Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/7084e6e3-35ed-32cc-843f-d6e0a5a1a811.roa
File:                     7084e6e3-35ed-32cc-843f-d6e0a5a1a811.roa (raw, json)
Hash identifier:          aK97sy7YqtA8VSaJHxLAhOmMH8A91oCDI0oQ+2Rfjhs=
Subject key identifier:   EC:55:6D:4F:03:19:47:BD:95:A0:F4:A3:6C:C0:2E:D5:62:42:BB:BE
Certificate issuer:       /CN=57823265-9949-4030-be09-5aebdf77ae5c
Certificate serial:       010D0C9F43285838E7D1059368D8B141D10A1840
Authority key identifier: 1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/7084e6e3-35ed-32cc-843f-d6e0a5a1a811.roa
Signing time:             Mon 02 Nov 2020 05:00:00 +0000
ROA not before:           Mon 02 Nov 2020 05:00:00 +0000
ROA not after:            Tue 16 May 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        216.157.156.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:e7:d1:05:93:68:d8:b1:41:d1:0a:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57823265-9949-4030-be09-5aebdf77ae5c
        Validity
            Not Before: Nov  2 05:00:00 2020 GMT
            Not After : May 16 04:00:00 2023 GMT
        Subject: CN=e743d953-40a2-4301-bbba-8b78d4b8b907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:e1:11:c6:bc:48:5d:64:2b:48:5c:0f:f0:
                    b1:45:65:ca:db:7b:34:d6:2f:25:90:11:72:ed:31:
                    7c:ce:2d:b4:d1:67:2b:03:af:cf:29:86:d6:97:5a:
                    53:27:9c:f6:e1:d5:57:21:b8:9a:b8:45:eb:a3:0b:
                    aa:7a:59:64:f5:1b:77:c8:6f:5b:75:eb:c6:85:3f:
                    35:01:d2:12:46:79:96:02:d0:2c:ff:49:81:b4:29:
                    96:f5:7a:97:76:0a:07:85:e6:5a:3e:ae:1c:05:cb:
                    f3:e6:0b:30:6f:02:7e:c8:51:1e:7a:f0:9d:25:1c:
                    18:03:b3:8a:65:0b:96:5f:b1:73:f3:5e:0a:98:73:
                    9c:3f:ad:3f:67:20:fc:96:50:0a:bb:ab:10:df:67:
                    11:53:7e:92:f7:08:f3:2a:5a:25:ff:b7:73:6a:86:
                    af:d7:d2:5a:22:dd:ba:8d:59:6b:1f:c4:23:c6:cb:
                    1b:3c:c2:9a:67:b6:c6:b2:63:5b:80:a0:90:8c:0f:
                    00:fb:0b:41:35:7c:76:07:df:3e:58:64:4e:1f:d2:
                    5f:13:cb:9b:a7:c7:d0:bd:7c:75:9b:54:90:5e:94:
                    9b:91:ec:4c:76:87:5c:a2:d3:18:46:e9:ce:01:06:
                    40:4d:18:80:f8:e2:c1:14:c2:43:20:23:0e:f6:c9:
                    79:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:55:6D:4F:03:19:47:BD:95:A0:F4:A3:6C:C0:2E:D5:62:42:BB:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/7084e6e3-35ed-32cc-843f-d6e0a5a1a811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl

            X509v3 Authority Key Identifier:
