Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/4dabbf5a-6345-36b5-b2d8-3aad1a63f20f.roa
File:                     4dabbf5a-6345-36b5-b2d8-3aad1a63f20f.roa (raw, json)
Hash identifier:          y2hxiY5M6TowwCalvtWzbNQ0CRvzRTyBLCYWIOlU+wU=
Subject key identifier:   12:A4:E2:6A:F5:1C:E7:B9:81:F8:69:C6:56:7A:6B:12:7A:D6:03:43
Certificate issuer:       /CN=2b3c022e-4679-4530-ad3a-1df3041efdd2
Certificate serial:       010D0C9F4328576D51CC73C042CFC15B93DB8FE5
Authority key identifier: FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/4dabbf5a-6345-36b5-b2d8-3aad1a63f20f.roa
Signing time:             Sat 22 Apr 2017 04:11:31 +0000
ROA not before:           Tue 20 Nov 2012 05:00:00 +0000
ROA not after:            Sun 20 Nov 2022 05:00:00 +0000
asID:                     395606
IP address blocks:        63.245.222.0/24 maxlen: 24
                          2620:101:80fb::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:5b:93:db:8f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b3c022e-4679-4530-ad3a-1df3041efdd2
        Validity
            Not Before: Nov 20 05:00:00 2012 GMT
            Not After : Nov 20 05:00:00 2022 GMT
        Subject: CN=9a6e0082-34a6-4b94-a646-f70b705442ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bc:00:dd:84:36:cf:f2:8a:7f:bd:46:52:74:
                    72:e6:aa:03:4d:fb:c2:60:67:3b:73:6d:56:2b:42:
                    25:e4:59:e8:9c:1d:cf:f8:db:80:93:3d:26:91:b7:
                    39:16:ed:db:1a:4a:8a:d1:1b:7f:16:93:41:11:1d:
                    09:bc:ea:f0:74:9b:73:eb:3d:2c:68:46:f6:40:52:
                    bb:05:a2:1b:ca:b3:bb:59:95:52:0d:fd:91:b8:5a:
                    64:9a:7d:9c:f3:23:ff:18:42:2a:04:08:dc:c0:17:
                    ee:52:22:84:ba:10:54:30:02:90:a0:ce:bb:83:12:
                    69:8e:c1:4d:6f:7e:0c:fd:01:3a:cb:4a:eb:99:4c:
                    5a:3a:1e:7a:5f:b4:76:8e:41:a1:c4:7f:c3:b8:62:
                    bf:88:7d:e1:5f:31:16:3c:0d:13:b3:25:ab:6f:e8:
                    22:fb:73:aa:bd:20:93:37:e9:9a:6e:1e:ad:ce:e5:
                    7f:c1:f2:3d:29:f3:65:f8:c5:9a:a3:36:86:99:cd:
                    24:04:89:19:51:b4:95:25:b7:23:b6:64:e9:b9:45:
                    de:74:10:11:0e:90:29:42:e4:80:b6:38:70:60:5d:
                    4f:2e:a6:86:ad:1a:9d:31:74:a7:34:cb:fd:45:8d:
                    8b:b2:22:16:75:e5:b1:48:3c:bb:dd:30:69:05:f7:
                    93:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A4:E2:6A:F5:1C:E7:B9:81:F8:69:C6:56:7A:6B:12:7A:D6:03:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/4dabbf5a-6345-36b5-b2d8-3aad1a63f20f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/2b3c022e-4679-4530-ad3a-1df3041efdd2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.222.0/24
                IPv6:
