Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/09805674-1e1c-3472-9016-f1d228429a4b.roa
File:                     09805674-1e1c-3472-9016-f1d228429a4b.roa (raw, json)
Hash identifier:          OOsGHEHdcf1rofzB9JT08z+ZfOAJ74bLUSaDrZ9vaKI=
Subject key identifier:   62:DC:AB:10:54:E1:38:C2:87:53:78:6D:88:E8:9A:67:36:85:8A:D9
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       5F3C759F6930E451EB78F62C666551B850A4E2
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/09805674-1e1c-3472-9016-f1d228429a4b.roa
Signing time:             Wed 19 Sep 2012 19:22:49 +0000
ROA not before:           Sat 15 Sep 2012 04:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     53535
IP address blocks:        199.180.180.0/22 maxlen: 24
                          2001:500:f0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3c:75:9f:69:30:e4:51:eb:78:f6:2c:66:65:51:b8:50:a4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: Sep 15 04:00:00 2012 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=57cacd34-6f84-4c51-8db9-c3e306a9e8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e5:79:24:a5:fc:c4:9a:5f:c6:d4:95:84:91:
                    be:81:d0:da:e5:b2:ce:bd:3d:82:3d:7e:49:02:af:
                    06:a0:a6:fc:a5:1d:28:24:f9:52:ba:76:5b:3c:c2:
                    ef:56:68:83:27:48:3d:14:f8:26:97:d2:16:42:08:
                    4e:3f:da:03:e7:36:7e:6c:d5:ef:61:53:37:c5:d8:
                    69:ef:ac:55:c3:5a:33:7e:e8:0a:d1:bf:e2:c7:82:
                    2e:a6:ce:f6:81:fc:7c:47:24:b7:0a:c8:f8:7e:49:
                    34:64:b9:6b:b5:9a:d1:d7:b0:17:59:6a:66:9c:c8:
                    dc:88:04:e0:e3:fc:4f:31:3b:d4:63:92:c1:c9:04:
                    ad:28:0f:7c:bc:e0:a0:11:78:86:03:c4:84:db:76:
                    88:98:c9:5b:b7:5f:af:cf:4e:65:ae:e9:8a:31:09:
                    3e:c6:9a:55:01:9e:a5:5f:45:ac:5b:f9:05:98:70:
                    91:77:a7:19:80:38:11:02:e2:2a:f7:7f:10:9f:7b:
                    a0:75:51:10:40:b9:64:35:f6:f1:1f:d0:d8:7f:7b:
                    36:57:ff:cf:3e:e4:54:2b:73:9b:10:3d:0b:28:49:
                    79:e8:e7:04:bd:70:83:1a:89:56:f3:e8:6c:2b:01:
                    c2:19:13:11:ae:47:81:b3:22:4c:0b:85:f8:64:1a:
                    98:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DC:AB:10:54:E1:38:C2:87:53:78:6D:88:E8:9A:67:36:85:8A:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/09805674-1e1c-3472-9016-f1d228429a4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.180.0/22
                IPv6:
                  2001:500:f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:9f:0d:b7:c8:b9:a5:1b:5b:f7:af:5b:a8:a8:26:e1:20:f6:
         68:15:98:08:87:1b:7c:92:2d:fb:34:06:93:43:73:0a:9b:05:
         ab:bc:21:76:53:8b:1e:a2:f2:d0:fb:78:85:23:3a:66:7c:dc:
         1c:b1:ad:5b:2a:a2:f6:43:ba:15:29:6d:31:ad:7c:32:67:01:
         22:18:61:85:31:3d:f1:f9:f0:7c:db:4e:1b:d7:38:b4:61:9c:
         88:84:57:bf:2a:73:f1:2a:73:3e:f6:45:2d:71:e5:16:ec:e0:
         21:9c:9c:9b:42:02:07:3a:49:35:e8:98:3c:33:d4:f4:7a:90:
         41:4a:9c:f8:02:97:f3:46:b5:4e:35:80:94:8f:55:ca:e4:8f:
         20:fc:ce:cb:fb:a0:bb:96:7f:68:bd:c5:06:5b:38:7c:4e:88:
         30:68:cb:01:58:2f:de:09:85:bc:2a:7d:c0:34:6c:08:0d:57:
         53:a2:c4:c0:4c:9f:de:0d:c2:02:10:73:72:42:44:dd:1c:db:
         b0:6b:6b:5a:41:4f:a5:f7:8a:41:71:21:40:20:69:57:10:71:
         0d:6a:e4:e2:74:ab:41:ad:d5:89:6d:e9:58:0c:b9:20:bf:14:
         dc:89:66:29:49:41:48:f5:9b:7e:fa:f9:44:b1:ca:fb:ba:04:
         c0:08:74:cd
-----BEGIN CERTIFICATE-----
MIIGTzCCBTmgAwIBAgITXzx1n2kw5FHrePYsZmVRuFCk4jALBgkqhkiG9w0BAQsw
LzEtMCsGA1UEAwwkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2ZDNl
MB4XDTEyMDkxNTA0MDAwMFoXDTIyMDkxNTA0MDAwMFowLzEtMCsGA1UEAwwkNTdj
YWNkMzQtNmY4NC00YzUxLThkYjktYzNlMzA2YTllOGJkMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAsOV5JKX8xJpfxtSVhJG+gdDa5bLOvT2CPX5JAq8G
oKb8pR0oJPlSunZbPMLvVmiDJ0g9FPgml9IWQghOP9oD5zZ+bNXvYVM3xdhp76xV
w1ozfugK0b/ix4Iups72gfx8RyS3Csj4fkk0ZLlrtZrR17AXWWpmnMjciATg4/xP
MTvUY5LByQStKA98vOCgEXiGA8SE23aImMlbt1+vz05lrumKMQk+xppVAZ6lX0Ws
W/kFmHCRd6cZgDgRAuIq938Qn3ugdVEQQLlkNfbxH9DYf3s2V//PPuRUK3ObED0L
KEl56OcEvXCDGolW8+hsKwHCGRMRrkeBsyJMC4X4ZBqYpQIDAQABo4IDZjCCA2Iw
HQYDVR0OBBYEFGLcqxBU4TjCh1N4bYjommc2hYrZMIHlBggrBgEFBQcBCwSB2DCB
1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9y
eS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1
N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZk
Ny02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvMDk4MDU2NzQtMWUxYy0zNDcy
LTkwMTYtZjFkMjI4NDI5YTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHF
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYy
LTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEt
NDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5NmQz
ZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0PAQH/
BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3luYzov
L3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEt
ZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1i
YTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgz
OTZkM2UuY2VyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBALHtLQwDwQCAAIwCQMHACABBQAA
8DALBgkqhkiG9w0BAQsDggEBAKqfDbfIuaUbW/evW6ioJuEg9mgVmAiHG3ySLfs0
BpNDcwqbBau8IXZTix6i8tD7eIUjOmZ83ByxrVsqovZDuhUpbTGtfDJnASIYYYUx
PfH58HzbThvXOLRhnIiEV78qc/Eqcz72RS1x5Rbs4CGcnJtCAgc6STXomDwz1PR6
kEFKnPgCl/NGtU41gJSPVcrkjyD8zsv7oLuWf2i9xQZbOHxOiDBoywFYL94Jhbwq
fcA0bAgNV1OixMBMn94NwgIQc3JCRN0c27Bra1pBT6X3ikFxIUAgaVcQcQ1q5OJ0
q0Gt1Ylt6VgMuSC/FNyJZilJQUj1m376+USxyvu6BMAIdM0=
-----END CERTIFICATE-----