Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e2a8b68d-cc23-381c-ac4d-dbaf9399ffa3.roa
File:                     e2a8b68d-cc23-381c-ac4d-dbaf9399ffa3.roa (raw, json)
Hash identifier:          HrvKfL/0aJ40SqU5hRE7DgAERekJrtvUNYJilRcG9gE=
Subject key identifier:   B1:8B:00:6B:CF:85:10:C2:CB:EB:C7:F9:CA:40:C4:0F:00:7E:D4:F2
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285837144C082DB1579E1713356D80
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e2a8b68d-cc23-381c-ac4d-dbaf9399ffa3.roa
Signing time:             Thu 18 Oct 2018 04:00:00 +0000
ROA not before:           Thu 18 Oct 2018 04:00:00 +0000
ROA not after:            Tue 29 Nov 2022 05:00:00 +0000
asID:                     14061
IP address blocks:        138.68.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:14:4c:08:2d:b1:57:9e:17:13:35:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Oct 18 04:00:00 2018 GMT
            Not After : Nov 29 05:00:00 2022 GMT
        Subject: CN=81c3c9a5-cf89-4486-8c22-d16dbddd774e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:1e:b7:76:d2:03:66:15:63:19:2c:cb:51:
                    d7:ef:50:0e:5e:84:32:98:7e:74:84:b6:1d:86:52:
                    5d:ac:a5:db:17:58:27:f6:f7:9c:4a:f2:1e:4c:2d:
                    8c:7e:e1:90:5a:5b:f0:20:41:b2:6e:47:72:60:2a:
                    70:90:4a:85:cd:37:81:fb:8e:65:27:35:f6:42:16:
                    9b:dc:5d:5e:61:6f:a6:c2:37:bd:2a:6c:31:ea:db:
                    fc:09:98:4f:3f:e2:d3:6c:97:e4:bf:c5:01:fc:e9:
                    85:4e:26:bc:ac:bf:c4:99:e8:d3:13:e3:78:ee:35:
                    1d:f2:7e:fa:92:04:b9:26:34:6d:5e:4f:d6:8a:c1:
                    7b:0b:f2:4c:d0:50:0f:60:a3:4a:9c:59:15:c2:5c:
                    dd:b3:81:41:aa:56:68:fd:f3:57:1b:2f:9c:16:15:
                    67:f0:bc:ab:99:fd:4a:19:aa:e0:50:2e:f7:ab:a0:
                    a6:db:13:67:8f:0a:cf:86:eb:a6:c2:ab:5c:0a:39:
                    51:ee:8c:fa:f0:46:2c:55:3c:8c:23:b9:8a:ec:a9:
                    93:38:bc:1b:66:f1:ab:e3:d7:d8:19:1a:29:cb:34:
                    1e:5f:e0:35:78:f4:24:80:cb:93:86:2b:2c:03:db:
                    f6:42:91:7a:ed:d5:9e:e2:21:0e:8d:e3:60:c1:3a:
                    05:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8B:00:6B:CF:85:10:C2:CB:EB:C7:F9:CA:40:C4:0F:00:7E:D4:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e2a8b68d-cc23-381c-ac4d-dbaf9399ffa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.68.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:3d:db:ab:b4:a7:94:c1:3e:c7:d7:ea:f8:2f:d7:f0:b3:38:
         27:ae:09:d2:32:ac:ce:fb:ee:0a:99:29:ce:4d:a9:23:49:f3:
         5d:84:fb:29:e6:b9:d0:c6:09:a7:a9:64:dd:4a:a1:02:11:d9:
         52:27:10:cf:87:65:04:04:78:a4:06:43:18:76:7c:82:12:35:
         ee:11:fb:b1:05:23:7b:fe:65:7f:c1:19:cf:ef:fa:6b:b7:2a:
         cc:43:ca:25:c1:ad:99:42:d3:74:77:69:23:40:3f:c5:23:c6:
         1f:41:66:02:78:c3:ff:cb:87:1f:e7:30:cf:0c:8a:27:60:bf:
         44:bf:92:02:49:a6:e0:fa:77:ba:4e:a1:e4:e6:7a:74:19:7c:
         43:55:a9:1d:ef:11:03:4c:7b:15:b2:1f:26:94:a5:9c:d4:cf:
         2d:89:92:98:8c:c7:d4:03:6c:b1:88:2e:c9:57:83:7e:57:96:
         ab:67:d0:21:85:1e:fa:6d:64:df:69:0b:db:82:bf:18:e0:7b:
         49:f2:8c:4d:5a:1a:1a:43:ef:a6:6c:32:27:13:28:2e:4c:0c:
         20:0f:3a:27:99:63:31:b1:0d:42:00:76:4a:a6:e9:7a:b3:5f:
         5f:b6:58:f3:fa:30:7d:d1:12:c4:47:e1:9f:13:fa:7b:f5:8c:
         e1:27:47:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDcUTAgtsVeeFxM1bYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTE4MTAxODA0MDAwMFoXDTIyMTEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
ODFjM2M5YTUtY2Y4OS00NDg2LThjMjItZDE2ZGJkZGQ3NzRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEQet3bSA2YVYxksy1HX71AOXoQymH50hLYd
hlJdrKXbF1gn9vecSvIeTC2MfuGQWlvwIEGybkdyYCpwkEqFzTeB+45lJzX2Qhab
3F1eYW+mwje9Kmwx6tv8CZhPP+LTbJfkv8UB/OmFTia8rL/EmejTE+N47jUd8n76
kgS5JjRtXk/WisF7C/JM0FAPYKNKnFkVwlzds4FBqlZo/fNXGy+cFhVn8Lyrmf1K
GargUC73q6Cm2xNnjwrPhuumwqtcCjlR7oz68EYsVTyMI7mK7KmTOLwbZvGr49fY
GRopyzQeX+A1ePQkgMuThissA9v2QpF67dWe4iEOjeNgwToFpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGLAGvPhRDCy+vH+cpAxA8AftTyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZTJhOGI2OGQtY2MyMy0z
ODFjLWFjNGQtZGJhZjkzOTlmZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEikSgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADI926u0p5TBPsfX6vgv1/CzOCeuCdIyrM777gqZKc5NqSNJ812E+ynm
udDGCaepZN1KoQIR2VInEM+HZQQEeKQGQxh2fIISNe4R+7EFI3v+ZX/BGc/v+mu3
KsxDyiXBrZlC03R3aSNAP8Ujxh9BZgJ4w//Lhx/nMM8Miidgv0S/kgJJpuD6d7pO
oeTmenQZfENVqR3vEQNMexWyHyaUpZzUzy2JkpiMx9QDbLGILslXg35Xlqtn0CGF
HvptZN9pC9uCvxjge0nyjE1aGhpD76ZsMicTKC5MDCAPOieZYzGxDUIAdkqm6Xqz
X1+2WPP6MH3REsRH4Z8T+nv1jOEnR9U=
-----END CERTIFICATE-----