Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9dcaba66-e1ac-3c14-bd2f-b109b96f3691.roa
File:                     9dcaba66-e1ac-3c14-bd2f-b109b96f3691.roa (raw, json)
Hash identifier:          TOnJ13xzppHlYzy2e60pBp8Nk3NpEMVWj9fjLiaUYGo=
Subject key identifier:   1C:C4:D8:FE:C3:18:DE:E7:F5:17:2B:D1:C9:9F:80:03:ED:B5:CF:04
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837E4E2159E15948679BFBBD4A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9dcaba66-e1ac-3c14-bd2f-b109b96f3691.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 12 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        173.182.84.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:e4:e2:15:9e:15:94:86:79:bf:bb:d4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 12 05:00:00 2023 GMT
        Subject: CN=be3fb27b-d5b5-4213-a9fb-b7810bc99ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:41:09:b6:0b:a3:5e:cf:4a:1a:23:a3:62:0b:
                    15:ac:4e:ac:c7:fe:e4:d0:fe:82:02:3d:55:b3:6d:
                    77:ec:be:ad:04:4d:8d:6f:8b:96:64:52:3c:55:a0:
                    fb:46:cd:e6:7c:09:ec:3d:05:9f:11:92:6e:d7:1a:
                    1c:16:1a:6c:b0:9c:d8:f6:8e:a5:cb:23:6e:ba:34:
                    e7:51:1a:e1:60:5e:09:5d:bd:56:06:3f:e2:a8:b5:
                    39:26:3d:73:dc:04:82:25:83:9f:c6:dd:8e:ac:05:
                    65:72:63:99:bc:45:44:4e:83:79:16:09:45:d5:5d:
                    a8:6b:2c:7d:12:73:f0:78:48:3f:83:0c:9f:25:76:
                    e5:e4:17:e1:25:af:df:bc:f0:4a:54:b7:a7:4a:15:
                    4b:d8:c9:fb:16:af:3a:57:03:59:2f:96:35:5c:08:
                    4a:7c:5a:56:e7:64:55:47:93:30:2a:fb:de:62:fd:
                    fa:b7:41:47:b6:b4:8b:a7:74:41:ce:a8:d0:e0:8f:
                    2f:d0:b2:41:b3:14:53:1e:a6:70:6f:b4:9b:4a:e0:
                    85:9d:8f:90:31:b5:35:ab:b3:0e:96:00:89:73:59:
                    cb:87:b1:4a:17:dd:c2:87:c1:b9:a6:7d:85:55:ae:
                    80:c6:46:ce:5b:95:31:28:fe:2a:49:5c:6c:66:c2:
                    a4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C4:D8:FE:C3:18:DE:E7:F5:17:2B:D1:C9:9F:80:03:ED:B5:CF:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9dcaba66-e1ac-3c14-bd2f-b109b96f3691.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.182.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:2f:96:e7:77:5a:4a:d7:32:33:e7:98:8d:76:f5:39:11:90:
         fd:f9:34:4c:03:44:04:cc:6c:20:b5:6f:2a:fb:4e:7b:9f:f2:
         5a:96:bb:b1:85:f8:29:0f:ca:62:f9:5c:16:00:d9:34:0d:3d:
         9a:73:35:b6:62:fc:1e:21:33:29:1c:f4:b7:42:e5:00:19:b9:
         4a:81:4f:c6:81:0a:14:a1:df:c0:84:68:6e:0f:e2:07:19:29:
         89:08:85:72:ce:8f:e4:21:96:bb:cf:6d:27:f7:ba:78:ae:0e:
         96:1e:30:18:5c:88:77:38:f3:3f:32:1e:b1:3e:24:ec:b5:fb:
         b4:5f:38:0e:03:31:ca:7d:76:f7:94:d3:79:3b:46:61:ee:9d:
         a9:4f:8a:56:9c:b3:4c:a8:e4:39:ab:fe:1f:b2:01:76:d7:15:
         af:72:be:61:f4:f6:c0:37:72:bd:66:3e:c2:bf:d8:91:72:d3:
         f9:0f:39:99:c9:06:95:57:68:8a:2b:af:d0:15:ac:93:ea:fe:
         f4:8e:28:b9:aa:b4:df:14:9a:79:4a:60:1f:29:97:2c:14:e9:
         60:06:db:85:93:36:55:a8:d0:fe:c9:c4:e8:96:15:7b:8e:ae:
         03:ce:d4:f8:44:4b:cd:4b:4b:32:2c:4f:21:5b:56:6a:21:a8:
         9f:de:18:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDfk4hWeFZSGeb+71KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTIwMDkyMTA0MDAwMFoXDTIzMDIxMjA1MDAwMFowLzEtMCsGA1UEAxMk
YmUzZmIyN2ItZDViNS00MjEzLWE5ZmItYjc4MTBiYzk5YWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EEJtgujXs9KGiOjYgsVrE6sx/7k0P6CAj1V
s2137L6tBE2Nb4uWZFI8VaD7Rs3mfAnsPQWfEZJu1xocFhpssJzY9o6lyyNuujTn
URrhYF4JXb1WBj/iqLU5Jj1z3ASCJYOfxt2OrAVlcmOZvEVEToN5FglF1V2oayx9
EnPweEg/gwyfJXbl5BfhJa/fvPBKVLenShVL2Mn7Fq86VwNZL5Y1XAhKfFpW52RV
R5MwKvveYv36t0FHtrSLp3RBzqjQ4I8v0LJBsxRTHqZwb7SbSuCFnY+QMbU1q7MO
lgCJc1nLh7FKF93Ch8G5pn2FVa6AxkbOW5UxKP4qSVxsZsKkHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBzE2P7DGN7n9Rcr0cmfgAPttc8EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWRjYWJhNjYtZTFhYy0z
YzE0LWJkMmYtYjEwOWI5NmYzNjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbZUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8vlud3WkrXMjPnmI129TkRkP35NEwDRATMbCC1byr7Tnuf8lqWu7GF
+CkPymL5XBYA2TQNPZpzNbZi/B4hMykc9LdC5QAZuUqBT8aBChSh38CEaG4P4gcZ
KYkIhXLOj+QhlrvPbSf3uniuDpYeMBhciHc48z8yHrE+JOy1+7RfOA4DMcp9dveU
03k7RmHunalPilacs0yo5Dmr/h+yAXbXFa9yvmH09sA3cr1mPsK/2JFy0/kPOZnJ
BpVXaIorr9AVrJPq/vSOKLmqtN8UmnlKYB8plywU6WAG24WTNlWo0P7JxOiWFXuO
rgPO1PhES81LSzIsTyFbVmohqJ/eGFY=
-----END CERTIFICATE-----