                  2620:101:80fb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:98:66:7c:ff:96:a7:2e:9e:b6:9d:26:3f:cb:41:80:76:20:
         b2:7a:df:e4:03:02:d2:99:71:73:5b:41:9e:c2:5d:8a:0f:ec:
         a1:11:d3:9f:a1:a7:c6:ca:4c:38:e1:17:4d:0b:bc:d1:a1:d2:
         e2:f4:4e:63:11:5d:f0:e0:a1:d3:24:6b:fa:98:4c:75:59:0b:
         09:9d:96:11:eb:72:f3:8b:29:da:d8:46:fd:93:de:9d:67:a7:
         bd:5d:ed:fb:26:e5:1a:6c:02:3c:51:4e:2e:4a:be:f7:0b:10:
         7b:78:61:a6:62:0c:51:af:68:99:70:d2:1d:73:8b:cb:8b:83:
         b0:4b:ba:7a:2c:55:a5:92:c6:f3:f3:fe:fb:ff:8d:88:5b:b5:
         6d:81:12:36:d3:84:35:0c:93:f8:0c:3a:77:13:1f:6b:87:5d:
         5d:a4:97:61:a9:7c:f2:a9:0a:24:da:85:28:df:75:cc:c3:2e:
         16:bf:4b:7f:bc:2e:0e:0e:e8:02:63:fc:71:03:ab:d8:7a:b1:
         a2:fb:27:b2:e9:2d:04:46:7e:de:a6:d7:cd:4f:5e:8b:f3:78:
         0d:0e:f0:58:68:fe:34:77:d8:71:0a:31:92:60:7f:b9:37:13:
         e9:17:8f:c0:34:22:e0:0d:36:49:97:03:25:4a:da:b2:cc:b1:
         ac:22:99:b5
-----BEGIN CERTIFICATE-----
MIIGUDCCBTqgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BW5Pbj+UwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDJiM2MwMjJlLTQ2NzktNDUzMC1hZDNhLTFkZjMwNDFlZmRk
MjAeFw0xMjExMjAwNTAwMDBaFw0yMjExMjAwNTAwMDBaMC8xLTArBgNVBAMTJDlh
NmUwMDgyLTM0YTYtNGI5NC1hNjQ2LWY3MGI3MDU0NDJhYzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMi8AN2ENs/yin+9RlJ0cuaqA037wmBnO3NtVitC
JeRZ6Jwdz/jbgJM9JpG3ORbt2xpKitEbfxaTQREdCbzq8HSbc+s9LGhG9kBSuwWi
G8qzu1mVUg39kbhaZJp9nPMj/xhCKgQI3MAX7lIihLoQVDACkKDOu4MSaY7BTW9+
DP0BOstK65lMWjoeel+0do5BocR/w7hiv4h94V8xFjwNE7Mlq2/oIvtzqr0gkzfp
mm4erc7lf8HyPSnzZfjFmqM2hpnNJASJGVG0lSW3I7Zk6blF3nQQEQ6QKULkgLY4
cGBdTy6mhq0anTF0pzTL/UWNi7IiFnXlsUg8u90waQX3k8cCAwEAAaOCA2YwggNi
MB0GA1UdDgQWBBQSpOJq9RznuYH4acZWemsSetYDQzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmIzYzAy
MmUtNDY3OS00NTMwLWFkM2EtMWRmMzA0MWVmZGQyLzRkYWJiZjVhLTYzNDUtMzZi
NS1iMmQ4LTNhYWQxYTYzZjIwZi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzJiM2MwMjJlLTQ2NzktNDUzMC1hZDNh
LTFkZjMwNDFlZmRkMi8yYjNjMDIyZS00Njc5LTQ1MzAtYWQzYS0xZGYzMDQxZWZk
ZDIuY3JsMB8GA1UdIwQYMBaAFP7Iqxx2xzr1RQ+HRcLLvA0+vPVeMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMmIzYzAyMmUtNDY3OS00NTMwLWFkM2EtMWRmMzA0
MWVmZGQyLmNlcjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAD/13jAPBAIA
AjAJAwcAJiABAYD7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwCwYJKoZIhvcNAQELA4IBAQCjmGZ8/5anLp62nSY/y0GAdiCyet/kAwLSmXFz
W0Gewl2KD+yhEdOfoafGykw44RdNC7zRodLi9E5jEV3w4KHTJGv6mEx1WQsJnZYR
63Lziyna2Eb9k96dZ6e9Xe37JuUabAI8UU4uSr73CxB7eGGmYgxRr2iZcNIdc4vL
i4OwS7p6LFWlksbz8/77/42IW7VtgRI204Q1DJP4DDp3Ex9rh11dpJdhqXzyqQok
2oUo33XMwy4Wv0t/vC4ODugCY/xxA6vYerGi+yey6S0ERn7eptfNT16L83gNDvBY
aP40d9hxCjGSYH+5NxPpF4/ANCLgDTZJlwMlStqyzLGsIpm1
-----END CERTIFICATE-----