Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee0887b8-bef5-36b1-aaa1-3413b127e1d5.roa
File:                     ee0887b8-bef5-36b1-aaa1-3413b127e1d5.roa (raw, json)
Hash identifier:          cMJFBo3MvGi26qbQllF692HJgM2oYXQvhR2XN5NVuns=
Subject key identifier:   BB:C4:C7:0A:86:F6:10:97:76:74:BA:46:2D:93:ED:6A:46:FC:10:36
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA62478BD0DD4DAB21FAB20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee0887b8-bef5-36b1-aaa1-3413b127e1d5.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     18779
IP address blocks:        65.49.93.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:24:78:bd:0d:d4:da:b2:1f:ab:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=c4642b74-bb17-407c-af54-266ceca4cbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:8a:84:41:9c:9a:26:6b:fa:68:40:f8:53:
                    30:f2:03:63:22:88:fb:29:7f:d5:d8:e6:80:ac:23:
                    0f:71:a5:ad:e0:e4:ac:93:1b:09:0f:66:19:e0:92:
                    59:15:19:cd:ff:3c:b7:46:48:65:dd:28:3c:a0:79:
                    2d:30:10:03:04:7b:86:9b:e5:dc:6b:02:00:cd:0a:
                    f9:ca:49:19:d6:af:0b:20:44:26:5f:c0:70:ab:ea:
                    f4:9b:e8:6d:48:b5:51:ca:12:3a:7e:7c:06:65:05:
                    90:c5:af:97:d5:26:e3:05:42:d7:3c:60:8a:99:d3:
                    69:f3:10:28:05:f3:de:c0:3b:68:ba:50:4d:dc:8a:
                    eb:33:bc:b1:82:36:da:74:b0:96:b7:31:5a:04:44:
                    f1:86:23:50:d3:dd:01:e4:41:3c:df:e5:7b:4a:d5:
                    82:9d:43:38:14:8c:bb:06:10:1f:31:5d:f6:8b:4a:
                    eb:b9:9a:bf:9c:53:d0:11:ad:ab:bc:8c:e7:57:43:
                    20:05:fa:66:78:b3:64:ee:92:90:5d:ba:9f:d8:d8:
                    b7:fc:bb:6b:0a:88:13:2f:17:ff:d7:ae:3c:75:2c:
                    39:f2:4b:3a:43:bb:ad:5d:df:eb:4a:2d:24:6a:e1:
                    0c:4e:21:8a:6a:4f:e5:93:35:d8:3b:ff:01:2e:e5:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C4:C7:0A:86:F6:10:97:76:74:BA:46:2D:93:ED:6A:46:FC:10:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee0887b8-bef5-36b1-aaa1-3413b127e1d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:7d:d2:61:61:42:ba:7a:86:1f:50:1c:45:6c:b0:e0:44:78:
         c1:f1:c0:eb:93:99:aa:b9:cf:e9:b8:84:01:20:7e:e3:70:96:
         d3:68:04:08:df:cc:5f:44:1e:37:35:97:8f:83:d5:73:e3:4c:
         5d:55:b3:32:df:1b:5b:b0:5e:14:2a:32:97:eb:64:66:d1:27:
         c4:e9:67:3a:2f:f7:10:ce:74:ae:67:05:a0:39:64:05:17:34:
         cc:3f:99:6b:ae:02:1e:8f:2d:0b:1a:8b:01:a0:83:f3:a7:ba:
         8b:2c:6a:11:58:49:95:32:7e:34:18:9b:56:4e:61:f0:7c:6d:
         ff:9b:07:d5:d9:66:e7:ae:e3:38:db:be:42:97:ba:77:69:31:
         22:f5:9c:35:e9:b0:08:63:3b:b6:74:1d:26:6f:19:b7:0a:5c:
         85:88:48:6a:d8:4b:a5:df:4b:26:7c:20:85:fe:57:ca:a3:35:
         a8:c5:e3:c8:d9:2f:93:52:9c:28:d0:c5:0e:92:c9:4b:05:63:
         dc:36:11:05:0b:22:bc:b1:84:4f:f5:2f:9b:49:bd:ee:30:ac:
         2f:1e:59:43:6e:df:e6:33:32:54:dd:4e:6a:06:83:6c:47:30:
         5c:52:86:3e:d0:e9:13:48:36:d2:1a:46:52:1f:7d:93:6d:f0:
         07:4a:96:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDv9piR4vQ3U2rIfqyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
YzQ2NDJiNzQtYmIxNy00MDdjLWFmNTQtMjY2Y2VjYTRjYmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFGKhEGcmiZr+mhA+FMw8gNjIoj7KX/V2OaA
rCMPcaWt4OSskxsJD2YZ4JJZFRnN/zy3Rkhl3Sg8oHktMBADBHuGm+XcawIAzQr5
ykkZ1q8LIEQmX8Bwq+r0m+htSLVRyhI6fnwGZQWQxa+X1SbjBULXPGCKmdNp8xAo
BfPewDtoulBN3IrrM7yxgjbadLCWtzFaBETxhiNQ090B5EE83+V7StWCnUM4FIy7
BhAfMV32i0rruZq/nFPQEa2rvIznV0MgBfpmeLNk7pKQXbqf2Ni3/LtrCogTLxf/
1648dSw58ks6Q7utXd/rSi0kauEMTiGKak/lkzXYO/8BLuUoFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLvExwqG9hCXdnS6Ri2T7WpG/BA2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWUwODg3YjgtYmVmNS0z
NmIxLWFhYTEtMzQxM2IxMjdlMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTFdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACR90mFhQrp6hh9QHEVssOBEeMHxwOuTmaq5z+m4hAEgfuNwltNoBAjf
zF9EHjc1l4+D1XPjTF1VszLfG1uwXhQqMpfrZGbRJ8TpZzov9xDOdK5nBaA5ZAUX
NMw/mWuuAh6PLQsaiwGgg/OnuossahFYSZUyfjQYm1ZOYfB8bf+bB9XZZueu4zjb
vkKXundpMSL1nDXpsAhjO7Z0HSZvGbcKXIWISGrYS6XfSyZ8IIX+V8qjNajF48jZ
L5NSnCjQxQ6SyUsFY9w2EQULIryxhE/1L5tJve4wrC8eWUNu3+YzMlTdTmoGg2xH
MFxShj7Q6RNINtIaRlIffZNt8AdKlgU=
-----END CERTIFICATE-----