Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/12f935d4-175c-3304-bfc3-906f14741b59.roa
File:                     12f935d4-175c-3304-bfc3-906f14741b59.roa (raw, json)
Hash identifier:          gOOyLJ3W5RvzDwrmO6A4Zoecs/yoZFb9Z/bJ+0YV4D4=
Subject key identifier:   7E:4F:FA:CB:33:2D:27:86:BD:3B:09:C0:6E:DB:CF:AB:FE:C2:78:11
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328576D51CC73C042CFC171D08755FA
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/12f935d4-175c-3304-bfc3-906f14741b59.roa
Signing time:             Fri 01 May 2020 13:57:42 +0000
ROA not before:           Fri 01 May 2020 04:00:00 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     47050
IP address blocks:        173.224.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:d0:87:55:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: May  1 04:00:00 2020 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=116a4131-c56d-4cac-940a-be4896e75d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:d9:9e:cf:0b:0f:c5:92:61:87:e3:b4:5f:
                    5b:81:23:6c:70:e1:db:3c:c2:14:d6:f7:f0:ac:c9:
                    c7:f7:ff:a2:29:8e:12:48:dd:4b:41:ac:e8:53:49:
                    aa:64:cc:3c:fd:b4:c7:ab:eb:da:d0:55:73:56:4f:
                    9b:83:9d:4d:db:5b:2c:8a:8a:89:4c:c3:c2:cc:80:
                    ec:8d:23:e1:cd:13:7c:96:19:ef:26:ca:69:9c:20:
                    ff:5b:d6:95:97:c8:c3:df:d3:81:a8:a4:2d:c4:48:
                    d9:26:67:66:f9:a3:2e:0f:c4:bc:d4:72:ba:c0:8c:
                    bf:d6:2c:b3:a4:07:9e:d1:01:b0:41:a7:08:a1:1e:
                    08:91:17:4a:60:2b:0d:5d:9b:11:4e:52:4a:fb:12:
                    54:be:a5:cb:69:c0:d8:cf:ef:37:87:21:b2:70:a6:
                    5c:4c:b5:d4:30:75:47:7e:90:7c:d7:40:86:f1:a0:
                    97:59:d0:87:be:40:4d:77:54:c5:54:ee:cc:d9:fa:
                    6e:22:1f:7a:20:b7:c0:7a:56:42:1b:ef:1f:76:6b:
                    6f:e4:4d:c8:6c:e1:66:39:86:f6:c1:c9:4c:1e:64:
                    49:17:c1:d0:ef:4d:52:32:21:0f:c3:4d:a8:37:84:
                    00:aa:0f:98:e5:20:3f:d9:0c:49:8b:cd:58:95:98:
                    38:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4F:FA:CB:33:2D:27:86:BD:3B:09:C0:6E:DB:CF:AB:FE:C2:78:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/12f935d4-175c-3304-bfc3-906f14741b59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:03:3f:30:67:09:32:cd:70:d5:bc:37:3d:00:86:66:68:e9:
         3c:9a:5f:9b:af:f1:c8:9a:60:ec:9d:d9:48:a7:17:71:ad:21:
         b0:be:6a:a6:ec:ff:61:c1:f6:e8:f4:1b:be:c1:0b:27:a6:78:
         e8:a3:e5:bf:fe:01:e5:de:33:f3:63:b0:10:e8:e7:b7:5c:64:
         e0:0c:27:7c:71:52:35:f5:0a:49:7d:11:e4:41:cf:94:b0:f3:
         42:48:4d:75:71:c7:3e:c9:9c:f9:3c:8f:7c:d5:71:e1:de:14:
         96:f2:66:81:6b:11:9b:8e:13:bd:55:84:70:a2:4d:c7:fe:f3:
         85:98:4b:73:2e:54:e1:44:57:d0:c7:e1:b1:83:da:4b:f9:8b:
         95:40:a5:6c:ff:13:62:1c:2e:a9:c5:36:cc:49:6a:71:9c:86:
         88:2d:ea:84:ee:bf:e9:f1:61:c4:c4:3e:cc:7f:7c:05:3f:15:
         de:04:ea:2a:f2:b5:22:3c:73:ca:47:36:29:ff:3c:f5:f0:d2:
         a5:86:71:2b:c0:94:f1:22:15:a3:d7:49:b4:5b:5d:d9:e0:b2:
         96:10:de:e4:71:cc:13:1f:33:bc:30:8f:a0:5b:e2:7f:0e:bd:
         d6:99:5a:4e:83:f6:56:66:61:75:06:9f:69:eb:73:f5:38:bc:
         31:59:24:e5
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcdCHVfowCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDBiNWYyZGFmLTdkN2EtNDg0OC1iYmQyLTA1NWY0M2FlODk3
MDAeFw0yMDA1MDEwNDAwMDBaFw0yMjA4MDQwNDAwMDBaMC8xLTArBgNVBAMTJDEx
NmE0MTMxLWM1NmQtNGNhYy05NDBhLWJlNDg5NmU3NWQ3ZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMNc2Z7PCw/FkmGH47RfW4EjbHDh2zzCFNb38KzJ
x/f/oimOEkjdS0Gs6FNJqmTMPP20x6vr2tBVc1ZPm4OdTdtbLIqKiUzDwsyA7I0j
4c0TfJYZ7ybKaZwg/1vWlZfIw9/TgaikLcRI2SZnZvmjLg/EvNRyusCMv9Yss6QH
ntEBsEGnCKEeCJEXSmArDV2bEU5SSvsSVL6ly2nA2M/vN4chsnCmXEy11DB1R36Q
fNdAhvGgl1nQh75ATXdUxVTuzNn6biIfeiC3wHpWQhvvH3Zrb+RNyGzhZjmG9sHJ
TB5kSRfB0O9NUjIhD8NNqDeEAKoPmOUgP9kMSYvNWJWYOI8CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBR+T/rLMy0nhr07CcBu28+r/sJ4ETCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGI1ZjJk
YWYtN2Q3YS00ODQ4LWJiZDItMDU1ZjQzYWU4OTcwLzEyZjkzNWQ0LTE3NWMtMzMw
NC1iZmMzLTkwNmYxNDc0MWI1OS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzBiNWYyZGFmLTdkN2EtNDg0OC1iYmQy
LTA1NWY0M2FlODk3MC8wYjVmMmRhZi03ZDdhLTQ4NDgtYmJkMi0wNTVmNDNhZTg5
NzAuY3JsMB8GA1UdIwQYMBaAFDGSBXc8nc6JzpXeUJevQwEeVm/iMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMGI1ZjJkYWYtN2Q3YS00ODQ4LWJiZDItMDU1ZjQz
YWU4OTcwLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK3gUzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAHQM/MGcJMs1w1bw3PQCGZmjpPJpfm6/xyJpg7J3ZSKcXca0hsL5qpuz/YcH2
6PQbvsELJ6Z46KPlv/4B5d4z82OwEOjnt1xk4AwnfHFSNfUKSX0R5EHPlLDzQkhN
dXHHPsmc+TyPfNVx4d4UlvJmgWsRm44TvVWEcKJNx/7zhZhLcy5U4URX0MfhsYPa
S/mLlUClbP8TYhwuqcU2zElqcZyGiC3qhO6/6fFhxMQ+zH98BT8V3gTqKvK1Ijxz
ykc2Kf889fDSpYZxK8CU8SIVo9dJtFtd2eCylhDe5HHMEx8zvDCPoFvifw691pla
ToP2VmZhdQafaetz9Ti8MVkk5Q==
-----END CERTIFICATE-----