Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/5594a781-01cd-3aad-8e9d-70afce2094f2.roa
File:                     5594a781-01cd-3aad-8e9d-70afce2094f2.roa (raw, json)
Hash identifier:          SJRU05P792vqn+i5OwOtuDveD++3ikBS7FEdRchgBxk=
Subject key identifier:   20:8C:B3:49:40:3A:35:00:44:B3:E5:F6:C6:87:74:49:B7:9A:5B:F4
Certificate issuer:       /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial:       010D0C9F4328576D51CC73C042CFC1715AB6F2DA
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/5594a781-01cd-3aad-8e9d-70afce2094f2.roa
Signing time:             Wed 08 Apr 2020 16:54:31 +0000
ROA not before:           Wed 01 Apr 2020 04:00:00 +0000
ROA not after:            Sat 01 Apr 2023 04:00:00 +0000
asID:                     207273
IP address blocks:        2602:fe6a:e00::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:5a:b6:f2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
        Validity
            Not Before: Apr  1 04:00:00 2020 GMT
            Not After : Apr  1 04:00:00 2023 GMT
        Subject: CN=d853f2fd-e640-46f2-9264-bc43c74a2705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:97:b3:37:c1:47:7c:80:a2:b8:5d:57:5c:00:
                    40:cc:b1:44:a2:16:74:c1:19:e0:e0:44:04:c5:4e:
                    b3:44:ef:95:6d:a3:8d:dc:da:fe:e8:bf:6c:69:38:
                    b7:eb:40:b6:fa:a8:62:71:40:2d:95:c0:5f:26:35:
                    7f:df:e1:9e:10:94:76:0d:79:9c:39:ed:88:51:f6:
                    7e:08:68:1c:93:54:39:6b:4c:d5:e4:31:36:4d:4d:
                    39:b1:f2:b6:0b:e7:9a:b1:f3:23:f0:b3:25:69:aa:
                    37:88:ff:7e:49:68:79:6f:5d:96:47:7e:d4:2f:d5:
                    1c:e5:a7:eb:87:00:57:c4:82:37:33:ca:81:ab:47:
                    e6:11:a8:52:6f:a8:de:e4:e1:be:7d:c0:55:55:bc:
                    f0:85:27:e9:21:dd:7d:38:d3:68:00:ca:d4:ad:95:
                    d3:8a:68:97:34:b3:e3:13:9b:59:d3:dd:83:04:44:
                    d7:31:b3:64:b7:b9:56:07:9a:2d:12:20:0b:1b:2a:
                    9e:37:49:4f:17:47:88:d9:a6:91:2b:94:92:74:f8:
                    04:37:a7:a0:b3:5d:5c:40:cb:9e:58:af:16:c4:6c:
                    80:fe:2e:dc:44:66:54:c9:92:2a:f3:26:df:ad:4e:
                    ca:11:f2:53:1d:d2:d6:fd:8e:78:b4:5a:da:c3:44:
                    fd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8C:B3:49:40:3A:35:00:44:B3:E5:F6:C6:87:74:49:B7:9A:5B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/5594a781-01cd-3aad-8e9d-70afce2094f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl

            X509v3 Authority Key Identifier:
                keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe6a:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:aa:2a:07:44:88:41:f4:94:2a:01:da:25:42:ca:fc:e1:b1:
