Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/72caf666-a025-3053-8cdf-9cf026ffe147.roa
File:                     72caf666-a025-3053-8cdf-9cf026ffe147.roa (raw, json)
Hash identifier:          vYBJfq0ffsjklLqtFY+mhaBbBwE0534pqbwodJqmmI8=
Subject key identifier:   04:B7:80:95:33:DE:D3:3B:55:81:2A:D8:F0:44:3C:D3:3F:79:D2:3D
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1729F3E077E
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/72caf666-a025-3053-8cdf-9cf026ffe147.roa
Signing time:             Wed 10 Jun 2020 17:19:02 +0000
ROA not before:           Tue 25 Sep 2018 04:00:00 +0000
ROA not after:            Tue 13 Sep 2022 04:00:00 +0000
asID:                     20473
IP address blocks:        137.220.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:9f:3e:07:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep 25 04:00:00 2018 GMT
            Not After : Sep 13 04:00:00 2022 GMT
        Subject: CN=302094fd-acdd-47bc-9d06-4b4a4653f0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:28:54:e3:4e:b3:bf:32:0e:8a:31:e2:8e:
                    bc:f2:c8:f8:f6:09:60:f6:de:f2:0c:a9:6c:94:02:
                    31:e8:7f:a8:04:c2:05:91:d8:29:f1:01:71:a5:d1:
                    30:22:62:94:52:14:7d:ea:ec:b1:af:53:19:38:95:
                    ee:a9:1c:85:9c:55:c7:9a:9c:7b:5a:e4:9a:cb:f8:
                    6a:3d:d7:b9:3b:df:90:81:bb:a8:1a:96:19:a8:5e:
                    48:99:38:df:31:09:dd:a8:b4:10:af:d8:a0:8b:9a:
                    b2:67:79:04:9a:6d:17:54:92:01:5e:be:50:1d:72:
                    19:29:f1:ad:de:54:24:b9:2a:2b:92:b9:15:a2:77:
                    f9:ec:5e:e0:c0:d9:fb:c5:57:b3:6d:be:da:4c:d2:
                    a8:18:b5:da:52:fe:35:30:ed:1d:bd:12:c3:26:31:
                    9f:e2:5b:5a:a7:45:19:53:ad:c4:7b:57:6d:5e:ff:
                    e4:60:d1:5f:cd:52:ba:f5:9f:1e:f7:ff:c1:aa:9d:
                    49:45:09:4c:d8:9b:43:aa:72:2a:9a:95:8a:df:fd:
                    ef:64:bf:90:98:50:b6:22:d5:24:95:b2:fd:73:e2:
                    a9:3a:7d:e5:b1:80:21:ab:ea:d9:16:9e:52:cb:14:
                    0f:50:22:da:68:7c:e4:4c:6e:b3:61:ed:ef:c8:f7:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B7:80:95:33:DE:D3:3B:55:81:2A:D8:F0:44:3C:D3:3F:79:D2:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/72caf666-a025-3053-8cdf-9cf026ffe147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.220.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e9:53:b8:b4:52:bb:78:8c:86:fa:71:75:d3:e6:e8:09:75:
         b4:e7:5e:e1:27:ca:4e:37:28:8d:d7:26:e9:5b:d7:66:6f:46:
         47:f3:90:d1:03:9d:43:33:4b:02:38:72:83:7b:f1:f4:ce:91:
         ca:be:5a:1c:bf:72:01:b8:36:c4:e8:59:66:3f:e7:8d:c1:e4:
         35:33:31:88:20:00:36:89:08:50:26:8b:c7:87:8c:9e:bf:94:
         d7:1a:a0:27:fe:2e:44:ea:25:8e:05:e4:60:04:16:1c:a6:57:
         f7:f9:d2:92:ff:4e:4e:b7:56:d3:4f:a4:8c:c8:fc:e7:5a:a3:
         9b:0c:47:db:ed:dc:61:c0:68:88:70:27:3e:bc:c0:e6:f5:60:
         ae:19:e4:09:af:b9:c3:b3:4d:bd:1b:ea:84:b8:6c:3e:ef:8a:
         99:38:06:17:41:d3:20:26:a0:9a:da:c6:54:df:06:aa:40:b0:
         38:03:85:5b:0c:d7:57:61:30:8b:c0:14:6e:5c:5c:0e:90:4c:
         90:7e:a8:d3:d5:36:00:60:1f:d1:58:f2:f7:9c:2b:c9:d3:38:
         c2:48:3a:4e:49:61:63:4a:41:9e:72:b1:92:9c:cb:23:08:11:
         17:e4:59:84:5e:1a:4b:bc:4e:3f:26:e3:39:68:27:b1:a4:9b:
         84:1f:57:6d
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcp8+B34wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDYzODE3NzM2LTdlNWUtNDc0MC04ZWUxLWFjNmYyMzE3ZjA4
ZDAeFw0xODA5MjUwNDAwMDBaFw0yMjA5MTMwNDAwMDBaMC8xLTArBgNVBAMTJDMw
MjA5NGZkLWFjZGQtNDdiYy05ZDA2LTRiNGE0NjUzZjBkODCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMzXKFTjTrO/Mg6KMeKOvPLI+PYJYPbe8gypbJQC
Meh/qATCBZHYKfEBcaXRMCJilFIUferssa9TGTiV7qkchZxVx5qce1rkmsv4aj3X
uTvfkIG7qBqWGaheSJk43zEJ3ai0EK/YoIuasmd5BJptF1SSAV6+UB1yGSnxrd5U
JLkqK5K5FaJ3+exe4MDZ+8VXs22+2kzSqBi12lL+NTDtHb0SwyYxn+JbWqdFGVOt
xHtXbV7/5GDRX81SuvWfHvf/waqdSUUJTNibQ6pyKpqVit/972S/kJhQtiLVJJWy
/XPiqTp95bGAIavq2RaeUssUD1Ai2mh85Exus2Ht78j3VG0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQEt4CVM97TO1WBKtjwRDzTP3nSPTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjM4MTc3
MzYtN2U1ZS00NzQwLThlZTEtYWM2ZjIzMTdmMDhkLzcyY2FmNjY2LWEwMjUtMzA1
My04Y2RmLTljZjAyNmZmZTE0Ny5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzYzODE3NzM2LTdlNWUtNDc0MC04ZWUx
LWFjNmYyMzE3ZjA4ZC82MzgxNzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZmMjMxN2Yw
OGQuY3JsMB8GA1UdIwQYMBaAFLX0/4HL4KAm9RI1p7NEc9CJT/x3MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvNjM4MTc3MzYtN2U1ZS00NzQwLThlZTEtYWM2ZjIz
MTdmMDhkLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBYncIDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEASelTuLRSu3iMhvpxddPm6Al1tOde4SfKTjcojdcm6VvXZm9GR/OQ0QOdQzNL
Ajhyg3vx9M6Ryr5aHL9yAbg2xOhZZj/njcHkNTMxiCAANokIUCaLx4eMnr+U1xqg
J/4uROoljgXkYAQWHKZX9/nSkv9OTrdW00+kjMj851qjmwxH2+3cYcBoiHAnPrzA
5vVgrhnkCa+5w7NNvRvqhLhsPu+KmTgGF0HTICagmtrGVN8GqkCwOAOFWwzXV2Ew
i8AUblxcDpBMkH6o09U2AGAf0Vjy95wrydM4wkg6TklhY0pBnnKxkpzLIwgRF+RZ
hF4aS7xOPybjOWgnsaSbhB9XbQ==
-----END CERTIFICATE-----