f:
         03:e0:c5:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDjo1OoDyGyF0xz67xAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGE2MmYxNjgtMGMyNi00OTMxLWEzZTMtNGFiYWEzMTE3
N2YwMB4XDTIxMDIxMDA1MDAwMFoXDTIzMDUxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NDg4OTE5NjMtYjNiMS00OTgyLWFjMzAtN2QzYjVmYzhjOGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvFaFQCKQvXsxPFMz3RMHqNwUUpt2tyYOPPY
6cy1fEx8flAxIZNmJ4mzow5zuwwr6V0aS1bJg0AFmibXGrorgt38SvcA/qz55EHd
LENjrP0AZKi4FMc54A5kLZ80j+mrK0pLEf5WMTXBxZKJLViISAGzJOBWlSfOHH4H
5l7eyw8UmlImN9dx15LhbWoilYgS09VqA1XPRug5lQ4RKcDaAf95a/vag2Hp5Fxo
BjZpTt3L8IOx0zvU2OAyh+pOu1UZ7YDndEXXC1PoqaM+f0tps/r9ZFUZeSKTh0KK
woI58IZxXuB55L8KhOPmTRF2Ox4yYb9nBrUNNpwsuNYkFC05oQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMxvrY4tX1mYCrhQMGSEMZOMSJg4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYy
ZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJhYTMxMTc3ZjAvYmY0MDZhMGEtYTE3MC0z
YjNjLTg4OWItMTQwZjUwMjI5MGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGE2MmYxNjgtMGMyNi00OTMxLWEz
ZTMtNGFiYWEzMTE3N2YwL2RhNjJmMTY4LTBjMjYtNDkzMS1hM2UzLTRhYmFhMzEx
NzdmMC5jcmwwHwYDVR0jBBgwFoAUfROpS3VMZyRtsvrl5XQi7LMcxiIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYyZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJh
YTMxMTc3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYo6QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAClWE4LrUsf6jdilSGkV8D6R6hcyC3aNhisnptVv/Sejh+ft+o8kI/bT
4PdQ3L0B9hpdoBWfYQ2bquGkSACt/1QjXW41uiAazT6q1TBH3XqmnaPFH4PlaMzw
o6hG233NXD2TVnJDa3783CEtqSVfEp9ibodI17s0MoP5KRUFxUTUeV5fTxPUA5hr
kwiVTQQmTJQoNIRvm6ZVE+FTpawSnVJY49PnquusMb8raS/fLSnvGpEdUVXqtxZr
jAzWRprUd9EM02TzSfLShwJPIGTty8ML+jLiCxujFFFLGyVhcs+2O3nQoT8SgX4E
J+Hy8ivwCyrffqsQUxU3p/ZJHwPgxbg=
-----END CERTIFICATE-----