Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3b42dbed-07c8-3f03-bce4-675ecbd273e5.roa
File:                     3b42dbed-07c8-3f03-bce4-675ecbd273e5.roa (raw, json)
Hash identifier:          4Tk9V4TjQVxbKPrMlPL40Cw6IVSpOZdPVPJsBnSRpDk=
Subject key identifier:   2B:8D:AE:A2:7C:70:28:97:69:52:56:BC:9B:BF:E2:77:97:84:2E:78
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7C394AA5E0938EA51A55F00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3b42dbed-07c8-3f03-bce4-675ecbd273e5.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        172.217.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c3:94:aa:5e:09:38:ea:51:a5:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=24319966-e1a3-4914-94b6-976e3ac09326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:24:39:a4:3b:ff:f4:1c:4c:b4:17:32:b6:98:
                    f2:0a:8c:09:fd:19:ad:22:26:de:11:10:cc:78:bd:
                    bc:77:bd:da:62:ec:07:92:43:6c:6c:ca:3c:27:5b:
                    92:39:32:75:99:f8:54:9d:cd:55:93:db:29:0b:32:
                    ec:83:0e:0f:b0:63:ba:17:6e:b4:31:78:1b:50:b4:
                    83:22:db:e9:e3:f8:e4:df:a6:c0:50:bc:57:de:bd:
                    34:5a:6a:8c:ca:18:c1:aa:5a:d5:f2:24:5e:c2:b1:
                    d1:3b:d4:1a:73:9e:17:d5:4c:72:78:d6:a4:4c:4f:
                    17:8f:e4:7a:ed:f4:1b:8d:57:1c:ea:08:4b:d1:9c:
                    1c:4a:f1:87:70:c7:7e:37:e8:47:c4:3a:9b:a5:5c:
                    5d:21:22:a6:58:0c:14:5e:5f:04:27:eb:d9:3b:67:
                    04:03:e1:2e:cc:78:a3:8a:54:88:75:f0:a1:e8:71:
                    1f:7a:9d:d2:af:f2:64:7f:f2:b4:90:2e:7d:4f:0f:
                    d7:27:7a:c0:50:6d:45:7e:8b:ce:94:43:e6:cb:7f:
                    c4:b8:63:e0:9c:57:af:44:26:f5:70:ec:70:ee:96:
                    3e:eb:c0:b7:a6:22:cc:80:b3:4c:66:eb:5a:2d:7b:
                    9d:c4:9f:7f:69:f0:c3:0d:18:87:c0:97:e0:33:76:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8D:AE:A2:7C:70:28:97:69:52:56:BC:9B:BF:E2:77:97:84:2E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3b42dbed-07c8-3f03-bce4-675ecbd273e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:6a:ee:fe:02:d1:0c:c4:7f:c6:93:c4:ee:b6:f9:b1:20:ad:
         78:17:39:07:1f:2e:4c:28:2b:26:81:fb:45:12:d1:32:cb:ad:
         07:ca:02:b7:af:ca:c7:6a:c2:1a:fe:e1:40:86:c4:3f:55:4a:
         1e:29:04:07:12:46:2f:ad:60:e5:fd:ff:b2:cc:a2:1f:4e:53:
         6f:b9:86:11:fa:2e:9a:b6:39:67:83:c2:71:f3:23:06:16:f9:
         ef:7c:a9:77:53:6e:b8:5d:d7:fe:2a:a7:ca:da:6a:be:be:c3:
         09:6a:12:05:6c:f2:12:ed:71:f8:f1:69:33:88:ed:5b:39:2b:
         94:91:7b:91:bc:4b:45:05:84:4d:2a:3d:23:19:52:78:b4:f6:
         57:9e:3e:06:81:41:68:bb:a9:be:3d:b9:1b:42:94:59:ed:31:
         53:f9:6a:b4:7b:5b:c9:1f:a3:74:2a:72:39:a6:7d:f6:19:fe:
         7e:f7:c0:30:7a:83:67:a2:f4:38:f1:c2:cd:cb:ec:a6:fd:9b:
         f4:0f:67:d8:dc:3b:f2:f7:ee:a0:5d:3d:31:b6:0f:4a:cf:00:
         2d:be:51:39:19:34:19:d1:70:26:e1:cb:d1:5e:c5:91:49:1d:
         63:4e:fb:fc:09:e1:f4:0d:fd:19:2c:6a:e3:78:2c:e0:2c:f6:
         be:3a:f5:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnw5SqXgk46lGlXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MjQzMTk5NjYtZTFhMy00OTE0LTk0YjYtOTc2ZTNhYzA5MzI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSQ5pDv/9BxMtBcytpjyCowJ/RmtIibeERDM
eL28d73aYuwHkkNsbMo8J1uSOTJ1mfhUnc1Vk9spCzLsgw4PsGO6F260MXgbULSD
Itvp4/jk36bAULxX3r00WmqMyhjBqlrV8iRewrHRO9Qac54X1UxyeNakTE8Xj+R6
7fQbjVcc6ghL0ZwcSvGHcMd+N+hHxDqbpVxdISKmWAwUXl8EJ+vZO2cEA+EuzHij
ilSIdfCh6HEfep3Sr/Jkf/K0kC59Tw/XJ3rAUG1FfovOlEPmy3/EuGPgnFevRCb1
cOxw7pY+68C3piLMgLNMZutaLXudxJ9/afDDDRiHwJfgM3ZqlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCuNrqJ8cCiXaVJWvJu/4neXhC54MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2I0MmRiZWQtMDdjOC0z
ZjAzLWJjZTQtNjc1ZWNiZDI3M2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNk/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJq7v4C0QzEf8aTxO62+bEgrXgXOQcfLkwoKyaB+0US0TLLrQfKArev
ysdqwhr+4UCGxD9VSh4pBAcSRi+tYOX9/7LMoh9OU2+5hhH6Lpq2OWeDwnHzIwYW
+e98qXdTbrhd1/4qp8raar6+wwlqEgVs8hLtcfjxaTOI7Vs5K5SRe5G8S0UFhE0q
PSMZUni09leePgaBQWi7qb49uRtClFntMVP5arR7W8kfo3QqcjmmffYZ/n73wDB6
g2ei9Djxws3L7Kb9m/QPZ9jcO/L37qBdPTG2D0rPAC2+UTkZNBnRcCbhy9FexZFJ
HWNO+/wJ4fQN/RksauN4LOAs9r469YA=
-----END CERTIFICATE-----