         78:4e:b3:ec:01:7e:59:5d:94:03:3a:b1:4d:ed:2c:d9:a4:6c:
         e7:f5:53:00:60:3e:ab:de:93:f0:0b:09:9c:9b:4b:35:19:80:
         28:f7:bc:94:2a:3c:77:d3:4b:52:bb:45:e8:d5:dd:65:e2:fd:
         d7:e2:cd:af:11:04:e7:4e:8a:b3:4f:08:b8:e5:05:fa:13:d4:
         96:0e:5a:89:d4:38:3d:42:3b:ff:f5:d5:c1:25:96:7c:0e:57:
         31:99:cb:75:8c:4f:e9:4c:6f:7c:f0:d4:dd:10:83:03:cf:d8:
         dc:82:ef:c5:fe:5d:81:da:bf:12:9b:ba:b0:a4:4a:63:77:f2:
         3d:af:1e:6b:1e:b0:25:57:77:37:14:e3:46:b8:ca:c1:19:e8:
         f2:f1:57:fe:55:0e:4b:36:7c:a6:79:e6:57:2e:31:89:53:60:
         fb:6e:e8:6b:5e:67:08:3f:9e:cf:58:c8:da:75:6b:53:c6:f8:
         26:06:50:d6:e0:e0:9c:1d:9b:12:84:e1:50:fd:fb:2b:24:b0:
         d5:64:61:9d:1e:12:7b:c8:8f:ae:7e:7f:f8:06:cd:7c:54:93:
         81:df:84:48:96:6a:cc:cf:cd:50:73:38:d4:c5:85:e6:76:0a:
         f5:52:8a:fd
-----BEGIN CERTIFICATE-----
MIIGQTCCBSugAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcVq28towCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDIyMTEyY2UwLWM5MWMtNDQ5ZS04YmJiLTEyZTQ0ZjVhM2U0
MTAeFw0yMDA0MDEwNDAwMDBaFw0yMzA0MDEwNDAwMDBaMC8xLTArBgNVBAMTJGQ4
NTNmMmZkLWU2NDAtNDZmMi05MjY0LWJjNDNjNzRhMjcwNTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAO6XszfBR3yAorhdV1wAQMyxRKIWdMEZ4OBEBMVO
s0TvlW2jjdza/ui/bGk4t+tAtvqoYnFALZXAXyY1f9/hnhCUdg15nDntiFH2fgho
HJNUOWtM1eQxNk1NObHytgvnmrHzI/CzJWmqN4j/fkloeW9dlkd+1C/VHOWn64cA
V8SCNzPKgatH5hGoUm+o3uThvn3AVVW88IUn6SHdfTjTaADK1K2V04polzSz4xOb
WdPdgwRE1zGzZLe5VgeaLRIgCxsqnjdJTxdHiNmmkSuUknT4BDenoLNdXEDLnliv
FsRsgP4u3ERmVMmSKvMm361OyhHyUx3S1v2OeLRa2sNE/ecCAwEAAaOCA1cwggNT
MB0GA1UdDgQWBBQgjLNJQDo1AESz5fbGh3RJt5pb9DCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxMTJj
ZTAtYzkxYy00NDllLThiYmItMTJlNDRmNWEzZTQxLzU1OTRhNzgxLTAxY2QtM2Fh
ZC04ZTlkLTcwYWZjZTIwOTRmMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzIyMTEyY2UwLWM5MWMtNDQ5ZS04YmJi
LTEyZTQ0ZjVhM2U0MS8yMjExMmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0NGY1YTNl
NDEuY3JsMB8GA1UdIwQYMBaAFEK28b/P4sVlzmVlaByt4eP4o6dXMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvMjIxMTJjZTAtYzkxYy00NDllLThiYmItMTJlNDRm
NWEzZTQxLmNlcjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYC/moOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQEL
A4IBAQACqioHRIhB9JQqAdolQsr84bF4TrPsAX5ZXZQDOrFN7SzZpGzn9VMAYD6r
3pPwCwmcm0s1GYAo97yUKjx300tSu0Xo1d1l4v3X4s2vEQTnToqzTwi45QX6E9SW
DlqJ1Dg9Qjv/9dXBJZZ8Dlcxmct1jE/pTG988NTdEIMDz9jcgu/F/l2B2r8Sm7qw
pEpjd/I9rx5rHrAlV3c3FONGuMrBGejy8Vf+VQ5LNnymeeZXLjGJU2D7buhrXmcI
P57PWMjadWtTxvgmBlDW4OCcHZsShOFQ/fsrJLDVZGGdHhJ7yI+ufn/4Bs18VJOB
34RIlmrMz81QczjUxYXmdgr1Uor9
-----END CERTIFICATE-----