Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6ad88730-929b-3345-b5b8-cf59a768e1ab.roa
File:                     6ad88730-929b-3345-b5b8-cf59a768e1ab.roa (raw, json)
Hash identifier:          4SLI+I+ar0je5OQWs+76WSxHgxUMqifs7P8NJsLfXXg=
Subject key identifier:   15:3F:D4:ED:42:AD:58:9A:D4:9E:F5:D0:30:7A:6A:14:D8:DC:57:5B
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285837D2ED00B9E74F73409BAE4600
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6ad88730-929b-3345-b5b8-cf59a768e1ab.roa
Signing time:             Mon 16 Sep 2019 04:00:00 +0000
ROA not before:           Mon 16 Sep 2019 04:00:00 +0000
ROA not after:            Mon 06 Feb 2023 05:00:00 +0000
asID:                     396356
IP address blocks:        64.64.117.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d2:ed:00:b9:e7:4f:73:40:9b:ae:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep 16 04:00:00 2019 GMT
            Not After : Feb  6 05:00:00 2023 GMT
        Subject: CN=58ce394b-90ea-4ab7-9915-02a1d4cb202f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:ec:50:1b:76:cb:f1:a4:cc:11:31:3c:07:
                    ef:fe:9d:5e:45:53:fb:70:54:ce:ad:ec:9a:2b:f7:
                    8e:1e:68:8f:a4:eb:0a:4f:24:2c:30:8a:05:8c:0b:
                    44:67:b7:3a:06:49:3a:1b:51:ac:89:a4:e3:4f:74:
                    ad:58:0e:e3:dd:f2:ba:4c:4d:a5:d2:7f:d1:8f:b7:
                    65:fb:5f:c1:75:76:ab:da:03:b4:f2:58:32:70:64:
                    f5:2a:79:aa:9b:ed:fd:b4:37:38:ff:a0:c6:b1:9e:
                    8a:a9:5b:39:4e:f7:8a:c6:6a:76:02:8c:90:bf:71:
                    8a:2b:db:23:f1:57:63:24:ae:73:aa:fd:5d:de:ac:
                    1f:09:fa:bc:49:f4:06:bc:a4:bc:4d:a5:54:cf:65:
                    fd:bf:19:6c:4f:0f:49:cc:d4:62:4b:04:52:f3:c7:
                    2f:f9:e8:7f:e9:42:62:b3:15:44:66:62:2b:cc:33:
                    3e:c5:90:ad:c5:bf:49:f5:69:72:e5:a8:8f:c1:cf:
                    0a:bd:6d:0a:cc:7a:ec:71:0c:fe:6b:22:26:2b:6a:
                    2b:86:0c:88:bb:4b:f8:40:b0:e4:98:77:77:df:77:
                    0c:b4:4d:7b:fb:58:f1:ca:76:b5:cf:52:78:2f:03:
                    1f:85:31:55:a5:de:1d:d3:7d:7a:ea:12:bd:1d:8d:
                    9b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3F:D4:ED:42:AD:58:9A:D4:9E:F5:D0:30:7A:6A:14:D8:DC:57:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6ad88730-929b-3345-b5b8-cf59a768e1ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:3f:af:ab:40:85:40:61:c9:0e:0a:90:bb:a4:68:03:75:8b:
         d8:a8:fd:25:3e:ca:e6:94:8c:46:20:99:33:6a:58:f4:d8:60:
         3c:84:ae:ff:80:40:34:99:8e:04:34:9a:7f:1b:7e:16:46:72:
         04:65:93:ed:7f:30:b9:13:3d:8a:cd:3b:b2:07:83:87:db:d8:
         ec:46:a5:05:a7:d7:32:83:53:cd:f3:fc:e4:7e:52:6a:bf:d1:
         e9:f9:20:01:42:97:6e:6d:6b:57:55:6b:28:9b:65:de:c6:92:
         44:61:62:9b:c0:44:d4:d0:93:d4:1f:f3:a0:3b:83:56:4b:99:
         16:5f:4f:e1:51:ab:37:46:0f:54:a9:2e:fd:ad:7d:d1:44:ce:
         93:c0:2d:71:e8:40:10:a9:04:3e:91:77:5c:95:57:b1:e2:ee:
         62:20:79:7d:88:5e:9c:ea:b2:9f:0f:dc:17:86:4e:64:c0:7e:
         9b:24:db:67:73:bb:dc:4d:c5:c2:1f:16:c5:57:09:87:43:6e:
         3f:6f:fe:a9:15:8a:fe:2e:fd:2f:82:a2:fc:8a:63:34:b8:e4:
         a1:47:83:25:62:d7:aa:42:0f:a8:82:08:72:2a:93:a0:af:1e:
         d3:bb:85:5a:97:24:43:4d:dd:91:7e:0f:c1:d3:07:be:a9:f1:
         69:7c:96:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDfS7QC5509zQJuuRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTE5MDkxNjA0MDAwMFoXDTIzMDIwNjA1MDAwMFowLzEtMCsGA1UEAxMk
NThjZTM5NGItOTBlYS00YWI3LTk5MTUtMDJhMWQ0Y2IyMDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwzsUBt2y/GkzBExPAfv/p1eRVP7cFTOreya
K/eOHmiPpOsKTyQsMIoFjAtEZ7c6Bkk6G1GsiaTjT3StWA7j3fK6TE2l0n/Rj7dl
+1/BdXar2gO08lgycGT1Knmqm+39tDc4/6DGsZ6KqVs5TveKxmp2AoyQv3GKK9sj
8VdjJK5zqv1d3qwfCfq8SfQGvKS8TaVUz2X9vxlsTw9JzNRiSwRS88cv+eh/6UJi
sxVEZmIrzDM+xZCtxb9J9Wly5aiPwc8KvW0KzHrscQz+ayImK2orhgyIu0v4QLDk
mHd333cMtE17+1jxyna1z1J4LwMfhTFVpd4d03166hK9HY2bMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBU/1O1CrVia1J710DB6ahTY3FdbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNmFkODg3MzAtOTI5Yi0z
MzQ1LWI1YjgtY2Y1OWE3NjhlMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEB1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABg/r6tAhUBhyQ4KkLukaAN1i9io/SU+yuaUjEYgmTNqWPTYYDyErv+A
QDSZjgQ0mn8bfhZGcgRlk+1/MLkTPYrNO7IHg4fb2OxGpQWn1zKDU83z/OR+Umq/
0en5IAFCl25ta1dVayibZd7GkkRhYpvARNTQk9Qf86A7g1ZLmRZfT+FRqzdGD1Sp
Lv2tfdFEzpPALXHoQBCpBD6Rd1yVV7Hi7mIgeX2IXpzqsp8P3BeGTmTAfpsk22dz
u9xNxcIfFsVXCYdDbj9v/qkViv4u/S+CovyKYzS45KFHgyVi16pCD6iCCHIqk6Cv
HtO7hVqXJENN3ZF+D8HTB76p8Wl8lhg=
-----END CERTIFICATE-----