Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/d247712c-7fde-3cea-a660-b57ef10cd25a.roa
File:                     d247712c-7fde-3cea-a660-b57ef10cd25a.roa (raw, json)
Hash identifier:          DOV2+RuzI/HtgLVe24bQ5o5qbublNJVWaxIq312gr24=
Subject key identifier:   83:88:B7:18:F5:FA:6B:82:FB:69:D0:1F:B2:F6:19:F9:0C:E1:CB:EC
Certificate issuer:       /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Certificate serial:       010D0C9F4328576D51CC73C042CFC171BD68F99A
Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/d247712c-7fde-3cea-a660-b57ef10cd25a.roa
Signing time:             Mon 27 Apr 2020 20:51:45 +0000
ROA not before:           Tue 10 Sep 2019 04:00:00 +0000
ROA not after:            Sun 31 Jul 2022 04:00:00 +0000
asID:                     7057
IP address blocks:        104.254.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:bd:68:f9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
        Validity
            Not Before: Sep 10 04:00:00 2019 GMT
            Not After : Jul 31 04:00:00 2022 GMT
        Subject: CN=0d73ce99-71ae-4df9-8957-c511803f434a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:b5:d5:7a:9d:35:c0:bc:d9:b8:d5:42:b8:
                    d8:bd:e5:f1:c8:0f:fa:c2:5c:07:d2:f5:d9:ab:95:
                    56:ab:5d:53:9a:bd:34:f8:e2:ba:9e:6b:e5:40:46:
                    ec:d2:41:0d:f4:55:6a:0b:91:35:5f:92:f1:e8:ae:
                    9e:16:10:0b:48:27:ce:58:dd:38:0e:d8:7b:af:f0:
                    ff:a4:89:6d:cd:ed:74:e1:d9:e3:58:5f:c1:b1:b9:
                    77:19:04:1b:95:50:bf:f5:c1:d2:c7:e2:e1:6b:ee:
                    5a:17:69:89:49:e2:2c:57:6c:79:9c:b2:33:2e:f3:
                    5b:fa:e8:2d:17:38:6b:01:06:f2:bf:72:41:b0:1c:
                    99:25:f7:1c:01:d8:5a:64:24:7f:e4:71:4b:21:53:
                    d9:02:87:74:24:72:ee:7e:ad:2b:c3:57:e4:06:79:
                    9b:12:c5:83:67:60:a8:c5:99:93:c5:d6:1b:bf:ac:
                    63:78:6b:20:e8:18:b1:9f:7b:71:e9:f1:01:e3:a2:
                    8b:09:1f:2a:e0:ae:63:2c:ad:83:0f:f3:ff:f9:bd:
                    4c:06:17:dc:ed:74:b0:ea:93:2a:a1:88:2a:ba:ab:
                    a3:88:23:d8:d2:6b:d8:2b:2d:ec:f1:c2:95:0b:81:
                    3b:34:14:59:b8:83:02:61:ff:75:14:4b:99:8c:07:
                    54:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:88:B7:18:F5:FA:6B:82:FB:69:D0:1F:B2:F6:19:F9:0C:E1:CB:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/d247712c-7fde-3cea-a660-b57ef10cd25a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl

            X509v3 Authority Key Identifier:
                keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4c:3d:7f:3e:d0:a2:1e:35:9d:4f:60:bb:57:f4:a9:0d:a7:
         50:aa:fd:e7:7d:f1:05:97:90:16:b7:f7:e4:d2:58:04:6f:2a:
         24:af:e1:c2:26:b0:90:53:66:c9:63:62:8c:bb:05:07:93:4f:
         c1:f6:b2:21:09:68:c3:15:4c:d5:f0:d1:1c:22:68:26:a6:11:
         70:94:9f:cd:ec:ab:10:1f:c6:28:2a:3a:72:29:08:1e:6a:11:
         40:57:df:33:38:e7:c2:b9:9d:43:7d:c8:5d:f8:c3:6f:a3:fb:
         22:a1:fb:81:3f:6e:96:70:fe:b9:8c:b4:65:99:f1:28:66:10:
         80:75:b8:d1:95:a9:c2:04:e2:72:a7:eb:94:33:09:d3:a9:c8:
         34:1b:0f:a1:83:fc:d0:cb:07:9c:32:78:46:03:16:ca:4a:51:
         e0:f4:03:d2:77:bf:67:a5:53:16:4b:5d:88:5e:b1:7c:cb:e8:
         79:b5:81:f5:0e:f6:0e:d4:16:af:18:b1:08:bc:ff:b2:27:07:
         c8:ef:28:c2:f3:ad:d3:5b:54:c8:4f:52:4b:1f:bd:62:15:a4:
         6b:2f:af:70:1e:bd:cc:b0:28:83:a9:1a:26:d6:b0:cf:3a:56:
         cd:80:a5:6a:0c:c6:05:16:e9:b6:7e:d6:0b:55:aa:3b:c1:b5:
         f0:b3:c2:3b
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcb1o+ZowCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0LTg0MzFkYzkyMzlj
ODAeFw0xOTA5MTAwNDAwMDBaFw0yMjA3MzEwNDAwMDBaMC8xLTArBgNVBAMTJDBk
NzNjZTk5LTcxYWUtNGRmOS04OTU3LWM1MTE4MDNmNDM0YTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM3EtdV6nTXAvNm41UK42L3l8cgP+sJcB9L12auV
VqtdU5q9NPjiup5r5UBG7NJBDfRVaguRNV+S8eiunhYQC0gnzljdOA7Ye6/w/6SJ
bc3tdOHZ41hfwbG5dxkEG5VQv/XB0sfi4WvuWhdpiUniLFdseZyyMy7zW/roLRc4
awEG8r9yQbAcmSX3HAHYWmQkf+RxSyFT2QKHdCRy7n6tK8NX5AZ5mxLFg2dgqMWZ
k8XWG7+sY3hrIOgYsZ97cenxAeOiiwkfKuCuYyytgw/z//m9TAYX3O10sOqTKqGI
Krqro4gj2NJr2Cst7PHClQuBOzQUWbiDAmH/dRRLmYwHVO0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSDiLcY9fprgvtp0B+y9hn5DOHL7DCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU3YmMy
OGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIzOWM4L2QyNDc3MTJjLTdmZGUtM2Nl
YS1hNjYwLWI1N2VmMTBjZDI1YS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0
LTg0MzFkYzkyMzljOC8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5
YzguY3JsMB8GA1UdIwQYMBaAFE9oRgjswPw1nF1NcXfrydDKgRtUMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRj
OTIzOWM4LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmj+CDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAQEw9fz7Qoh41nU9gu1f0qQ2nUKr9533xBZeQFrf35NJYBG8qJK/hwiawkFNm
yWNijLsFB5NPwfayIQlowxVM1fDRHCJoJqYRcJSfzeyrEB/GKCo6cikIHmoRQFff
MzjnwrmdQ33IXfjDb6P7IqH7gT9ulnD+uYy0ZZnxKGYQgHW40ZWpwgTicqfrlDMJ
06nINBsPoYP80MsHnDJ4RgMWykpR4PQD0ne/Z6VTFktdiF6xfMvoebWB9Q72DtQW
rxixCLz/sicHyO8owvOt01tUyE9SSx+9YhWkay+vcB69zLAog6kaJtawzzpWzYCl
agzGBRbptn7WC1WqO8G18LPCOw==
-----END CERTIFICATE-----