Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/a0d5b20d-92d5-375b-99bf-4c11251fd4d9.roa
File:                     a0d5b20d-92d5-375b-99bf-4c11251fd4d9.roa (raw, json)
Hash identifier:          9DQCWO35WQDenrMDBoagvE9MCDKdqniVu8B8YHQBm14=
Subject key identifier:   78:87:70:F0:D9:73:68:A0:AB:1B:E5:73:9F:7E:C5:47:25:00:32:49
Certificate issuer:       /CN=9d4d0e8b-df52-4033-8ede-1f00c69412ba
Certificate serial:       010D0C9F432858381FAA861D968320C694AC1E00
Authority key identifier: 3E:C0:79:9B:58:B6:1A:C0:FE:10:11:04:83:57:5E:4E:22:35:30:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/a0d5b20d-92d5-375b-99bf-4c11251fd4d9.roa
Signing time:             Fri 20 Nov 2020 05:00:00 +0000
ROA not before:           Fri 20 Nov 2020 05:00:00 +0000
ROA not after:            Mon 06 Mar 2023 05:00:00 +0000
asID:                     61317
IP address blocks:        199.188.236.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:1f:aa:86:1d:96:83:20:c6:94:ac:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4d0e8b-df52-4033-8ede-1f00c69412ba
        Validity
            Not Before: Nov 20 05:00:00 2020 GMT
            Not After : Mar  6 05:00:00 2023 GMT
        Subject: CN=537e0367-8faf-43e0-a997-40855b8ed845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:75:d2:30:e6:a5:95:d8:61:af:a5:e8:bc:1b:
                    41:a7:8e:a9:bc:1f:94:ab:08:99:77:49:2f:da:ad:
                    3e:33:15:bc:c2:8f:bd:60:11:93:89:48:1f:84:7b:
                    08:cb:f2:fb:fc:26:23:86:ce:3f:fe:51:30:d9:8a:
                    24:6f:24:07:c0:68:9e:3c:e8:f5:db:ca:40:bb:97:
                    cb:88:02:35:6e:e1:28:1e:6b:66:1b:59:07:af:7e:
                    86:8e:db:3b:c4:d7:df:7f:b3:97:b3:6b:06:d9:20:
                    a1:ce:d2:77:a3:18:90:3c:8a:35:65:4f:d6:35:65:
                    15:64:01:1f:9b:25:dd:91:5e:79:ef:cf:60:80:88:
                    91:d8:45:d2:e7:cf:ec:3a:33:97:4e:e3:b5:ef:f9:
                    3f:93:fc:b2:3c:01:72:77:ec:fc:c6:7f:2f:7e:f7:
                    69:02:35:63:1d:a4:be:c9:d0:ee:bc:b6:48:cb:c4:
                    cf:2c:db:20:95:05:f7:2b:f1:7a:d5:0e:ea:00:ba:
                    e8:bb:e2:01:e5:08:4e:7d:76:fd:ed:b1:75:83:b2:
                    59:95:b4:4c:21:4f:5b:8f:8a:f5:5e:f2:cc:0a:c6:
                    59:87:9e:16:de:f8:51:c8:7e:0d:fe:c0:23:ad:fb:
                    88:0f:9c:03:77:e8:6a:31:54:f4:bc:9c:46:8c:0e:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:87:70:F0:D9:73:68:A0:AB:1B:E5:73:9F:7E:C5:47:25:00:32:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/a0d5b20d-92d5-375b-99bf-4c11251fd4d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/9d4d0e8b-df52-4033-8ede-1f00c69412ba.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C0:79:9B:58:B6:1A:C0:FE:10:11:04:83:57:5E:4E:22:35:30:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d0:b7:ad:ed:70:87:05:9d:59:4f:f7:0a:c2:81:76:f0:fb:
