Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/e24504a0-85ac-367b-914c-f06dbdce3ba0.roa
File:                     e24504a0-85ac-367b-914c-f06dbdce3ba0.roa (raw, json)
Hash identifier:          7YkVA1XMGrdfDV/r1/quKqAIMrW0NS5sbs6y6vSQ3/k=
Subject key identifier:   2D:F9:CF:B1:C1:72:1B:A4:E1:49:58:28:61:9C:59:C6:59:64:4F:37
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328576D51CC73C042CFC173729C5C51
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/e24504a0-85ac-367b-914c-f06dbdce3ba0.roa
Signing time:             Tue 21 Jul 2020 18:21:56 +0000
ROA not before:           Mon 13 Jan 2020 05:00:00 +0000
ROA not after:            Mon 24 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        208.70.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:72:9c:5c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jan 13 05:00:00 2020 GMT
            Not After : Oct 24 04:00:00 2022 GMT
        Subject: CN=1280935d-85b8-4721-b003-fcd47f927d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:0f:34:ff:d3:de:e6:e6:a2:85:13:45:0e:
                    a2:ba:3f:74:27:fb:7a:a2:bf:7f:d2:39:08:8f:c8:
                    8a:77:4f:23:f8:8a:30:a4:89:ab:8f:9a:12:01:ce:
                    25:9a:63:fa:a1:6c:97:a4:c1:8d:3b:0d:dd:eb:9b:
                    62:16:ad:99:03:c3:d5:0b:ff:b3:d9:85:ff:fe:01:
                    ab:7d:70:70:cb:7f:8a:a0:65:c0:86:6f:76:fd:4b:
                    76:d1:1c:04:5c:17:4f:76:bd:f3:7f:1d:fe:59:21:
                    97:34:d6:0b:5a:80:71:77:fc:a9:d8:b5:17:0c:5e:
                    5c:e1:93:ce:ac:4e:3a:e2:22:ef:ca:a1:9e:26:90:
                    5a:65:e8:ef:58:d2:b2:ad:e7:7f:27:27:47:c7:8b:
                    ad:c1:61:cc:fb:6a:09:2e:50:cc:cb:e0:65:37:4d:
                    a1:20:7d:dd:2b:62:34:63:93:48:6d:b4:2d:05:75:
                    ad:cb:2f:d2:4e:4b:0f:0f:d8:70:94:bf:cb:d8:47:
                    30:6e:ea:82:b6:e3:78:bf:56:cd:ac:42:f7:03:b9:
                    f9:ae:64:74:fc:4e:2d:50:2f:44:8a:52:e3:12:76:
                    a3:e3:43:8a:41:74:c9:8f:f2:18:0c:22:02:7e:1b:
                    d1:4b:73:d7:ec:c5:7d:9a:5d:dc:2b:2a:ba:30:d6:
                    38:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F9:CF:B1:C1:72:1B:A4:E1:49:58:28:61:9C:59:C6:59:64:4F:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/e24504a0-85ac-367b-914c-f06dbdce3ba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f7:95:e7:52:6e:1a:2f:17:cc:f1:e0:19:11:d2:5f:c3:06:
         e2:82:cb:72:4f:77:22:a4:db:86:3e:e4:c9:2a:1d:62:c1:36:
         d4:02:2a:49:9a:46:38:3c:ae:06:f2:48:89:c0:14:bd:b5:05:
         e4:de:cc:d9:67:a2:97:85:d6:36:8b:a3:0a:ca:57:4f:c7:1b:
         05:26:78:51:01:9f:e8:e9:38:19:28:a4:05:0d:44:35:10:e9:
         4f:02:d7:86:20:c7:c9:2c:60:f0:b6:91:fb:a4:d0:0a:87:8e:
         c2:af:a4:e1:f5:1f:cf:f6:ed:2c:5b:a8:3e:0e:0f:e0:87:cf:
         5c:c1:01:01:c2:67:bd:96:bf:67:36:b5:59:df:35:69:f0:d5:
         91:58:d8:b1:2d:29:b9:d7:e7:65:bf:09:d6:4d:7b:bb:f6:8e:
         8a:08:ee:3b:43:d7:8e:15:4a:8b:54:fe:7c:90:a4:ab:e6:11:
         f7:7c:47:2d:e2:0b:79:99:bd:5a:4b:5c:5b:04:bb:ec:9f:42:
         25:da:46:b2:ea:d5:bb:2a:63:58:90:01:8f:32:6a:80:a4:be:
         41:0e:45:db:d0:fb:25:07:98:87:b5:49:f9:38:06:fe:a0:93:
         99:0c:97:2f:e4:29:97:95:5b:0f:05:7b:93:88:5b:02:89:d0:
         2e:63:89:5c
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc3KcXFEwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGYwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGViNWEw
NDAeFw0yMDAxMTMwNTAwMDBaFw0yMjEwMjQwNDAwMDBaMC8xLTArBgNVBAMTJDEy
ODA5MzVkLTg1YjgtNDcyMS1iMDAzLWZjZDQ3ZjkyN2Q1OTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANsMDzT/097m5qKFE0UOoro/dCf7eqK/f9I5CI/I
indPI/iKMKSJq4+aEgHOJZpj+qFsl6TBjTsN3eubYhatmQPD1Qv/s9mF//4Bq31w
cMt/iqBlwIZvdv1LdtEcBFwXT3a9838d/lkhlzTWC1qAcXf8qdi1FwxeXOGTzqxO
OuIi78qhniaQWmXo71jSsq3nfycnR8eLrcFhzPtqCS5QzMvgZTdNoSB93StiNGOT
SG20LQV1rcsv0k5LDw/YcJS/y9hHMG7qgrbjeL9WzaxC9wO5+a5kdPxOLVAvRIpS
4xJ2o+NDikF0yY/yGAwiAn4b0Utz1+zFfZpd3CsqujDWOBMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQt+c+xwXIbpOFJWChhnFnGWWRPNzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNj
YjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1YTA0L2UyNDUwNGEwLTg1YWMtMzY3
Yi05MTRjLWYwNmRiZGNlM2JhMC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNk
LTU5ZDE5MGViNWEwNC9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVh
MDQuY3JsMB8GA1UdIwQYMBaAFK2QFM1kVmXA4Xc1crbamH05VSSWMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkw
ZWI1YTA0LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANBG0zBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAafeV51JuGi8XzPHgGRHSX8MG4oLLck93IqTbhj7kySodYsE21AIqSZpGODyu
BvJIicAUvbUF5N7M2Weil4XWNoujCspXT8cbBSZ4UQGf6Ok4GSikBQ1ENRDpTwLX
hiDHySxg8LaR+6TQCoeOwq+k4fUfz/btLFuoPg4P4IfPXMEBAcJnvZa/Zza1Wd81
afDVkVjYsS0pudfnZb8J1k17u/aOigjuO0PXjhVKi1T+fJCkq+YR93xHLeILeZm9
WktcWwS77J9CJdpGsurVuypjWJABjzJqgKS+QQ5F29D7JQeYh7VJ+TgG/qCTmQyX
L+Qpl5VbDwV7k4hbAonQLmOJXA==
-----END CERTIFICATE-----