Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e19dffae-1e96-3b62-8ab8-6194f6378720.roa
File:                     e19dffae-1e96-3b62-8ab8-6194f6378720.roa (raw, json)
Hash identifier:          eBMBlgoc+YKbCq4BGRPcf8eCzgQ+2H27TDlnJT2N+Wg=
Subject key identifier:   47:72:22:6E:22:96:9A:60:71:B4:31:4D:DE:77:29:5D:3A:77:2F:10
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1720E1103EB
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e19dffae-1e96-3b62-8ab8-6194f6378720.roa
Signing time:             Wed 13 May 2020 12:44:55 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Tue 16 Aug 2022 04:00:00 +0000
asID:                     32787
IP address blocks:        168.143.254.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:0e:11:03:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Aug 16 04:00:00 2022 GMT
        Subject: CN=35357ac1-7a54-4142-a5a5-a07941d788d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:17:7c:15:6a:a9:d2:72:82:ec:28:f4:76:15:
                    89:18:2b:da:aa:1e:df:88:bb:dc:e6:8c:3b:0a:7a:
                    61:1b:e7:a7:d2:17:d3:ac:ef:fa:d3:52:e1:ac:9d:
                    61:ff:95:86:d0:59:8f:9e:55:c6:49:58:30:d2:da:
                    37:ca:e5:68:43:4c:90:4d:32:cd:62:78:8d:d3:6a:
                    11:de:6e:84:46:88:cb:1c:fd:0f:8a:16:d8:12:9d:
                    4a:f5:77:95:b6:e0:d5:d0:fa:af:9e:f3:3e:80:74:
                    f0:47:a0:aa:d8:5d:33:6e:8e:dd:fe:a5:5e:f5:31:
                    a0:fc:a7:06:a9:36:bb:70:59:28:11:bf:80:76:66:
                    a5:6b:74:38:66:1a:69:03:e8:bd:f8:32:98:47:c3:
                    2f:42:86:fa:f9:d7:fa:06:4e:cb:3b:48:ae:22:89:
                    7e:f9:fc:27:b9:7a:5f:b0:de:0c:b5:0e:25:bd:1a:
                    3c:8e:8e:97:af:42:e5:38:bc:94:f0:41:4a:e5:ed:
                    59:0b:91:05:2c:8a:c3:f0:d5:fa:68:2e:e0:6d:4c:
                    02:ed:1e:05:74:46:02:1a:d7:bb:15:47:24:cf:65:
                    5d:63:41:d2:89:a2:55:26:cd:9e:f2:5d:20:05:5c:
                    f2:ff:b8:c6:d0:a5:eb:0e:fd:04:b0:fc:bd:44:54:
                    10:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:72:22:6E:22:96:9A:60:71:B4:31:4D:DE:77:29:5D:3A:77:2F:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e19dffae-1e96-3b62-8ab8-6194f6378720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.143.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b6:f8:98:73:09:fd:8e:36:92:a0:d7:df:80:a9:69:5d:b1:
         21:64:69:84:c9:c8:8f:6a:f7:8f:cc:ea:57:05:0c:ca:22:1e:
         f1:2e:a1:30:f8:d6:6d:e2:09:2d:b7:bc:b3:5d:ef:1e:f5:03:
         11:10:5d:9f:61:61:9d:12:55:d3:ea:49:71:5e:6c:03:c1:a1:
         15:d0:bd:b4:0d:65:bb:09:27:50:44:7a:a4:08:03:1f:bd:8e:
         35:3a:71:dd:77:4a:8a:fc:94:63:79:21:90:86:23:b7:39:0f:
         7f:c3:3c:40:78:2b:60:91:42:71:9d:b3:41:9e:81:28:f5:e9:
         99:f7:b0:2b:22:cd:ed:05:9a:63:9e:7e:c5:9f:7e:81:75:05:
         78:e0:d6:78:1b:0d:2f:62:40:7f:1f:89:b8:9f:bd:13:b0:12:
         07:fc:c1:72:55:45:77:99:d2:c8:dc:63:2e:8e:d8:be:44:54:
         f4:8d:57:46:03:69:f9:eb:91:21:25:91:e7:91:b2:01:c4:21:
         44:16:c6:de:5f:74:17:e5:b6:a1:8a:60:18:8b:bc:46:ee:ab:
         8d:38:a1:47:80:ff:4a:b9:03:de:9c:b5:32:c4:cd:de:05:c0:
         5b:76:ec:55:ff:63:1e:9d:0b:b3:a5:9c:ca:a7:d9:1d:bc:aa:
         9e:18:a3:fc
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcg4RA+swCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yMjA4MTYwNDAwMDBaMC8xLTArBgNVBAMTJDM1
MzU3YWMxLTdhNTQtNDE0Mi1hNWE1LWEwNzk0MWQ3ODhkNTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAPoXfBVqqdJyguwo9HYViRgr2qoe34i73OaMOwp6
YRvnp9IX06zv+tNS4aydYf+VhtBZj55VxklYMNLaN8rlaENMkE0yzWJ4jdNqEd5u
hEaIyxz9D4oW2BKdSvV3lbbg1dD6r57zPoB08EegqthdM26O3f6lXvUxoPynBqk2
u3BZKBG/gHZmpWt0OGYaaQPovfgymEfDL0KG+vnX+gZOyztIriKJfvn8J7l6X7De
DLUOJb0aPI6Ol69C5Ti8lPBBSuXtWQuRBSyKw/DV+mgu4G1MAu0eBXRGAhrXuxVH
JM9lXWNB0omiVSbNnvJdIAVc8v+4xtCl6w79BLD8vURUEJ0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRHciJuIpaaYHG0MU3edyldOncvEDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2UxOWRmZmFlLTFlOTYtM2I2
Mi04YWI4LTYxOTRmNjM3ODcyMC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKiP/jBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAR7b4mHMJ/Y42kqDX34CpaV2xIWRphMnIj2r3j8zqVwUMyiIe8S6hMPjWbeIJ
Lbe8s13vHvUDERBdn2FhnRJV0+pJcV5sA8GhFdC9tA1luwknUER6pAgDH72ONTpx
3XdKivyUY3khkIYjtzkPf8M8QHgrYJFCcZ2zQZ6BKPXpmfewKyLN7QWaY55+xZ9+
gXUFeODWeBsNL2JAfx+JuJ+9E7ASB/zBclVFd5nSyNxjLo7YvkRU9I1XRgNp+euR
ISWR55GyAcQhRBbG3l90F+W2oYpgGIu8Ru6rjTihR4D/SrkD3py1MsTN3gXAW3bs
Vf9jHp0Ls6WcyqfZHbyqnhij/A==
-----END CERTIFICATE-----