Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/81a5f4a1-318d-3bc7-ae57-233e8fc40eac.roa
File:                     81a5f4a1-318d-3bc7-ae57-233e8fc40eac.roa (raw, json)
Hash identifier:          CsDo1pnRaL2s69Uu5Jl1vqZMwGz4fIQ7lTOpEI3ZV18=
Subject key identifier:   55:68:75:9F:F5:E9:2B:2F:0E:75:AB:42:83:15:7C:A9:D8:B4:2C:22
Certificate issuer:       /CN=3104c204-288d-4f87-83c2-99a30908dea3
Certificate serial:       010D0C9F4328576D51CC73C042CFC17100F34E1C
Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/81a5f4a1-318d-3bc7-ae57-233e8fc40eac.roa
Signing time:             Sun 22 Mar 2020 06:34:37 +0000
ROA not before:           Tue 17 Mar 2020 04:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        192.228.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:00:f3:4e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3
        Validity
            Not Before: Mar 17 04:00:00 2020 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=0c24ffd2-ee63-4a68-b809-bb82e58d705e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:6e:e2:1d:aa:fe:14:f7:c7:75:f9:59:e0:
                    1d:6f:6b:5d:27:eb:58:60:2d:07:4a:9b:96:de:db:
                    23:1e:1e:f4:e5:a5:7d:78:ac:89:7e:86:92:b4:2d:
                    ce:ce:53:89:39:9e:9b:83:ed:c6:ca:d8:84:52:d6:
                    e9:d8:75:5b:8e:ad:44:be:c5:33:67:74:46:3d:2b:
                    93:d7:b2:b7:19:48:b1:cf:09:2b:60:ca:8a:96:bb:
                    7a:1c:33:5d:6d:2f:e6:97:96:f6:47:43:3c:07:3d:
                    6b:98:3e:1d:f5:53:61:f0:4c:73:5a:3c:79:83:de:
                    e8:35:df:4a:8c:e4:60:95:2d:63:27:f2:b2:62:c9:
                    dc:67:0d:fc:c6:93:c4:98:72:3c:fe:39:39:7f:05:
                    c5:df:2f:16:de:36:2f:b5:7f:f6:89:5f:8d:84:bf:
                    dc:77:60:c5:24:be:ea:15:4e:4a:8c:8a:31:b5:4b:
                    69:a8:04:d7:3d:7a:98:74:e0:b9:ae:9c:7b:db:80:
                    8e:af:bc:15:82:f1:35:ed:ec:ad:82:1a:e9:cb:47:
                    c8:e1:4d:51:07:16:2e:78:9e:34:54:6e:8d:26:8b:
                    ec:2a:e5:59:c9:e8:9f:d5:74:63:c3:71:bc:20:b1:
                    f6:dd:a0:19:bc:c9:13:f4:0d:fd:71:a4:3c:e1:58:
                    17:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:68:75:9F:F5:E9:2B:2F:0E:75:AB:42:83:15:7C:A9:D8:B4:2C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/81a5f4a1-318d-3bc7-ae57-233e8fc40eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl

            X509v3 Authority Key Identifier:
                keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b5:1c:bd:e5:a6:37:e7:cf:b6:aa:dc:d0:21:06:81:6c:c3:
         c5:57:0e:ea:db:61:6a:99:d1:40:2e:ab:81:08:b6:d0:f4:8a:
         cf:67:31:8f:e9:9b:c4:34:c1:25:08:c1:84:3a:b4:75:75:69:
         01:80:f6:8d:96:c6:00:b9:9b:6c:f2:99:64:20:91:94:8b:89:
         c1:86:2e:8f:f0:12:0d:49:70:b5:82:b0:98:01:ea:f5:c4:04:
         bc:10:55:55:ab:1a:e3:d4:89:e9:62:c5:d7:92:c6:c9:c2:f9:
         63:e9:81:54:45:93:bb:fd:6c:1a:d0:02:14:7a:32:49:70:7c:
         5e:dd:68:69:df:04:db:cd:ff:32:b3:5e:03:5a:00:67:65:b6:
         92:8c:a7:b5:d1:38:ce:a8:52:ba:a1:7c:61:9f:99:60:5b:30:
         ed:10:18:de:c1:a8:cb:d5:3c:dd:e0:ee:7e:c5:24:df:8b:04:
         67:cf:eb:7f:0d:51:e8:88:93:bc:b4:33:1e:fe:d5:89:0c:25:
         f8:70:62:70:a5:d7:4e:9d:b9:5e:25:3a:ce:6d:07:0b:94:f5:
         31:60:31:f9:da:28:4b:bc:9e:32:70:5b:1b:ca:2d:6b:e9:b1:
         ea:85:b7:d9:2e:33:d5:81:16:6f:14:a8:d3:ef:86:34:7f:59:
         dd:c5:74:00
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcQDzThwwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4ZGVh
MzAeFw0yMDAzMTcwNDAwMDBaFw0yMjA2MjUwNDAwMDBaMC8xLTArBgNVBAMTJDBj
MjRmZmQyLWVlNjMtNGE2OC1iODA5LWJiODJlNThkNzA1ZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMxlbuIdqv4U98d1+VngHW9rXSfrWGAtB0qblt7b
Ix4e9OWlfXisiX6GkrQtzs5TiTmem4PtxsrYhFLW6dh1W46tRL7FM2d0Rj0rk9ey
txlIsc8JK2DKipa7ehwzXW0v5peW9kdDPAc9a5g+HfVTYfBMc1o8eYPe6DXfSozk
YJUtYyfysmLJ3GcN/MaTxJhyPP45OX8Fxd8vFt42L7V/9olfjYS/3HdgxSS+6hVO
SoyKMbVLaagE1z16mHTgua6ce9uAjq+8FYLxNe3srYIa6ctHyOFNUQcWLnieNFRu
jSaL7CrlWcnon9V0Y8NxvCCx9t2gGbzJE/QN/XGkPOFYF6UCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRVaHWf9ekrLw51q0KDFXyp2LQsIjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMy
MDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhkZWEzLzgxYTVmNGExLTMxOGQtM2Jj
Ny1hZTU3LTIzM2U4ZmM0MGVhYy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzMxMDRjMjA0LTI4OGQtNGY4Ny04M2My
LTk5YTMwOTA4ZGVhMy8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRl
YTMuY3JsMB8GA1UdIwQYMBaAFHZd+T1HSs8j8CDmh3CsK5iZLwPiMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5
MDhkZWEzLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMDkTzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAVLUcveWmN+fPtqrc0CEGgWzDxVcO6tthapnRQC6rgQi20PSKz2cxj+mbxDTB
JQjBhDq0dXVpAYD2jZbGALmbbPKZZCCRlIuJwYYuj/ASDUlwtYKwmAHq9cQEvBBV
Vasa49SJ6WLF15LGycL5Y+mBVEWTu/1sGtACFHoySXB8Xt1oad8E283/MrNeA1oA
Z2W2koyntdE4zqhSuqF8YZ+ZYFsw7RAY3sGoy9U83eDufsUk34sEZ8/rfw1R6IiT
vLQzHv7ViQwl+HBicKXXTp25XiU6zm0HC5T1MWAx+dooS7yeMnBbG8ota+mx6oW3
2S4z1YEWbxSo0++GNH9Z3cV0AA==
-----END CERTIFICATE-----