Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/cd9e130f-5f1c-3024-9f11-73ffc9e1bc20.roa
File:                     cd9e130f-5f1c-3024-9f11-73ffc9e1bc20.roa (raw, json)
Hash identifier:          SJ1+7IhrKUJ8rpx88wZJXru8pMlYlepuG71j/ykRBuQ=
Subject key identifier:   B6:9F:78:3A:FA:90:47:F9:C0:0B:01:F1:5F:93:5C:D2:5E:4C:83:23
Certificate issuer:       /CN=e42a3de7-584f-4010-acae-b7935ed3f602
Certificate serial:       010D0C9F4328576D51CC73C042CFC17088AC972C
Authority key identifier: D0:4B:20:55:92:9C:EB:76:E4:1F:6A:75:74:2A:D9:ED:93:2E:F6:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/cd9e130f-5f1c-3024-9f11-73ffc9e1bc20.roa
Signing time:             Thu 27 Feb 2020 22:02:57 +0000
ROA not before:           Fri 21 Feb 2020 05:00:00 +0000
ROA not after:            Wed 01 Jun 2022 04:00:00 +0000
asID:                     0
IP address blocks:        198.179.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:88:ac:97:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e42a3de7-584f-4010-acae-b7935ed3f602
        Validity
            Not Before: Feb 21 05:00:00 2020 GMT
            Not After : Jun  1 04:00:00 2022 GMT
        Subject: CN=3196d5e1-25a1-4fe7-8abf-f1e28deb760a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:60:3c:fe:94:7f:7a:ee:5c:a8:fe:b9:3d:
                    4f:50:fe:cf:74:dd:a6:5c:42:fc:87:a8:a1:72:84:
                    81:e0:8e:28:3e:31:a7:01:e1:30:9c:32:7c:76:98:
                    33:9d:1d:13:c8:70:03:a3:00:ef:d4:35:32:c1:f1:
                    6e:3c:23:11:16:37:b4:ed:a1:43:70:65:a1:84:32:
                    df:ff:3b:66:f2:23:84:59:5d:1a:b3:96:31:aa:88:
                    61:f1:a4:0e:50:4b:6a:99:1b:c6:96:fd:c2:ba:cf:
                    06:50:31:1c:7e:38:3f:0c:0f:91:72:be:41:7c:3f:
                    ac:22:6b:e4:35:ff:04:f0:65:30:d1:b4:d4:1b:08:
                    8f:cf:da:e4:b9:04:84:ad:c8:d2:63:d2:2d:f9:97:
                    d8:72:4c:b7:2a:07:bd:a4:f9:25:9f:e1:16:b7:4b:
                    42:b4:79:bb:81:5f:67:b5:3c:ac:12:4c:7f:4d:9a:
                    b9:13:93:81:39:c4:64:20:ca:90:3f:73:3b:31:e2:
                    83:35:b1:69:d4:ac:42:17:5e:49:1d:54:c9:c9:3d:
                    2a:9b:ed:fb:33:4b:27:f2:ad:e7:b3:80:78:d5:a3:
                    77:96:37:3e:b0:7a:00:6e:0d:3f:0a:f0:e1:f1:7e:
                    87:09:ba:59:08:e6:6e:d4:9e:cc:19:b7:55:f8:d6:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9F:78:3A:FA:90:47:F9:C0:0B:01:F1:5F:93:5C:D2:5E:4C:83:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/cd9e130f-5f1c-3024-9f11-73ffc9e1bc20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/e42a3de7-584f-4010-acae-b7935ed3f602.crl

            X509v3 Authority Key Identifier:
