Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/0304f81c-5ee4-3bed-a774-1073099557a3.roa
File:                     0304f81c-5ee4-3bed-a774-1073099557a3.roa (raw, json)
Hash identifier:          zkb6XjsgsAgVNvfezE6MKnM6GYN0HMX+qIM0S66oJHY=
Subject key identifier:   A5:E6:90:91:09:17:AF:00:49:BD:44:66:07:FC:52:D3:DC:B9:36:CF
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328576D51CC73C042CFC17081BE8143
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/0304f81c-5ee4-3bed-a774-1073099557a3.roa
Signing time:             Wed 26 Feb 2020 13:45:10 +0000
ROA not before:           Mon 24 Feb 2020 05:00:00 +0000
ROA not after:            Tue 31 May 2022 04:00:00 +0000
asID:                     13760
IP address blocks:        2607:fb00::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:81:be:81:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 05:00:00 2020 GMT
            Not After : May 31 04:00:00 2022 GMT
        Subject: CN=766ff8d9-4b8c-44b5-b97b-9b74bd61a792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:37:c2:2b:d5:cf:4e:cd:9f:d0:a2:a9:91:
                    57:69:75:02:a5:8f:c8:9a:bd:9b:23:c3:a6:39:b6:
                    ae:92:3f:4c:19:b7:06:bf:27:ce:7c:33:9e:a1:e5:
                    5a:7a:16:1c:e5:9f:4b:7c:ca:fe:7e:83:e8:96:fb:
                    45:2c:76:ab:a7:1e:ab:a7:9c:cd:6a:cf:23:61:f5:
                    5e:92:d8:a1:0b:49:53:39:ab:dc:09:7f:82:28:19:
                    fb:56:99:9d:4e:d2:fb:97:02:1e:88:6e:1b:81:0a:
                    28:23:0c:6c:0c:5a:5e:eb:a1:93:d6:52:c4:40:64:
                    c7:c6:45:34:e2:e0:26:ba:d1:eb:e3:5b:d6:43:a4:
                    0c:ab:d2:87:0b:d1:d1:36:7b:fe:94:06:32:d5:b7:
                    0b:1f:eb:78:01:15:9e:b2:25:0f:09:8a:49:a6:0c:
                    68:4e:0c:a3:8d:da:f0:4a:2b:5c:da:d1:00:3d:df:
                    f1:82:4c:3f:52:a3:75:c4:ba:56:cf:10:a0:83:d9:
                    73:f1:a2:3f:fa:6c:af:d9:92:19:be:07:2a:31:3e:
                    c3:fe:05:c4:47:09:a3:4d:c5:f7:f9:e3:c3:8f:e6:
                    fe:54:f0:13:68:50:9c:64:1c:6b:a6:39:04:0c:f4:
                    c7:12:a5:0b:40:ef:42:4e:a9:66:c9:34:88:88:05:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E6:90:91:09:17:AF:00:49:BD:44:66:07:FC:52:D3:DC:B9:36:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/0304f81c-5ee4-3bed-a774-1073099557a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:cc:ad:e6:89:58:12:27:94:ea:72:e5:ef:57:ab:1a:a7:59:
         d5:c5:b6:18:36:88:d2:cc:eb:ec:ce:92:15:a4:9a:ca:9e:1c:
         1c:24:13:5b:c7:de:0b:69:c0:f9:52:f3:21:2a:91:eb:96:64:
         42:c4:0f:d5:e1:17:c7:1c:30:32:d1:a2:04:06:25:04:0c:e0:
         a3:35:c0:72:77:9a:db:20:6f:13:da:98:15:12:aa:4c:5d:5b:
         4d:65:7c:ae:ad:21:54:23:99:1b:8f:4b:fa:3a:9a:1d:a7:9a:
         34:c2:52:63:50:51:b6:92:36:1c:3f:41:27:9d:a1:ac:9b:2a:
         f7:d2:ec:95:4e:84:a0:ef:55:13:37:b4:06:a4:e2:c8:66:5e:
         ba:f8:fa:fb:98:a3:c3:24:cc:fb:66:de:f4:ea:3d:81:3a:97:
         51:3a:3f:c4:84:2e:bd:ce:43:8e:52:84:5e:cb:5c:90:49:bd:
         b4:4b:01:69:ee:c7:32:bf:4f:d9:12:61:49:b3:41:eb:79:69:
         9b:2b:c9:6d:5a:b4:97:45:5f:4a:96:e0:25:c3:0f:9b:da:44:
         e6:ca:09:ce:bb:0b:4f:38:42:01:0f:07:18:ca:c6:de:37:f8:
         cf:7b:f0:a4:c2:1a:21:e9:00:56:fb:06:59:a4:da:4b:7f:75:
         8b:98:76:24
-----BEGIN CERTIFICATE-----
MIIGQDCCBSqgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcIG+gUMwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUyZjM0
MjAeFw0yMDAyMjQwNTAwMDBaFw0yMjA1MzEwNDAwMDBaMC8xLTArBgNVBAMTJDc2
NmZmOGQ5LTRiOGMtNDRiNS1iOTdiLTliNzRiZDYxYTc5MjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALAnN8Ir1c9OzZ/QoqmRV2l1AqWPyJq9myPDpjm2
rpI/TBm3Br8nznwznqHlWnoWHOWfS3zK/n6D6Jb7RSx2q6ceq6eczWrPI2H1XpLY
oQtJUzmr3Al/gigZ+1aZnU7S+5cCHohuG4EKKCMMbAxaXuuhk9ZSxEBkx8ZFNOLg
JrrR6+Nb1kOkDKvShwvR0TZ7/pQGMtW3Cx/reAEVnrIlDwmKSaYMaE4Mo43a8Eor
XNrRAD3f8YJMP1KjdcS6Vs8QoIPZc/GiP/psr9mSGb4HKjE+w/4FxEcJo03F9/nj
w4/m/lTwE2hQnGQca6Y5BAz0xxKlC0DvQk6pZsk0iIgFQcMCAwEAAaOCA1YwggNS
MB0GA1UdDgQWBBSl5pCRCRevAEm9RGYH/FLT3Lk2zzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2
MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJmMzQyLzAzMDRmODFjLTVlZTQtM2Jl
ZC1hNzc0LTEwNzMwOTk1NTdhMy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2
LTc2MzNhNDUyZjM0Mi81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYz
NDIuY3JsMB8GA1UdIwQYMBaAFFBVqNlhZJ9JVbn3QTW7/Qurt5e8MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0
NTJmMzQyLmNlcjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACYH+wAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDALBgkqhkiG9w0BAQsD
ggEBAFHMreaJWBInlOpy5e9XqxqnWdXFthg2iNLM6+zOkhWkmsqeHBwkE1vH3gtp
wPlS8yEqkeuWZELED9XhF8ccMDLRogQGJQQM4KM1wHJ3mtsgbxPamBUSqkxdW01l
fK6tIVQjmRuPS/o6mh2nmjTCUmNQUbaSNhw/QSedoaybKvfS7JVOhKDvVRM3tAak
4shmXrr4+vuYo8MkzPtm3vTqPYE6l1E6P8SELr3OQ45ShF7LXJBJvbRLAWnuxzK/
T9kSYUmzQet5aZsryW1atJdFX0qW4CXDD5vaRObKCc67C084QgEPBxjKxt43+M97
8KTCGiHpAFb7Blmk2kt/dYuYdiQ=
-----END CERTIFICATE-----