         52:a3:cf:94:a9:02:0e:21:b3:5c:8a:1e:99:19:ae:84:2b:b7:
         77:91:6b:1a:1f:e1:a8:ae:ab:5a:9d:68:1a:8a:d6:5d:56:e9:
         08:64:73:b0:17:5e:0b:75:09:84:2c:e5:7c:fa:f6:15:f8:5f:
         67:b4:a2:b7:d0:a3:de:32:e0:a5:68:b7:7a:3c:19:c1:20:be:
         a8:0d:b9:20:d6:bb:86:1b:cb:0c:cc:7e:ac:7b:ff:45:6c:b7:
         26:96:d0:5c:aa:d6:06:b6:5e:a2:fc:d7:e6:7f:77:18:51:66:
         40:dd:cb:ac:c4:4d:ff:99:c3:d3:8c:0d:10:99:b6:91:86:19:
         88:0b:4c:1e:df:2f:c7:e0:a5:14:d2:d2:bb:a6:05:4b:9b:fa:
         6f:32:b8:43:bb:da:95:bf:11:d0:77:33:6d:9c:5f:d9:a7:cb:
         73:c3:93:1e:f2:d8:f1:e6:9d:3d:4e:1f:77:6f:3d:10:b4:bd:
         2c:60:0a:c7:d1:db:06:b0:18:71:c0:12:51:a6:5b:8d:fa:bf:
         ab:a1:41:48:31:24:fe:08:cf:f9:c0:f5:cd:92:39:50:56:87:
         95:8f:74:be:02:f3:d1:28:ef:0f:95:08:42:79:12:4b:cf:63:
         f5:b1:8a:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDgfqoYdloMgxpSsHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQ0ZDBlOGItZGY1Mi00MDMzLThlZGUtMWYwMGM2OTQx
MmJhMB4XDTIwMTEyMDA1MDAwMFoXDTIzMDMwNjA1MDAwMFowLzEtMCsGA1UEAxMk
NTM3ZTAzNjctOGZhZi00M2UwLWE5OTctNDA4NTViOGVkODQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3XSMOalldhhr6XovBtBp46pvB+UqwiZd0kv
2q0+MxW8wo+9YBGTiUgfhHsIy/L7/CYjhs4//lEw2YokbyQHwGiePOj128pAu5fL
iAI1buEoHmtmG1kHr36Gjts7xNfff7OXs2sG2SChztJ3oxiQPIo1ZU/WNWUVZAEf
myXdkV55789ggIiR2EXS58/sOjOXTuO17/k/k/yyPAFyd+z8xn8vfvdpAjVjHaS+
ydDuvLZIy8TPLNsglQX3K/F61Q7qALrou+IB5QhOfXb97bF1g7JZlbRMIU9bj4r1
XvLMCsZZh54W3vhRyH4N/sAjrfuID5wDd+hqMVT0vJxGjA6OkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHiHcPDZc2igqxvlc59+xUclADJJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85ZDRk
MGU4Yi1kZjUyLTQwMzMtOGVkZS0xZjAwYzY5NDEyYmEvYTBkNWIyMGQtOTJkNS0z
NzViLTk5YmYtNGMxMTI1MWZkNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWQ0ZDBlOGItZGY1Mi00MDMzLThl
ZGUtMWYwMGM2OTQxMmJhLzlkNGQwZThiLWRmNTItNDAzMy04ZWRlLTFmMDBjNjk0
MTJiYS5jcmwwHwYDVR0jBBgwFoAUPsB5m1i2GsD+EBEEg1deTiI1MPMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85ZDRkMGU4Yi1kZjUyLTQwMzMtOGVkZS0xZjAw
YzY5NDEyYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7zsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI3Qt63tcIcFnVlP9wrCgXbw+1Kjz5SpAg4hs1yKHpkZroQrt3eRaxof
4aiuq1qdaBqK1l1W6Qhkc7AXXgt1CYQs5Xz69hX4X2e0orfQo94y4KVot3o8GcEg
vqgNuSDWu4YbywzMfqx7/0VstyaW0Fyq1ga2XqL81+Z/dxhRZkDdy6zETf+Zw9OM
DRCZtpGGGYgLTB7fL8fgpRTS0rumBUub+m8yuEO72pW/EdB3M22cX9mny3PDkx7y
2PHmnT1OH3dvPRC0vSxgCsfR2wawGHHAElGmW436v6uhQUgxJP4Iz/nA9c2SOVBW
h5WPdL4C89Eo7w+VCEJ5EkvPY/Wxin4=
-----END CERTIFICATE-----