Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/f685d070-2d66-3a62-8f22-072d80090ea1.roa
File:                     f685d070-2d66-3a62-8f22-072d80090ea1.roa (raw, json)
Hash identifier:          Xxuif6i2tbmyGXxaCsiYQIvT9lt+E6TbysAF0EYNHZk=
Subject key identifier:   B9:03:F9:1B:C1:D3:AB:1A:B4:ED:89:FF:C4:C9:6A:AB:59:27:94:16
Certificate issuer:       /CN=12fa7453-6b85-412b-b280-7c71eec6c46b
Certificate serial:       010D0C9F4328576D51CC73C042CFC17348CABED9
Authority key identifier: 6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/f685d070-2d66-3a62-8f22-072d80090ea1.roa
Signing time:             Mon 13 Jul 2020 15:28:33 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Sun 16 Oct 2022 04:00:00 +0000
asID:                     394356
IP address blocks:        158.51.152.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:48:ca:be:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fa7453-6b85-412b-b280-7c71eec6c46b
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Oct 16 04:00:00 2022 GMT
        Subject: CN=14e3fd57-9b4d-4874-bb78-3fc341c086a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:6d:5b:0d:a0:99:fb:ad:a8:21:0c:ea:68:
                    b1:d7:78:26:82:52:18:83:d5:65:e6:eb:9c:8c:96:
                    b1:7a:93:c8:db:6e:b1:e6:72:b6:3d:42:d8:60:1a:
                    61:6b:11:8a:76:16:f6:86:c1:9e:3d:10:d0:ef:71:
                    86:24:fb:c6:94:7a:fd:65:d2:c0:16:2e:3e:ec:b8:
                    a7:e3:f0:f0:d9:6f:6d:74:15:2b:f9:0e:c1:90:93:
                    c8:46:98:28:df:67:f1:67:da:1c:5e:a5:85:57:f1:
                    fd:1c:2c:38:9e:6e:a4:7f:56:b1:8d:14:56:ab:b3:
                    d5:cf:7c:f3:97:2c:32:a4:95:a8:c1:d5:9d:c2:30:
                    a4:57:f0:f9:c6:51:d0:56:3d:98:1a:1a:55:80:b8:
                    05:07:4d:49:ef:9a:0f:00:e4:dd:2c:a4:ef:ea:f9:
                    46:1d:8d:96:d7:66:4f:07:27:5f:a6:5e:d7:aa:35:
                    d1:a5:c0:83:4f:66:a9:77:e7:d0:34:34:44:c8:3f:
                    49:45:94:50:10:0f:86:aa:cf:9d:12:7d:74:64:29:
                    33:c3:f2:3d:4a:b2:6c:73:6a:93:47:81:45:d8:66:
                    11:0a:06:0f:7f:21:cf:65:93:5d:fe:09:c3:d3:b6:
                    9d:0d:55:1f:01:df:52:4a:29:a0:cb:b4:5d:24:d6:
                    6c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:03:F9:1B:C1:D3:AB:1A:B4:ED:89:FF:C4:C9:6A:AB:59:27:94:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/f685d070-2d66-3a62-8f22-072d80090ea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl

            X509v3 Authority Key Identifier:
                keyid:6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:49:bb:90:c9:4e:1d:f2:b2:b9:f5:e9:d9:ac:08:28:33:24:
