Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/92c62876-d631-3b6e-bba2-41e975912656.roa
File:                     92c62876-d631-3b6e-bba2-41e975912656.roa (raw, json)
Hash identifier:          yquGGGoISJkIN6iTlCJ1fq/VrVj+3+zJ7fP9PgGRvyY=
Subject key identifier:   E3:55:73:6E:CE:BB:BC:B6:D0:02:29:ED:7A:16:9A:75:E0:BA:EC:9D
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F4328576D51CC73C042CFC17372246BE6
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/92c62876-d631-3b6e-bba2-41e975912656.roa
Signing time:             Tue 21 Jul 2020 16:10:56 +0000
ROA not before:           Tue 21 Jul 2020 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     9823
IP address blocks:        168.146.98.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:72:24:6b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 21 04:00:00 2020 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=8d868098-bf4d-41e5-bf7b-bb0dd6af8425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:cc:42:91:58:6a:58:4b:bb:74:d3:39:99:
                    9b:35:0a:a1:db:7c:69:b4:fa:91:88:20:cc:18:45:
                    c3:8e:e3:ac:b7:2a:a9:73:cb:fb:9f:8d:f5:e9:bf:
                    39:74:c5:14:fb:88:36:1f:9f:27:b5:1c:22:af:58:
                    15:c1:80:42:b4:4e:8b:ab:41:78:02:cb:a3:b2:42:
                    3b:6d:21:ec:ec:da:b3:37:ac:52:f5:c6:49:d3:5b:
                    ff:0b:ed:2e:29:de:b9:b9:15:bb:1e:78:e8:63:4b:
                    b4:fc:f7:ef:36:fa:5b:5e:4d:ec:87:04:97:6e:80:
                    1f:e6:c1:6e:13:04:c2:3b:7c:d9:f7:40:aa:c8:ed:
                    b1:24:4b:7f:0c:da:25:66:8e:90:75:1a:a3:5b:cd:
                    bc:34:42:8b:20:ad:bb:ff:bb:11:9d:42:13:fb:c1:
                    bc:d3:1d:e5:1b:53:b7:92:95:67:47:db:7a:c6:8d:
                    93:1b:7f:d3:7f:f7:f8:fd:91:d9:92:5e:f7:22:e7:
                    d9:f5:d6:ad:e5:6b:0d:c9:c6:1c:80:e5:cd:e8:7c:
                    c0:87:98:54:39:2b:a7:e9:e1:b2:1f:f0:9e:22:48:
                    18:fb:bc:df:58:ce:ad:0a:66:c3:e7:67:5d:61:45:
                    02:28:af:2e:54:12:00:6c:e2:f4:f9:64:13:16:88:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:55:73:6E:CE:BB:BC:B6:D0:02:29:ED:7A:16:9A:75:E0:BA:EC:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/92c62876-d631-3b6e-bba2-41e975912656.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.146.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:49:68:ee:01:2b:50:ab:f9:64:ea:00:9c:43:60:61:14:27:
         61:7c:4e:ce:03:4f:70:09:e9:3f:22:b5:77:f0:aa:88:be:19:
         fa:50:79:e4:1c:ce:27:3c:75:05:00:e5:c7:68:16:be:95:0b:
         0d:a9:6f:17:fa:64:07:60:da:e8:c9:cf:39:be:87:31:eb:d0:
         bc:18:bf:bc:51:8a:bf:e4:d1:51:de:4b:f9:a5:74:c9:d6:f2:
         92:5f:16:ad:94:59:19:0f:a2:40:81:76:28:8f:ac:fd:42:ee:
         63:91:ca:2b:78:c1:a2:1b:fe:f5:ef:91:f4:3f:c5:c8:80:b4:
         b8:84:7d:6e:8b:87:e5:41:bf:5c:5c:9b:f8:52:f2:53:15:dc:
         92:e9:2b:7e:93:e3:8e:b3:2d:cf:ad:89:61:f9:a3:65:5b:2c:
         50:ea:ba:5b:17:e6:43:92:f6:70:2a:46:0d:c5:b4:0a:19:08:
         62:61:45:e5:ad:76:50:c1:42:f9:dd:68:c6:96:e3:ad:2f:ff:
         49:10:99:c1:18:66:15:9c:2c:13:4f:a6:1c:da:e5:41:41:82:
         87:5d:2d:88:ba:20:b3:a9:6b:3b:13:79:dc:81:66:49:d3:36:
         0a:15:1a:d5:52:94:c4:5d:37:d0:66:1c:6a:34:2b:6b:c0:f3:
         20:ea:85:d3
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc3Ika+YwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2MGQ4
ZTAeFw0yMDA3MjEwNDAwMDBaFw0yMzA3MTIwNDAwMDBaMC8xLTArBgNVBAMTJDhk
ODY4MDk4LWJmNGQtNDFlNS1iZjdiLWJiMGRkNmFmODQyNTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALD6zEKRWGpYS7t00zmZmzUKodt8abT6kYggzBhF
w47jrLcqqXPL+5+N9em/OXTFFPuINh+fJ7UcIq9YFcGAQrROi6tBeALLo7JCO20h
7OzaszesUvXGSdNb/wvtLineubkVux546GNLtPz37zb6W15N7IcEl26AH+bBbhME
wjt82fdAqsjtsSRLfwzaJWaOkHUao1vNvDRCiyCtu/+7EZ1CE/vBvNMd5RtTt5KV
Z0fbesaNkxt/03/3+P2R2ZJe9yLn2fXWreVrDcnGHIDlzeh8wIeYVDkrp+nhsh/w
niJIGPu831jOrQpmw+dnXWFFAiivLlQSAGzi9PlkExaIRDcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTjVXNuzru8ttACKe16Fpp14LrsnTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2Qy
MDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYwZDhlLzkyYzYyODc2LWQ2MzEtM2I2
ZS1iYmEyLTQxZTk3NTkxMjY1Ni5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4
LTk0NmQ0MmY2MGQ4ZS80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBk
OGUuY3JsMB8GA1UdIwQYMBaAFPjzgOQDCC34jmJhqOXRCg6X0XrnMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQy
ZjYwZDhlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaiSYjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAcklo7gErUKv5ZOoAnENgYRQnYXxOzgNPcAnpPyK1d/CqiL4Z+lB55BzOJzx1
BQDlx2gWvpULDalvF/pkB2Da6MnPOb6HMevQvBi/vFGKv+TRUd5L+aV0ydbykl8W
rZRZGQ+iQIF2KI+s/ULuY5HKK3jBohv+9e+R9D/FyIC0uIR9bouH5UG/XFyb+FLy
UxXckukrfpPjjrMtz62JYfmjZVssUOq6WxfmQ5L2cCpGDcW0ChkIYmFF5a12UMFC
+d1oxpbjrS//SRCZwRhmFZwsE0+mHNrlQUGCh10tiLogs6lrOxN53IFmSdM2ChUa
1VKUxF030GYcajQra8DzIOqF0w==
-----END CERTIFICATE-----