Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/fc32d166-1334-3a84-a4b1-aa0adcffbe93.roa
File:                     fc32d166-1334-3a84-a4b1-aa0adcffbe93.roa (raw, json)
Hash identifier:          aRyWggpv1SfKQ/bzwckYcwImBSDOcyRkWQOXwXJEeiA=
Subject key identifier:   FB:BA:3B:58:E1:3E:5F:6C:03:E9:32:73:A7:13:F7:17:04:41:3C:03
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285837C8C4158A020AFF71D0629E00
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/fc32d166-1334-3a84-a4b1-aa0adcffbe93.roa
Signing time:             Thu 18 Oct 2018 04:00:00 +0000
ROA not before:           Thu 18 Oct 2018 04:00:00 +0000
ROA not after:            Thu 02 Feb 2023 05:00:00 +0000
asID:                     14061
IP address blocks:        144.126.252.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:c8:c4:15:8a:02:0a:ff:71:d0:62:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Oct 18 04:00:00 2018 GMT
            Not After : Feb  2 05:00:00 2023 GMT
        Subject: CN=83a6da9c-d341-4116-8ab7-346ffd44f5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3c:4a:89:6f:6c:fe:ea:cc:fc:7e:19:e8:22:
                    14:af:db:42:b7:31:5c:a4:4d:c8:24:50:a8:fd:8d:
                    55:7d:61:f7:e0:72:bd:8f:76:2b:d7:40:9b:cd:cc:
                    df:fe:0e:ce:cc:9f:3c:e5:67:c5:7d:38:3b:5b:cb:
                    ea:6d:2b:8d:13:d1:1e:1e:33:94:9f:0e:d4:42:ba:
                    8f:c7:6f:7c:50:9f:ed:0d:97:a9:65:d0:19:00:06:
                    d8:02:ca:30:76:45:bb:52:ca:62:97:a4:c1:cf:ba:
                    9f:7b:ce:91:62:93:a4:88:a0:4b:7f:d0:8d:85:cd:
                    c6:7e:b3:88:e3:ff:57:be:5b:f6:a8:c8:3a:ab:3d:
                    49:61:c9:df:00:47:d7:ae:be:e7:ed:5d:37:ed:01:
                    15:31:f8:bd:12:9e:1a:3d:20:ff:94:bf:cf:c6:9d:
                    6d:55:d2:c6:b0:c5:88:a4:4d:2f:ff:ca:90:74:1d:
                    1b:4e:43:9d:bb:d9:f2:22:56:3b:72:57:5a:a6:4d:
                    fd:16:e6:e7:1d:09:4e:a1:f8:26:b8:81:3c:30:89:
                    63:fb:e5:b4:a9:4a:3f:45:3a:22:cd:8b:1f:59:e9:
                    2c:a7:14:35:f5:9b:34:0c:1f:97:04:4b:de:ae:9b:
                    05:5f:a2:d9:00:ce:a6:c0:7a:a0:4b:0b:4e:8f:19:
                    3b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BA:3B:58:E1:3E:5F:6C:03:E9:32:73:A7:13:F7:17:04:41:3C:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/fc32d166-1334-3a84-a4b1-aa0adcffbe93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.126.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ef:88:22:e3:e0:41:c8:4d:74:13:42:08:5a:ec:04:fb:77:
         d3:ff:72:a4:ea:c2:b4:57:96:39:14:de:7f:72:5f:dc:21:f1:
         7b:c2:a5:a4:9e:ba:fb:16:e4:1c:f8:b3:f2:3b:43:16:6f:19:
         72:47:59:3f:bd:7f:89:ba:51:cf:37:80:10:35:58:2f:6e:75:
         70:76:5e:50:71:a5:a2:e1:d2:77:32:8d:0f:71:6d:c9:8b:23:
         d2:4b:3d:b4:7a:53:c7:29:7b:6d:3a:64:57:55:06:85:d2:d2:
         51:9e:49:19:31:eb:d1:e3:62:83:a7:44:68:83:e4:49:75:89:
         79:5a:ea:c3:3c:05:1f:61:fe:c6:d1:dd:19:43:0b:f8:9b:bd:
         53:c0:d8:76:96:1c:a9:01:ab:da:0d:35:16:4f:2c:05:39:4e:
         5d:59:ef:73:6d:eb:77:d7:6a:a7:ad:6a:de:3d:30:7d:e1:3c:
         6b:eb:79:eb:3e:b4:18:87:31:df:d6:fd:e2:c4:69:74:28:c5:
         60:2d:96:65:44:54:90:12:99:81:0f:47:7e:5e:e1:75:da:5e:
         f2:a1:e4:1f:82:df:e4:f5:18:ea:e8:ec:8c:12:73:5b:57:74:
         0a:f1:34:7e:52:54:e4:95:a6:82:08:c5:9b:30:b9:d7:51:a6:
         3d:40:fe:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDfIxBWKAgr/cdBingAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTE4MTAxODA0MDAwMFoXDTIzMDIwMjA1MDAwMFowLzEtMCsGA1UEAxMk
ODNhNmRhOWMtZDM0MS00MTE2LThhYjctMzQ2ZmZkNDRmNWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjxKiW9s/urM/H4Z6CIUr9tCtzFcpE3IJFCo
/Y1VfWH34HK9j3Yr10Cbzczf/g7OzJ885WfFfTg7W8vqbSuNE9EeHjOUnw7UQrqP
x298UJ/tDZepZdAZAAbYAsowdkW7Uspil6TBz7qfe86RYpOkiKBLf9CNhc3GfrOI
4/9Xvlv2qMg6qz1JYcnfAEfXrr7n7V037QEVMfi9Ep4aPSD/lL/Pxp1tVdLGsMWI
pE0v/8qQdB0bTkOdu9nyIlY7cldapk39FubnHQlOofgmuIE8MIlj++W0qUo/RToi
zYsfWekspxQ19Zs0DB+XBEverpsFX6LZAM6mwHqgSwtOjxk7twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPu6O1jhPl9sA+kyc6cT9xcEQTwDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZmMzMmQxNjYtMTMzNC0z
YTg0LWE0YjEtYWEwYWRjZmZiZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkH78MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETviCLj4EHITXQTQgha7AT7d9P/cqTqwrRXljkU3n9yX9wh8XvCpaSe
uvsW5Bz4s/I7QxZvGXJHWT+9f4m6Uc83gBA1WC9udXB2XlBxpaLh0ncyjQ9xbcmL
I9JLPbR6U8cpe206ZFdVBoXS0lGeSRkx69HjYoOnRGiD5El1iXla6sM8BR9h/sbR
3RlDC/ibvVPA2HaWHKkBq9oNNRZPLAU5Tl1Z73Nt63fXaqetat49MH3hPGvrees+
tBiHMd/W/eLEaXQoxWAtlmVEVJASmYEPR35e4XXaXvKh5B+C3+T1GOro7IwSc1tX
dArxNH5SVOSVpoIIxZswuddRpj1A/jo=
-----END CERTIFICATE-----