                keyid:1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:25:ab:73:7b:72:f0:47:13:58:f8:d8:0f:98:63:4e:ae:ec:
         d9:07:e8:8d:c8:e9:0a:20:16:1b:fb:0f:b1:a8:05:65:1e:c5:
         e9:d4:ef:2e:06:1c:a0:d8:23:28:19:0c:62:13:07:73:08:c9:
         17:86:6f:75:14:69:ef:48:57:79:dd:6a:1d:eb:2b:24:4c:b5:
         90:73:a5:4c:1d:72:4b:1b:b8:12:b7:25:99:7a:20:1c:f4:b8:
         3e:c2:ac:04:e4:60:76:f4:f9:76:15:52:f4:30:69:9c:1b:19:
         5b:53:89:df:dc:7e:6f:c8:25:e2:d1:89:20:5e:3d:78:79:63:
         a5:c6:72:ec:09:a2:d6:75:1a:22:b6:6b:37:fd:02:37:df:2e:
         36:91:04:71:3e:36:8d:75:8a:86:f2:2f:d7:fa:be:c3:f5:1f:
         3d:9e:f2:0e:56:67:b8:04:7e:7f:23:44:63:e1:59:eb:68:c7:
         80:92:67:20:67:93:31:ff:53:e8:5f:f1:fe:89:49:7c:fd:20:
         15:0f:1b:3a:94:4b:be:e0:6f:59:88:c9:bf:d7:53:af:ec:b3:
         d5:13:22:21:6a:9e:dc:b3:5d:80:80:8e:04:f9:8a:e9:f7:7d:
         d0:6d:f6:71:32:5b:7a:12:11:37:fd:f9:79:3d:dc:94:50:4e:
         4a:d7:16:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDjn0QWTaNixQdEKGEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTc4MjMyNjUtOTk0OS00MDMwLWJlMDktNWFlYmRmNzdh
ZTVjMB4XDTIwMTEwMjA1MDAwMFoXDTIzMDUxNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZTc0M2Q5NTMtNDBhMi00MzAxLWJiYmEtOGI3OGQ0YjhiOTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMzhEca8SF1kK0hcD/CxRWXK23s01i8lkBFy
7TF8zi200WcrA6/PKYbWl1pTJ5z24dVXIbiauEXrowuqellk9Rt3yG9bdevGhT81
AdISRnmWAtAs/0mBtCmW9XqXdgoHheZaPq4cBcvz5gswbwJ+yFEeevCdJRwYA7OK
ZQuWX7Fz814KmHOcP60/ZyD8llAKu6sQ32cRU36S9wjzKlol/7dzaoav19JaIt26
jVlrH8QjxssbPMKaZ7bGsmNbgKCQjA8A+wtBNXx2B98+WGROH9JfE8ubp8fQvXx1
m1SQXpSbkexMdodcotMYRunOAQZATRiA+OLBFMJDICMO9sl5JQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOxVbU8DGUe9laD0o2zALtViQru+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81Nzgy
MzI2NS05OTQ5LTQwMzAtYmUwOS01YWViZGY3N2FlNWMvNzA4NGU2ZTMtMzVlZC0z
MmNjLTg0M2YtZDZlMGE1YTFhODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTc4MjMyNjUtOTk0OS00MDMwLWJl
MDktNWFlYmRmNzdhZTVjLzU3ODIzMjY1LTk5NDktNDAzMC1iZTA5LTVhZWJkZjc3
YWU1Yy5jcmwwHwYDVR0jBBgwFoAUHG1H2rSN5+TXiWF7twW92xQQZPUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NzgyMzI2NS05OTQ5LTQwMzAtYmUwOS01YWVi
ZGY3N2FlNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACklq3N7cvBHE1j42A+YY06u7NkH6I3I6QogFhv7D7GoBWUexenU7y4G
HKDYIygZDGITB3MIyReGb3UUae9IV3ndah3rKyRMtZBzpUwdcksbuBK3JZl6IBz0
uD7CrATkYHb0+XYVUvQwaZwbGVtTid/cfm/IJeLRiSBePXh5Y6XGcuwJotZ1GiK2
azf9AjffLjaRBHE+No11iobyL9f6vsP1Hz2e8g5WZ7gEfn8jRGPhWetox4CSZyBn
kzH/U+hf8f6JSXz9IBUPGzqUS77gb1mIyb/XU6/ss9UTIiFqntyzXYCAjgT5iun3
fdBt9nEyW3oSETf9+Xk93JRQTkrXFtk=
-----END CERTIFICATE-----