Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/345be5a5-a036-35fa-822a-3eeb91a464c5.roa
File:                     345be5a5-a036-35fa-822a-3eeb91a464c5.roa (raw, json)
Hash identifier:          QgKi77dJpeamKN0FvEfrLKreGPGUV8krRNCWHoYuXsQ=
Subject key identifier:   C7:1E:93:72:2D:27:61:EF:7D:F7:27:15:BC:8A:DB:44:38:FB:F7:50
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       990C81201FCD4598B24F27009CF4BBC2349706
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/345be5a5-a036-35fa-822a-3eeb91a464c5.roa
Signing time:             Thu 27 Sep 2012 14:13:03 +0000
ROA not before:           Sat 15 Sep 2012 04:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     393220
IP address blocks:        199.71.0.0/24 maxlen: 24
                          2001:500:31::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            99:0c:81:20:1f:cd:45:98:b2:4f:27:00:9c:f4:bb:c2:34:97:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: Sep 15 04:00:00 2012 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=ebb1c639-741a-4235-a7f0-aeddc7a07e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:53:8a:b6:0c:bb:2a:13:0c:71:1f:df:16:
                    53:d9:6f:36:22:0b:99:b4:98:e7:ad:c4:3b:8e:cb:
                    6b:1a:79:28:b6:b3:61:e9:22:1c:36:3a:dc:46:3d:
                    cc:fa:e0:40:77:ef:9b:b6:fd:04:a3:fc:ae:40:b5:
                    b3:6f:65:5e:88:9e:9a:19:65:c4:73:bd:b1:c6:62:
                    1a:bc:f9:b5:1d:49:1c:c7:e0:77:b9:8d:96:8c:44:
                    39:3f:9a:35:b3:5c:bf:0f:b9:d2:d0:85:1f:10:88:
                    71:f0:aa:b0:22:78:e8:2d:eb:58:4a:f4:a4:aa:9b:
                    ab:37:11:45:de:1d:b0:eb:3b:72:4d:94:1b:0a:7b:
                    b6:c2:e3:e6:9d:ac:68:45:37:22:73:d0:f0:35:ce:
                    8a:9b:53:c6:eb:49:c4:2c:2d:b5:2e:6a:a8:24:c5:
                    bc:f3:af:99:c4:da:4d:71:d2:4a:08:32:d1:14:56:
                    53:fe:4d:1b:3e:12:14:d5:23:cc:4f:3c:c8:aa:77:
                    b7:b1:d8:59:9a:06:b4:60:32:66:2c:68:83:5c:7c:
                    32:4f:f8:a3:ef:0e:3b:e1:d7:3d:7e:a6:d7:38:26:
                    29:19:32:70:f5:95:22:b2:25:4c:e2:f9:ac:51:53:
                    62:29:f5:e9:49:1a:e8:67:45:7d:93:f8:59:41:ba:
                    71:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1E:93:72:2D:27:61:EF:7D:F7:27:15:BC:8A:DB:44:38:FB:F7:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/345be5a5-a036-35fa-822a-3eeb91a464c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.71.0.0/24
                IPv6:
                  2001:500:31::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:46:85:f0:1b:af:a9:77:40:a9:35:71:87:91:6b:e4:9e:ba:
         9a:d8:29:7e:bc:a8:8a:9c:a3:47:c2:54:81:93:86:ec:2f:b4:
         2c:fb:9a:6c:70:c6:78:e5:ac:61:b3:ff:08:4c:65:40:a2:4b:
         65:f7:26:56:fa:ea:d2:fc:25:f3:1f:f6:18:bb:91:6a:a0:be:
         a6:c5:45:21:09:f3:f0:ca:0a:9e:2e:7d:9e:f5:8e:0e:66:46:
         cf:4a:88:2e:05:b8:93:66:c7:e2:03:a0:8b:e9:da:25:68:42:
         06:16:50:62:8c:b7:04:55:8c:84:03:a6:75:53:46:f2:ca:02:
         68:17:ba:48:ac:ca:80:4d:b0:20:fa:23:77:48:cc:bc:e3:4e:
         32:ff:ad:2a:b9:7d:65:0b:0c:75:27:1c:8e:00:10:42:09:68:
         ae:1e:25:1c:be:a7:37:e9:2b:93:0f:04:4f:27:db:c6:eb:d8:
         5d:bf:bb:80:f9:57:4e:f1:38:a7:0d:c6:31:55:b3:aa:c4:a0:
         00:2d:73:43:9a:39:ce:4b:71:72:cb:c7:66:91:74:8d:40:84:
         0e:ac:64:b4:b7:ae:a4:4e:fc:1e:b4:2b:10:c9:3a:30:aa:f1:
         29:90:aa:ed:28:5a:ba:dc:d2:8e:96:47:0e:76:18:ed:0f:09:
         5a:3c:eb:18
-----BEGIN CERTIFICATE-----
MIIGUDCCBTqgAwIBAgIUAJkMgSAfzUWYsk8nAJz0u8I0lwYwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMMJGFkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5NmQz
ZTAeFw0xMjA5MTUwNDAwMDBaFw0yMjA5MTUwNDAwMDBaMC8xLTArBgNVBAMMJGVi
YjFjNjM5LTc0MWEtNDIzNS1hN2YwLWFlZGRjN2EwN2U2OTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM7SU4q2DLsqEwxxH98WU9lvNiILmbSY563EO47L
axp5KLazYekiHDY63EY9zPrgQHfvm7b9BKP8rkC1s29lXoiemhllxHO9scZiGrz5
tR1JHMfgd7mNloxEOT+aNbNcvw+50tCFHxCIcfCqsCJ46C3rWEr0pKqbqzcRRd4d
sOs7ck2UGwp7tsLj5p2saEU3InPQ8DXOiptTxutJxCwttS5qqCTFvPOvmcTaTXHS
Sggy0RRWU/5NGz4SFNUjzE88yKp3t7HYWZoGtGAyZixog1x8Mk/4o+8OO+HXPX6m
1zgmKRkycPWVIrIlTOL5rFFTYin16Uka6GdFfZP4WUG6cUcCAwEAAaOCA2YwggNi
MB0GA1UdDgQWBBTHHpNyLSdh7333JxW8ittEOPv3UDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2
ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2ZDNlLzM0NWJlNWE1LWEwMzYtMzVm
YS04MjJhLTNlZWI5MWE0NjRjNS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDEx
LTQ2NGZiODM5NmQzZS9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZk
M2UuY3JsMB8GA1UdIwQYMBaAFF3B/ZpjhcGPRlJKuMRi9TQkvK+OMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4
Mzk2ZDNlLmNlcjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAx0cAMA8EAgACMAkDBwAgAQUA
ADEwCwYJKoZIhvcNAQELA4IBAQBfRoXwG6+pd0CpNXGHkWvknrqa2Cl+vKiKnKNH
wlSBk4bsL7Qs+5pscMZ45axhs/8ITGVAoktl9yZW+urS/CXzH/YYu5FqoL6mxUUh
CfPwygqeLn2e9Y4OZkbPSoguBbiTZsfiA6CL6dolaEIGFlBijLcEVYyEA6Z1U0by
ygJoF7pIrMqATbAg+iN3SMy8404y/60quX1lCwx1JxyOABBCCWiuHiUcvqc36SuT
DwRPJ9vG69hdv7uA+VdO8TinDcYxVbOqxKAALXNDmjnOS3Fyy8dmkXSNQIQOrGS0
t66kTvwetCsQyTowqvEpkKrtKFq63NKOlkcOdhjtDwlaPOsY
-----END CERTIFICATE-----