Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c6480294-3f6b-3de6-8ca2-e304df3021c9.roa
File:                     c6480294-3f6b-3de6-8ca2-e304df3021c9.roa (raw, json)
Hash identifier:          O9uKTx1HSXmngw3qxONOraQ2TWB5kriZkluwVsSpR94=
Subject key identifier:   94:64:F7:BF:97:D4:5C:88:F4:FB:66:09:B5:DF:7A:00:3E:2D:A9:E5
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7DF2210A2537D6CE1C61300
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c6480294-3f6b-3de6-8ca2-e304df3021c9.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        207.219.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:df:22:10:a2:53:7d:6c:e1:c6:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=d5602999-75e9-4237-9f22-f662f485fbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:99:a0:a9:4e:6c:d4:ba:85:83:eb:2b:28:
                    76:46:69:1c:80:73:7a:2b:fb:21:61:68:4c:07:da:
                    79:b8:38:41:19:0e:09:0e:65:c5:74:b3:b4:4f:e4:
                    28:33:10:54:85:8c:18:54:7c:77:00:34:01:7a:f7:
                    9b:ad:a5:c7:06:a8:6d:90:29:85:7f:6c:ea:2d:58:
                    f1:0b:70:c3:07:f9:92:5c:ac:15:56:cf:cf:65:13:
                    e8:ac:49:b0:7b:c6:2a:2d:69:e0:3a:41:aa:26:68:
                    43:5b:05:51:37:9a:96:01:33:f1:74:6a:c1:40:d4:
                    f6:86:39:9e:78:29:93:f7:53:82:95:c8:6f:3c:1c:
                    14:24:be:52:6b:34:34:a2:1d:8e:82:3f:da:a3:70:
                    75:18:47:1b:cc:80:1f:61:7f:63:4c:db:7b:2c:82:
                    68:e1:9f:44:a7:46:38:d4:c4:9c:6f:1f:4e:38:d1:
                    7c:66:da:89:4a:5b:de:34:f0:4b:db:5a:1c:51:c7:
                    d2:2d:12:41:5d:22:0b:7a:20:1a:c8:15:81:f3:84:
                    ae:f5:97:1b:35:13:49:4c:99:4a:2c:60:c2:36:19:
                    1b:f0:1e:66:ec:b4:f1:78:02:b1:de:bb:f1:03:3d:
                    fa:f8:16:1b:b5:f9:4f:1e:7d:69:79:36:69:1e:1e:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:64:F7:BF:97:D4:5C:88:F4:FB:66:09:B5:DF:7A:00:3E:2D:A9:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c6480294-3f6b-3de6-8ca2-e304df3021c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.219.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:ac:60:02:17:5f:7e:19:bd:cf:f3:a3:1e:2a:d5:13:1c:ee:
         dd:50:b6:ac:76:40:79:d5:3c:09:f4:67:62:8d:f3:94:38:1e:
         04:b0:14:50:ac:77:74:c5:2b:dc:9a:da:88:54:f0:f5:3d:2c:
         ca:31:c6:1e:be:86:b4:bc:fc:bf:2c:0a:cf:3a:99:47:c6:00:
         d5:62:41:fe:f6:b0:d6:97:6f:ae:f4:6d:68:92:89:67:0a:c5:
         86:fa:06:46:77:5f:f4:6e:e8:3a:ce:9f:71:b1:9d:c7:02:d2:
         b4:2c:2b:c2:52:29:62:57:d4:09:f4:0e:f1:e1:38:be:c6:11:
         61:f8:fd:cd:69:ac:5a:2a:8f:62:59:74:70:e6:bf:94:43:01:
         2a:c2:04:47:d2:43:a2:97:7f:b9:2a:25:6d:3d:f6:42:40:fc:
         40:3e:ea:89:1e:43:77:d6:fe:2f:39:d6:cd:f2:f1:7f:46:3c:
         0a:51:1d:a4:80:f1:6c:75:bb:f6:36:27:f0:f0:31:f5:3b:3f:
         55:14:fe:0d:9d:89:8f:9f:2f:61:ba:9d:e6:e0:a0:99:01:a3:
         bd:d8:66:d2:5b:45:e3:a0:31:2a:a6:90:d6:9d:2d:0b:b5:8b:
         3f:7b:28:39:90:e4:b1:9d:82:b8:36:09:d5:6d:ac:48:05:cf:
         77:ac:22:20
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDf33yIQolN9bOHGEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTIwMDkyMTA0MDAwMFoXDTIzMDIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZDU2MDI5OTktNzVlOS00MjM3LTlmMjItZjY2MmY0ODVmYmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxISZoKlObNS6hYPrKyh2RmkcgHN6K/shYWhM
B9p5uDhBGQ4JDmXFdLO0T+QoMxBUhYwYVHx3ADQBevebraXHBqhtkCmFf2zqLVjx
C3DDB/mSXKwVVs/PZRPorEmwe8YqLWngOkGqJmhDWwVRN5qWATPxdGrBQNT2hjme
eCmT91OClchvPBwUJL5SazQ0oh2Ogj/ao3B1GEcbzIAfYX9jTNt7LIJo4Z9Ep0Y4
1MScbx9OONF8ZtqJSlveNPBL21ocUcfSLRJBXSILeiAayBWB84Su9ZcbNRNJTJlK
LGDCNhkb8B5m7LTxeAKx3rvxAz36+BYbtflPHn1peTZpHh513QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJRk97+X1FyI9PtmCbXfegA+LanlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzY0ODAyOTQtM2Y2Yi0z
ZGU2LThjYTItZTMwNGRmMzAyMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAz9swVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAu6xgAhdffhm9z/OjHirVExzu3VC2rHZAedU8CfRnYo3zlDgeBLAUUKx3
dMUr3JraiFTw9T0syjHGHr6GtLz8vywKzzqZR8YA1WJB/vaw1pdvrvRtaJKJZwrF
hvoGRndf9G7oOs6fcbGdxwLStCwrwlIpYlfUCfQO8eE4vsYRYfj9zWmsWiqPYll0
cOa/lEMBKsIER9JDopd/uSolbT32QkD8QD7qiR5Dd9b+LznWzfLxf0Y8ClEdpIDx
bHW79jYn8PAx9Ts/VRT+DZ2Jj58vYbqd5uCgmQGjvdhm0ltF46AxKqaQ1p0tC7WL
P3soOZDksZ2CuDYJ1W2sSAXPd6wiIA==
-----END CERTIFICATE-----