Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/8586194c-0724-3991-8619-28d5d45f61c6.roa
File:                     8586194c-0724-3991-8619-28d5d45f61c6.roa (raw, json)
Hash identifier:          N/pYzuU5DTBUXBXyfbS2BG98o6QmUBCT4vvUAA/bJBo=
Subject key identifier:   4E:E2:38:3A:DB:DA:98:99:0F:2B:32:2A:19:80:67:6C:98:64:3C:76
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285837144CF370045C187F10EDEFA8
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/8586194c-0724-3991-8619-28d5d45f61c6.roa
Signing time:             Thu 18 Oct 2018 04:00:00 +0000
ROA not before:           Thu 18 Oct 2018 04:00:00 +0000
ROA not after:            Tue 29 Nov 2022 05:00:00 +0000
asID:                     14061
IP address blocks:        138.68.204.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:14:4c:f3:70:04:5c:18:7f:10:ed:ef:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Oct 18 04:00:00 2018 GMT
            Not After : Nov 29 05:00:00 2022 GMT
        Subject: CN=7754e770-f334-4a88-ae95-cc6563db9729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:20:6d:15:99:88:c1:bd:7d:81:f5:85:62:49:
                    8c:41:25:8e:e7:7c:f7:32:ad:3a:7d:21:7b:07:f9:
                    a5:c4:a9:52:1a:86:a0:b9:bb:77:cc:8b:b5:a7:1c:
                    19:45:18:6b:54:4e:ef:31:df:84:54:1a:39:53:5f:
                    9f:df:1a:80:b4:00:6a:c3:a4:dd:f3:ce:98:7d:88:
                    0c:7c:39:ab:43:07:70:7b:16:e6:c9:df:47:ac:e2:
                    99:00:5e:24:9c:9d:34:01:92:27:1a:82:84:e2:5d:
                    88:3b:3b:7c:f9:1a:7a:d6:e1:f3:d3:2e:a3:a4:9d:
                    2f:e7:17:57:09:0c:29:79:ad:29:37:00:a7:86:24:
                    6e:41:0d:1b:00:56:c5:ec:37:1b:b0:0e:62:b3:1d:
                    d0:b1:05:29:a9:df:2c:a6:13:0a:d7:41:34:08:8c:
                    35:c8:e4:35:ab:15:24:78:ce:25:27:fb:90:1c:58:
                    b8:38:2c:7e:5f:92:88:64:9b:3e:2a:4c:91:43:20:
                    6d:9f:33:e9:b5:d3:28:0a:16:c1:cd:da:ab:1a:87:
                    3c:cf:ae:7d:48:98:5b:f9:86:88:3a:d6:82:71:9d:
                    fe:80:ec:e1:51:59:b3:eb:36:80:5d:84:3c:ca:09:
                    d7:2b:b6:52:15:a0:9b:cd:1a:91:0a:ba:a6:c6:ae:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E2:38:3A:DB:DA:98:99:0F:2B:32:2A:19:80:67:6C:98:64:3C:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/8586194c-0724-3991-8619-28d5d45f61c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.68.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:82:12:f7:19:bf:86:09:4d:00:a9:00:5c:11:d6:6a:85:87:
         72:0e:3d:bc:f3:70:6c:f7:34:b1:4f:77:ee:f8:97:34:eb:f6:
         5d:8e:6d:7f:b0:85:c8:3e:c5:61:5b:af:c1:76:fd:49:fe:a8:
         b7:45:01:6e:02:34:3d:12:8d:7d:62:8f:87:4d:cd:e3:1c:55:
         4f:a7:b4:67:5f:5c:20:1b:2b:fc:77:32:ad:78:ff:28:5b:3a:
         3b:5b:30:67:9c:d7:6a:92:6a:8e:46:40:16:89:07:ac:de:48:
         12:a0:9a:1d:13:4a:06:56:bf:be:38:81:cf:b0:84:93:62:03:
         a0:f9:a8:2c:7f:69:40:56:1d:04:7d:b5:85:b6:da:79:fe:9f:
         e4:02:ea:d5:b7:7d:a0:6d:52:ab:26:30:11:ed:01:23:fe:9e:
         63:22:d5:43:e9:4b:94:3d:e7:ec:98:bc:c8:2b:a9:13:c7:b9:
         8a:0f:1f:db:3f:db:9e:50:c2:d5:a8:dc:43:0b:79:0e:23:89:
         a1:a6:7f:0f:0f:a4:2b:07:56:b4:b8:77:db:0c:77:35:0b:5c:
         f8:cb:70:e9:22:f3:91:cc:16:70:f6:a8:4b:51:8a:6e:92:8c:
         10:74:92:4d:6c:0f:9d:c6:0c:a4:12:5f:4a:6b:6e:ba:86:59:
         df:3d:ab:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDcUTPNwBFwYfxDt76gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTE4MTAxODA0MDAwMFoXDTIyMTEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
Nzc1NGU3NzAtZjMzNC00YTg4LWFlOTUtY2M2NTYzZGI5NzI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCBtFZmIwb19gfWFYkmMQSWO53z3Mq06fSF7
B/mlxKlSGoagubt3zIu1pxwZRRhrVE7vMd+EVBo5U1+f3xqAtABqw6Td886YfYgM
fDmrQwdwexbmyd9HrOKZAF4knJ00AZInGoKE4l2IOzt8+Rp61uHz0y6jpJ0v5xdX
CQwpea0pNwCnhiRuQQ0bAFbF7DcbsA5isx3QsQUpqd8sphMK10E0CIw1yOQ1qxUk
eM4lJ/uQHFi4OCx+X5KIZJs+KkyRQyBtnzPptdMoChbBzdqrGoc8z659SJhb+YaI
OtaCcZ3+gOzhUVmz6zaAXYQ8ygnXK7ZSFaCbzRqRCrqmxq4lvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE7iODrb2piZDysyKhmAZ2yYZDx2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvODU4NjE5NGMtMDcyNC0z
OTkxLTg2MTktMjhkNWQ0NWY2MWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCikTMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIuCEvcZv4YJTQCpAFwR1mqFh3IOPbzzcGz3NLFPd+74lzTr9l2ObX+w
hcg+xWFbr8F2/Un+qLdFAW4CND0SjX1ij4dNzeMcVU+ntGdfXCAbK/x3Mq14/yhb
OjtbMGec12qSao5GQBaJB6zeSBKgmh0TSgZWv744gc+whJNiA6D5qCx/aUBWHQR9
tYW22nn+n+QC6tW3faBtUqsmMBHtASP+nmMi1UPpS5Q95+yYvMgrqRPHuYoPH9s/
255QwtWo3EMLeQ4jiaGmfw8PpCsHVrS4d9sMdzULXPjLcOki85HMFnD2qEtRim6S
jBB0kk1sD53GDKQSX0prbrqGWd89q7g=
-----END CERTIFICATE-----