                keyid:D0:4B:20:55:92:9C:EB:76:E4:1F:6A:75:74:2A:D9:ED:93:2E:F6:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:22:9b:ba:8e:79:58:03:83:1c:19:49:6e:6c:b0:24:ab:d6:
         df:3e:d6:c9:f3:e1:9f:c8:4b:da:46:73:78:6f:43:ce:76:49:
         a4:3e:72:61:4f:97:3e:f7:bb:0a:f4:da:70:86:ab:5b:f9:7f:
         bb:00:98:e3:dc:e2:c3:61:d9:31:28:6b:b3:68:af:af:de:fe:
         15:5d:88:a9:46:78:02:e0:e0:0d:07:ea:2e:65:b0:d2:f9:ee:
         43:00:ec:3b:be:ed:2c:77:67:ba:6f:52:6e:d4:d3:3a:59:9a:
         55:0e:26:b5:ee:63:5d:48:2d:d3:68:8a:00:f0:d3:9c:43:b3:
         79:74:6c:64:e4:49:0e:15:4f:2f:a3:63:2f:82:ea:bc:ec:91:
         4f:96:d4:ab:dc:03:d5:8a:b9:c7:6b:32:de:22:e4:85:a8:d3:
         8c:21:6a:07:db:3f:9b:10:b4:eb:68:da:b2:ee:27:95:3f:e5:
         07:26:a9:7e:65:cb:9c:37:61:f9:c3:9c:14:9e:55:c7:86:8a:
         47:8d:05:12:06:0a:32:17:51:04:b4:1b:41:de:1c:47:7b:b4:
         2f:18:30:e7:7f:4f:c9:a9:dc:1d:15:44:17:56:9b:75:48:0c:
         46:3b:6c:99:77:79:25:60:28:f9:04:d4:3a:eb:ff:e6:a9:0c:
         a9:7a:c0:33
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcIislywwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGU0MmEzZGU3LTU4NGYtNDAxMC1hY2FlLWI3OTM1ZWQzZjYw
MjAeFw0yMDAyMjEwNTAwMDBaFw0yMjA2MDEwNDAwMDBaMC8xLTArBgNVBAMTJDMx
OTZkNWUxLTI1YTEtNGZlNy04YWJmLWYxZTI4ZGViNzYwYTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKmyYDz+lH967lyo/rk9T1D+z3TdplxC/IeooXKE
geCOKD4xpwHhMJwyfHaYM50dE8hwA6MA79Q1MsHxbjwjERY3tO2hQ3BloYQy3/87
ZvIjhFldGrOWMaqIYfGkDlBLapkbxpb9wrrPBlAxHH44PwwPkXK+QXw/rCJr5DX/
BPBlMNG01BsIj8/a5LkEhK3I0mPSLfmX2HJMtyoHvaT5JZ/hFrdLQrR5u4FfZ7U8
rBJMf02auROTgTnEZCDKkD9zOzHigzWxadSsQhdeSR1Uyck9Kpvt+zNLJ/Kt57OA
eNWjd5Y3PrB6AG4NPwrw4fF+hwm6WQjmbtSezBm3VfjWypkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBS2n3g6+pBH+cALAfFfk1zSXkyDIzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTQyYTNk
ZTctNTg0Zi00MDEwLWFjYWUtYjc5MzVlZDNmNjAyL2NkOWUxMzBmLTVmMWMtMzAy
NC05ZjExLTczZmZjOWUxYmMyMC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2U0MmEzZGU3LTU4NGYtNDAxMC1hY2Fl
LWI3OTM1ZWQzZjYwMi9lNDJhM2RlNy01ODRmLTQwMTAtYWNhZS1iNzkzNWVkM2Y2
MDIuY3JsMB8GA1UdIwQYMBaAFNBLIFWSnOt25B9qdXQq2e2TLvabMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvZTQyYTNkZTctNTg0Zi00MDEwLWFjYWUtYjc5MzVl
ZDNmNjAyLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMazEjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEApCKbuo55WAODHBlJbmywJKvW3z7WyfPhn8hL2kZzeG9DznZJpD5yYU+XPve7
CvTacIarW/l/uwCY49ziw2HZMShrs2ivr97+FV2IqUZ4AuDgDQfqLmWw0vnuQwDs
O77tLHdnum9SbtTTOlmaVQ4mte5jXUgt02iKAPDTnEOzeXRsZORJDhVPL6NjL4Lq
vOyRT5bUq9wD1Yq5x2sy3iLkhajTjCFqB9s/mxC062jasu4nlT/lByapfmXLnDdh
+cOcFJ5Vx4aKR40FEgYKMhdRBLQbQd4cR3u0Lxgw539PyancHRVEF1abdUgMRjts
mXd5JWAo+QTUOuv/5qkMqXrAMw==
-----END CERTIFICATE-----