         35:65:0b:03:63:2c:3a:39:8e:ff:5b:57:10:c9:8a:f4:a5:92:
         2c:2b:bf:56:5f:61:8c:39:d6:4a:a0:65:fe:37:99:78:92:76:
         eb:46:65:40:5a:b2:af:dc:c3:0a:a0:81:9d:dc:5a:9f:a8:ec:
         98:5f:63:6f:b6:59:16:10:10:c9:f7:48:1c:e3:a1:57:85:a1:
         a2:34:18:ce:2e:45:f1:fa:ec:b9:3b:4b:e5:11:eb:2e:fd:a4:
         96:8d:f6:34:cb:24:ab:8e:95:60:05:01:37:d5:c7:5f:06:91:
         8f:d8:2e:94:21:dc:72:46:43:3a:40:34:f1:ec:e0:eb:b9:c1:
         42:fb:28:74:34:d2:e2:9c:43:d0:1e:3f:ef:a9:b8:21:c4:9d:
         ea:89:04:45:ad:d1:7c:10:51:7e:68:e9:84:74:9a:48:ef:11:
         cd:9b:da:57:ee:eb:28:af:87:39:d6:4e:eb:78:10:f7:c2:80:
         b5:bf:85:1e:17:5b:c9:fe:85:3c:29:84:5a:fa:1b:d5:1a:ce:
         8a:3e:fe:61:dd:ef:b6:cc:50:bb:93:8d:fd:ab:4b:d6:82:4a:
         46:c1:06:73:02:7c:54:b9:7e:51:aa:ed:54:c4:61:04:67:b3:
         dd:88:e7:2b
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc0jKvtkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDEyZmE3NDUzLTZiODUtNDEyYi1iMjgwLTdjNzFlZWM2YzQ2
YjAeFw0yMDA3MDcwNDAwMDBaFw0yMjEwMTYwNDAwMDBaMC8xLTArBgNVBAMTJDE0
ZTNmZDU3LTliNGQtNDg3NC1iYjc4LTNmYzM0MWMwODZhODCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALG2bVsNoJn7raghDOposdd4JoJSGIPVZebrnIyW
sXqTyNtuseZytj1C2GAaYWsRinYW9obBnj0Q0O9xhiT7xpR6/WXSwBYuPuy4p+Pw
8NlvbXQVK/kOwZCTyEaYKN9n8WfaHF6lhVfx/RwsOJ5upH9WsY0UVquz1c9885cs
MqSVqMHVncIwpFfw+cZR0FY9mBoaVYC4BQdNSe+aDwDk3Syk7+r5Rh2NltdmTwcn
X6Ze16o10aXAg09mqXfn0DQ0RMg/SUWUUBAPhqrPnRJ9dGQpM8PyPUqybHNqk0eB
RdhmEQoGD38hz2WTXf4Jw9O2nQ1VHwHfUkopoMu0XSTWbE0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBS5A/kbwdOrGrTtif/EyWqrWSeUFjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTJmYTc0
NTMtNmI4NS00MTJiLWIyODAtN2M3MWVlYzZjNDZiL2Y2ODVkMDcwLTJkNjYtM2E2
Mi04ZjIyLTA3MmQ4MDA5MGVhMS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzEyZmE3NDUzLTZiODUtNDEyYi1iMjgw
LTdjNzFlZWM2YzQ2Yi8xMmZhNzQ1My02Yjg1LTQxMmItYjI4MC03YzcxZWVjNmM0
NmIuY3JsMB8GA1UdIwQYMBaAFGpStwCm+n9ttjzMl2Ogfxgx7xoZMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvMTJmYTc0NTMtNmI4NS00MTJiLWIyODAtN2M3MWVl
YzZjNDZiLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ4zmDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAhUm7kMlOHfKyufXp2awIKDMkNWULA2MsOjmO/1tXEMmK9KWSLCu/Vl9hjDnW
SqBl/jeZeJJ260ZlQFqyr9zDCqCBndxan6jsmF9jb7ZZFhAQyfdIHOOhV4WhojQY
zi5F8frsuTtL5RHrLv2klo32NMskq46VYAUBN9XHXwaRj9gulCHcckZDOkA08ezg
67nBQvsodDTS4pxD0B4/76m4IcSd6okERa3RfBBRfmjphHSaSO8RzZvaV+7rKK+H
OdZO63gQ98KAtb+FHhdbyf6FPCmEWvob1RrOij7+Yd3vtsxQu5ON/atL1oJKRsEG
cwJ8VLl+UartVMRhBGez3YjnKw==
-----END CERTIFICATE-----