Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/5bd88633-8df0-3f01-9b46-234e7fb70620.roa
File:                     5bd88633-8df0-3f01-9b46-234e7fb70620.roa (raw, json)
Hash identifier:          A9PLDuLgzwIILPqh3xxg8pY1fYdSTfUZPAOSpdyBOUw=
Subject key identifier:   B0:14:8A:DB:45:2A:C8:E6:83:0C:4B:0D:38:51:D2:5D:28:14:4C:B2
Certificate issuer:       /CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
Certificate serial:       010D0C9F4328576D51CC73C042CFC170EB60CE05
Authority key identifier: 87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/5bd88633-8df0-3f01-9b46-234e7fb70620.roa
Signing time:             Wed 18 Mar 2020 02:02:34 +0000
ROA not before:           Tue 17 Sep 2019 04:00:00 +0000
ROA not after:            Mon 20 Jun 2022 04:00:00 +0000
asID:                     25623
IP address blocks:        162.219.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:eb:60:ce:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
        Validity
            Not Before: Sep 17 04:00:00 2019 GMT
            Not After : Jun 20 04:00:00 2022 GMT
        Subject: CN=34800671-42ca-40ef-9445-704b9435c899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:dd:5d:a9:e4:13:29:fd:e9:aa:f5:5c:09:
                    bf:da:5d:a4:8e:f3:c4:40:52:49:29:b0:52:10:6e:
                    fb:ef:23:24:1e:07:23:d9:45:ae:2f:65:2d:f3:88:
                    47:b6:5c:89:d8:d8:58:62:56:b3:32:26:6c:a1:1a:
                    34:46:71:08:51:7c:81:96:b0:f4:1a:9d:ef:fd:61:
                    f9:56:2c:58:b7:9a:a8:cb:16:85:82:c5:f7:39:bd:
                    82:cb:79:0e:cb:7f:ef:48:3f:1d:95:0f:e3:84:cb:
                    ea:c2:bd:32:9b:8f:74:d6:03:23:9d:fa:70:31:48:
                    63:b3:31:02:be:c8:e7:b2:ff:48:b6:04:41:b0:9c:
                    6e:d4:b5:b8:60:fc:4f:1a:fe:25:95:91:25:f5:20:
                    7e:26:ee:35:a9:69:84:66:06:84:0f:8f:42:1a:a7:
                    64:db:eb:76:9b:c9:d3:c0:40:dd:e1:be:ab:4b:24:
                    06:09:29:0a:03:f8:e2:c9:d7:e9:c3:a6:96:75:91:
                    8c:40:73:a3:c1:d0:d6:ce:d7:9f:94:c3:52:d3:84:
                    60:9a:23:8d:90:0a:c0:2f:2b:f3:b3:ff:ce:47:ca:
                    b8:86:a3:a7:b5:38:e5:02:c4:64:9a:69:df:48:db:
                    a2:16:e2:b5:df:59:a8:4c:0b:95:df:cd:67:12:a8:
                    f9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:14:8A:DB:45:2A:C8:E6:83:0C:4B:0D:38:51:D2:5D:28:14:4C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/5bd88633-8df0-3f01-9b46-234e7fb70620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.crl

            X509v3 Authority Key Identifier:
