Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/645ef4d2-7180-3909-8b25-f3ae0c858a39.roa
File:                     645ef4d2-7180-3909-8b25-f3ae0c858a39.roa (raw, json)
Hash identifier:          SObz5vxoZalMnnqb+DQZ0LlTmD5lts2+BNq1pu318NU=
Subject key identifier:   1C:45:23:C8:DB:0E:93:1A:D6:D2:AE:CE:BF:75:DC:4C:A3:6F:91:6B
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328576D51CC73C042CFC1707859DF07
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/645ef4d2-7180-3909-8b25-f3ae0c858a39.roa
Signing time:             Mon 24 Feb 2020 17:58:40 +0000
ROA not before:           Mon 24 Feb 2020 05:00:00 +0000
ROA not after:            Sun 29 May 2022 04:00:00 +0000
asID:                     13760
IP address blocks:        170.249.160.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:78:59:df:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 05:00:00 2020 GMT
            Not After : May 29 04:00:00 2022 GMT
        Subject: CN=67ac9767-abc7-403f-b8bc-94d3801af026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:f5:82:18:30:d8:c1:a8:e3:c6:cc:f1:16:
                    7b:b9:e4:7b:97:69:a9:77:c9:b3:b6:d9:2e:db:1f:
                    c3:68:75:a8:a5:4a:78:d3:17:ff:be:88:20:d9:ec:
                    2b:50:7a:da:d6:01:26:17:c2:b8:79:41:49:a1:69:
                    61:0c:49:8c:3c:02:25:61:f3:c8:09:15:7c:33:6b:
                    8c:99:17:aa:1f:10:37:b6:b3:15:10:5c:69:ac:ef:
                    3a:02:82:37:b3:45:40:74:9b:f7:4e:ad:95:d1:84:
                    0b:75:d6:e3:d3:71:7b:41:43:e8:04:70:64:ee:e4:
                    e5:ad:18:e6:93:e8:9f:d5:2b:a4:cb:a5:5c:e7:5c:
                    cb:38:5c:88:a5:e6:f9:3f:ee:f4:ce:01:77:e0:25:
                    0c:61:cf:1a:24:a3:f4:87:be:cd:7c:84:39:21:93:
                    f9:b2:c3:f5:a9:ba:39:3d:9b:e7:a8:ba:ff:96:ec:
                    8a:63:7d:42:48:70:66:cb:48:19:d1:f4:33:79:ec:
                    8e:68:4f:64:89:da:27:c8:c1:01:82:27:4a:cb:02:
                    3c:a4:fb:ea:4d:9a:dd:a3:36:6d:27:07:6a:37:d9:
                    75:b7:50:f4:d2:bf:f9:06:77:3f:75:95:8c:9c:5f:
                    b6:8c:ef:4d:6a:bc:ab:de:38:41:99:a1:0d:43:63:
                    76:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:45:23:C8:DB:0E:93:1A:D6:D2:AE:CE:BF:75:DC:4C:A3:6F:91:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/645ef4d2-7180-3909-8b25-f3ae0c858a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.249.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:97:59:0f:3d:84:91:de:84:67:dc:17:68:af:d6:67:6a:5b:
         1a:fe:2b:7b:d0:dc:8a:24:d9:c9:3b:7c:fa:8b:a3:fa:b3:67:
         a4:c7:28:0a:30:e4:05:6a:c0:78:3e:46:1f:ed:1e:51:0c:1e:
         dc:f0:0f:b6:8f:6a:b5:40:b4:da:fc:fd:e9:29:03:21:7d:77:
         f0:05:ba:6b:6d:93:65:10:d0:a7:da:08:1e:f2:e3:13:a1:84:
         9c:50:3c:5b:69:89:37:dc:80:5d:8f:ab:34:b4:0b:63:60:50:
         60:cb:4c:16:e0:19:f2:3b:a8:bc:85:19:e8:12:1c:d0:b3:35:
         2c:1f:d1:e6:d0:f8:fc:79:1d:84:ed:61:95:97:3a:ee:41:8e:
         52:80:a3:87:83:97:d1:39:73:3b:d6:90:4f:0e:29:dc:b7:13:
         67:10:92:bc:8b:fd:e1:bc:a9:62:21:7b:84:2b:c9:7a:3b:09:
         87:48:39:19:fa:bd:b8:f8:3f:e9:8a:f1:0d:09:29:d1:48:4c:
         fa:96:6f:80:6a:06:99:b4:4a:a0:3f:85:c4:37:8d:15:d8:77:
         3e:8c:f7:9c:a8:bd:6b:14:d6:94:43:bb:30:a6:88:2d:8c:1a:
         86:54:6f:c7:c9:af:2b:7c:56:96:e8:24:42:00:15:c5:fc:af:
         cb:cb:29:db
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcHhZ3wcwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUyZjM0
MjAeFw0yMDAyMjQwNTAwMDBaFw0yMjA1MjkwNDAwMDBaMC8xLTArBgNVBAMTJDY3
YWM5NzY3LWFiYzctNDAzZi1iOGJjLTk0ZDM4MDFhZjAyNjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALLe9YIYMNjBqOPGzPEWe7nke5dpqXfJs7bZLtsf
w2h1qKVKeNMX/76IINnsK1B62tYBJhfCuHlBSaFpYQxJjDwCJWHzyAkVfDNrjJkX
qh8QN7azFRBcaazvOgKCN7NFQHSb906tldGEC3XW49Nxe0FD6ARwZO7k5a0Y5pPo
n9UrpMulXOdcyzhciKXm+T/u9M4Bd+AlDGHPGiSj9Ie+zXyEOSGT+bLD9am6OT2b
56i6/5bsimN9QkhwZstIGdH0M3nsjmhPZInaJ8jBAYInSssCPKT76k2a3aM2bScH
ajfZdbdQ9NK/+QZ3P3WVjJxftozvTWq8q944QZmhDUNjdkkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQcRSPI2w6TGtbSrs6/ddxMo2+RazCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2
MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJmMzQyLzY0NWVmNGQyLTcxODAtMzkw
OS04YjI1LWYzYWUwYzg1OGEzOS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2
LTc2MzNhNDUyZjM0Mi81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYz
NDIuY3JsMB8GA1UdIwQYMBaAFFBVqNlhZJ9JVbn3QTW7/Qurt5e8MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0
NTJmMzQyLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr5oDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAB5dZDz2Ekd6EZ9wXaK/WZ2pbGv4re9DciiTZyTt8+ouj+rNnpMcoCjDkBWrA
eD5GH+0eUQwe3PAPto9qtUC02vz96SkDIX138AW6a22TZRDQp9oIHvLjE6GEnFA8
W2mJN9yAXY+rNLQLY2BQYMtMFuAZ8juovIUZ6BIc0LM1LB/R5tD4/HkdhO1hlZc6
7kGOUoCjh4OX0TlzO9aQTw4p3LcTZxCSvIv94bypYiF7hCvJejsJh0g5Gfq9uPg/
6YrxDQkp0UhM+pZvgGoGmbRKoD+FxDeNFdh3Poz3nKi9axTWlEO7MKaILYwahlRv
x8mvK3xWlugkQgAVxfyvy8sp2w==
-----END CERTIFICATE-----