Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9557461e-f000-3ab2-9596-fc482438befd.roa
File:                     9557461e-f000-3ab2-9596-fc482438befd.roa (raw, json)
Hash identifier:          qsreLEl575my2x5rr5ATog+nm8O33BtNvuO5DQTqkno=
Subject key identifier:   1D:3D:34:C1:69:38:FC:11:15:62:B2:79:BB:D9:8F:18:25:0B:82:01
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7AD4699AB101AE1A34D5B08
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9557461e-f000-3ab2-9596-fc482438befd.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        173.194.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ad:46:99:ab:10:1a:e1:a3:4d:5b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=801d763c-077f-4c10-8292-07cd5ccabee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:f2:73:d7:a4:a8:78:ea:dd:d8:94:a8:3c:
                    8b:1a:db:69:00:b5:24:96:18:20:c7:fb:51:59:05:
                    28:8c:f2:de:cd:a6:c3:5b:c2:e7:7f:d4:94:9e:4f:
                    23:eb:56:9b:8e:33:fa:87:f9:aa:5c:cf:9c:e1:76:
                    f9:91:9d:96:da:34:74:de:3b:87:15:c9:b9:4a:b4:
                    30:05:63:6d:b6:06:fd:bb:98:bf:f3:ad:fc:d3:f9:
                    e4:1c:76:9f:5c:b6:de:94:ec:57:f9:19:69:91:ec:
                    f5:98:eb:7d:a4:7e:17:2c:9c:4a:4b:44:3f:40:c1:
                    42:42:ad:f5:f3:a5:73:ed:1f:1b:2a:d2:86:98:b7:
                    5e:b1:a1:ae:dc:52:9d:63:67:d6:4f:4b:ef:66:09:
                    33:4e:3a:70:5e:e9:40:04:72:cd:ef:73:4f:84:97:
                    c9:99:e9:d4:ec:b8:e1:fc:34:17:68:d3:92:4f:fc:
                    04:e5:dc:a4:e2:0d:47:3f:35:57:ef:9d:35:84:1c:
                    9f:ad:16:de:a0:2d:5b:f1:68:a0:a0:f7:0b:76:ff:
                    5e:16:9b:9d:f3:cb:aa:16:29:6f:6d:df:f0:2b:c6:
                    da:15:a4:4a:c3:05:1e:93:b0:31:e1:cc:45:13:13:
                    1f:c8:3d:30:7b:2e:be:1a:01:84:d8:6b:dc:06:52:
                    fc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3D:34:C1:69:38:FC:11:15:62:B2:79:BB:D9:8F:18:25:0B:82:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9557461e-f000-3ab2-9596-fc482438befd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e9:fb:9e:95:1a:24:95:ea:86:60:eb:9a:a5:68:96:8c:f9:
         f2:6a:f2:ff:de:1a:9e:43:0c:4e:6f:a0:3a:42:a9:63:ce:79:
         1f:6f:39:10:47:5c:78:78:6c:7f:27:09:47:d5:2f:5a:25:3d:
         19:6f:11:b0:4a:b8:55:c1:eb:6b:32:24:1f:bc:5e:47:72:63:
         ed:f7:da:14:26:2c:8f:b0:40:89:3c:47:b8:73:68:76:70:2d:
         08:07:44:48:c9:c9:2b:68:c0:7b:b6:30:42:82:fb:ca:c3:f2:
         d0:62:55:7c:e7:eb:4b:00:c9:cc:7b:5e:e5:4c:66:e9:9f:7e:
         82:4d:86:49:2d:88:89:cd:f9:04:08:e3:97:5f:dd:e0:22:5e:
         1f:23:7c:3a:bd:17:fa:9b:08:5a:6a:8e:b8:65:91:c9:13:0d:
         6d:17:09:b2:75:49:15:b5:da:56:2b:6e:af:4a:ac:85:34:9d:
         aa:a3:d0:40:ca:8a:e3:a5:c1:5c:db:bd:e5:d1:1b:a4:83:02:
         95:ad:df:20:da:2e:28:b9:42:a3:ab:1c:4b:fc:b8:de:93:fc:
         4d:86:bd:4b:06:50:47:93:e7:6f:c9:78:d7:92:97:da:6f:e9:
         87:82:18:6a:11:b9:a5:1a:0f:da:e2:cb:ba:48:7c:e6:33:3f:
         84:22:ae:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnrUaZqxAa4aNNWwgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ODAxZDc2M2MtMDc3Zi00YzEwLTgyOTItMDdjZDVjY2FiZWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3Tyc9ekqHjq3diUqDyLGttpALUklhggx/tR
WQUojPLezabDW8Lnf9SUnk8j61abjjP6h/mqXM+c4Xb5kZ2W2jR03juHFcm5SrQw
BWNttgb9u5i/86380/nkHHafXLbelOxX+Rlpkez1mOt9pH4XLJxKS0Q/QMFCQq31
86Vz7R8bKtKGmLdesaGu3FKdY2fWT0vvZgkzTjpwXulABHLN73NPhJfJmenU7Ljh
/DQXaNOST/wE5dyk4g1HPzVX7501hByfrRbeoC1b8WigoPcLdv9eFpud88uqFilv
bd/wK8baFaRKwwUek7Ax4cxFExMfyD0wey6+GgGE2GvcBlL8WQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB09NMFpOPwRFWKyebvZjxglC4IBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTU1NzQ2MWUtZjAwMC0z
YWIyLTk1OTYtZmM0ODI0MzhiZWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcI/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPp+56VGiSV6oZg65qlaJaM+fJq8v/eGp5DDE5voDpCqWPOeR9vORBH
XHh4bH8nCUfVL1olPRlvEbBKuFXB62syJB+8XkdyY+332hQmLI+wQIk8R7hzaHZw
LQgHREjJyStowHu2MEKC+8rD8tBiVXzn60sAycx7XuVMZumffoJNhkktiInN+QQI
45df3eAiXh8jfDq9F/qbCFpqjrhlkckTDW0XCbJ1SRW12lYrbq9KrIU0naqj0EDK
iuOlwVzbveXRG6SDApWt3yDaLii5QqOrHEv8uN6T/E2GvUsGUEeT52/JeNeSl9pv
6YeCGGoRuaUaD9riy7pIfOYzP4Qirus=
-----END CERTIFICATE-----