                keyid:87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:63:c4:f3:df:b3:e6:c3:9a:56:ee:30:65:fc:94:69:1e:a1:
         85:c1:12:da:9c:d1:f6:0c:ea:81:b6:42:45:b5:13:4a:6c:a9:
         ef:86:b6:46:f9:31:c2:05:87:b1:c0:34:64:33:4b:fd:2f:31:
         80:d5:35:ca:04:09:f2:a0:a7:e1:b5:ee:ee:99:e1:bb:0c:d7:
         76:d6:d3:dc:eb:01:d5:02:dd:96:8c:c4:1a:31:4d:53:b5:21:
         3e:6a:a7:65:99:04:44:ff:4e:49:74:88:b6:4b:88:b5:80:9e:
         e3:aa:92:26:f1:a5:c8:2f:4a:cc:cf:d3:fa:44:2c:0d:04:a8:
         7c:55:34:bd:a4:82:c0:3f:4c:23:f4:0a:e1:6b:65:3c:29:1a:
         56:c0:4e:06:40:4e:6d:5e:50:38:25:f5:52:cc:29:82:13:8f:
         df:29:ee:be:c1:6f:5d:fe:50:da:2a:bf:15:40:2a:02:c7:f4:
         02:31:25:1d:5c:f5:a7:ae:3e:c0:11:8e:54:76:4f:ca:7d:41:
         1f:a6:53:22:f6:d0:bb:ed:76:8f:60:39:2c:b1:1b:a7:61:e0:
         e9:bc:6f:b3:ca:6e:2c:dc:85:4b:46:3d:b8:ec:fd:1c:12:8b:
         28:52:68:e1:68:bd:46:34:e7:9d:01:04:83:d0:30:ae:26:78:
         85:bc:74:06
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcOtgzgUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGU5NzlmNmZjLWJjMjktNDRkNy1iYjYyLWY3NGNjYzU4NGMx
NzAeFw0xOTA5MTcwNDAwMDBaFw0yMjA2MjAwNDAwMDBaMC8xLTArBgNVBAMTJDM0
ODAwNjcxLTQyY2EtNDBlZi05NDQ1LTcwNGI5NDM1Yzg5OTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALnL3V2p5BMp/emq9VwJv9pdpI7zxEBSSSmwUhBu
++8jJB4HI9lFri9lLfOIR7ZcidjYWGJWszImbKEaNEZxCFF8gZaw9Bqd7/1h+VYs
WLeaqMsWhYLF9zm9gst5Dst/70g/HZUP44TL6sK9MpuPdNYDI536cDFIY7MxAr7I
57L/SLYEQbCcbtS1uGD8Txr+JZWRJfUgfibuNalphGYGhA+PQhqnZNvrdpvJ08BA
3eG+q0skBgkpCgP44snX6cOmlnWRjEBzo8HQ1s7Xn5TDUtOEYJojjZAKwC8r87P/
zkfKuIajp7U45QLEZJpp30jbohbitd9ZqEwLld/NZxKo+fsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSwFIrbRSrI5oMMSw04UdJdKBRMsjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk3OWY2
ZmMtYmMyOS00NGQ3LWJiNjItZjc0Y2NjNTg0YzE3LzViZDg4NjMzLThkZjAtM2Yw
MS05YjQ2LTIzNGU3ZmI3MDYyMC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2U5NzlmNmZjLWJjMjktNDRkNy1iYjYy
LWY3NGNjYzU4NGMxNy9lOTc5ZjZmYy1iYzI5LTQ0ZDctYmI2Mi1mNzRjY2M1ODRj
MTcuY3JsMB8GA1UdIwQYMBaAFIdDKd9SFue5+sKxv0BLGmz86COrMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvZTk3OWY2ZmMtYmMyOS00NGQ3LWJiNjItZjc0Y2Nj
NTg0YzE3LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKLbYTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAQGPE89+z5sOaVu4wZfyUaR6hhcES2pzR9gzqgbZCRbUTSmyp74a2RvkxwgWH
scA0ZDNL/S8xgNU1ygQJ8qCn4bXu7pnhuwzXdtbT3OsB1QLdlozEGjFNU7UhPmqn
ZZkERP9OSXSItkuItYCe46qSJvGlyC9KzM/T+kQsDQSofFU0vaSCwD9MI/QK4Wtl
PCkaVsBOBkBObV5QOCX1UswpghOP3ynuvsFvXf5Q2iq/FUAqAsf0AjElHVz1p64+
wBGOVHZPyn1BH6ZTIvbQu+12j2A5LLEbp2Hg6bxvs8puLNyFS0Y9uOz9HBKLKFJo
4Wi9RjTnnQEEg9AwriZ4hbx0Bg==
-----END CERTIFICATE-----