Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7aa117e4-e680-3340-b02c-a39a4645a1f4.roa
File:                     7aa117e4-e680-3340-b02c-a39a4645a1f4.roa (raw, json)
Hash identifier:          Fl3+V5xLMfuJ8VUhjJ9Ar3KEv5w1rwucwyWlSzx3mfs=
Subject key identifier:   7C:87:81:E1:F6:B1:B7:AB:18:CD:CA:FF:88:46:F7:BE:09:02:35:C2
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328576D51CC73C042CFC170305DB15A
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7aa117e4-e680-3340-b02c-a39a4645a1f4.roa
Signing time:             Mon 10 Feb 2020 18:30:11 +0000
ROA not before:           Mon 10 Feb 2020 05:00:00 +0000
ROA not after:            Sun 15 May 2022 04:00:00 +0000
asID:                     61317
IP address blocks:        68.67.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:30:5d:b1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Feb 10 05:00:00 2020 GMT
            Not After : May 15 04:00:00 2022 GMT
        Subject: CN=d78a13f4-fd0d-4db0-9159-50c8a75347f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:2f:87:68:9c:74:20:bb:59:78:ee:c2:3a:
                    9b:60:d4:59:4a:6b:fa:33:a5:69:be:cc:b2:70:19:
                    1e:b3:aa:6d:34:77:b5:16:e4:e8:4e:75:35:01:29:
                    74:ea:69:c4:59:53:43:33:96:c3:44:b1:45:1d:3e:
                    b3:26:80:8d:4c:39:61:29:aa:29:28:8b:83:28:26:
                    5f:d4:eb:65:f3:44:99:cc:b3:45:e4:ae:45:2c:16:
                    bf:9c:27:dd:13:49:5b:68:e6:1b:1d:a3:85:7b:c5:
                    1c:71:08:16:4a:5d:b1:98:15:c6:8f:3a:1c:94:aa:
                    15:fa:b3:cc:45:c7:d8:fe:96:59:d9:7b:62:6f:5f:
                    39:42:67:b8:44:37:a0:4e:7c:23:71:31:09:7c:1d:
                    f9:15:b4:09:78:3a:5a:79:d5:cc:af:56:2a:51:17:
                    bb:4f:1d:87:d2:91:c3:6f:69:6e:46:31:cb:2c:1f:
                    67:e8:12:4c:9f:f5:a1:b2:5b:3d:ab:09:10:8f:e7:
                    a5:ff:81:da:1a:d2:8b:c3:42:7b:ac:c0:5d:8b:a5:
                    4b:9f:68:b8:68:4e:d8:a0:e7:31:6d:20:4a:52:34:
                    ab:54:d0:f5:12:b4:9e:48:9c:3b:09:48:fd:84:23:
                    5c:36:f8:b9:2a:ba:77:cf:aa:0a:f6:df:9c:cd:71:
                    bc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:87:81:E1:F6:B1:B7:AB:18:CD:CA:FF:88:46:F7:BE:09:02:35:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7aa117e4-e680-3340-b02c-a39a4645a1f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f5:51:44:35:56:04:85:5d:c7:3a:15:5e:18:93:66:3b:15:
         ec:35:9d:58:c3:38:bb:95:da:23:53:8c:aa:e2:2e:e7:fe:69:
         4a:02:a4:d9:a9:59:9b:1e:2b:af:20:88:7d:69:d9:fe:93:0a:
         68:9a:7b:db:6d:88:18:ce:61:2a:ee:a5:94:61:e6:e0:cb:1f:
         cc:b4:85:15:08:fe:da:f1:8a:fe:45:ea:60:23:c8:1f:42:c2:
         e2:70:e4:54:53:d9:e3:9c:e3:84:c5:83:94:9c:66:25:c7:a7:
         40:d8:01:fe:63:8e:ae:f4:d6:d5:19:c8:23:ea:9d:ed:e0:cc:
         0d:e5:04:d5:3a:41:2c:ac:bf:9d:9b:f8:6e:34:cf:6d:f1:e9:
         1e:b7:2e:b0:f7:98:13:e2:26:78:f1:ce:c3:52:1c:dd:26:2b:
         da:8c:d5:e7:26:b2:da:be:b9:94:b7:bf:a6:d4:9e:f1:ca:58:
         3b:04:b6:9b:a7:62:1b:b3:98:78:8e:db:17:4e:c9:bb:3f:cb:
         71:b7:91:1d:fb:8a:94:e5:f0:7c:52:3b:fe:36:e2:d4:dc:35:
         ab:1e:48:ea:3a:69:ec:3c:a1:e3:a8:b2:ef:15:fe:ae:c4:2d:
         c8:af:60:5f:7d:91:7d:f8:91:33:be:1e:ea:7d:a6:96:a5:bf:
         b4:42:11:71
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcDBdsVowCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5YjRl
NTAeFw0yMDAyMTAwNTAwMDBaFw0yMjA1MTUwNDAwMDBaMC8xLTArBgNVBAMTJGQ3
OGExM2Y0LWZkMGQtNGRiMC05MTU5LTUwYzhhNzUzNDdmNDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAK6IL4donHQgu1l47sI6m2DUWUpr+jOlab7MsnAZ
HrOqbTR3tRbk6E51NQEpdOppxFlTQzOWw0SxRR0+syaAjUw5YSmqKSiLgygmX9Tr
ZfNEmcyzReSuRSwWv5wn3RNJW2jmGx2jhXvFHHEIFkpdsZgVxo86HJSqFfqzzEXH
2P6WWdl7Ym9fOUJnuEQ3oE58I3ExCXwd+RW0CXg6WnnVzK9WKlEXu08dh9KRw29p
bkYxyywfZ+gSTJ/1obJbPasJEI/npf+B2hrSi8NCe6zAXYulS59ouGhO2KDnMW0g
SlI0q1TQ9RK0nkicOwlI/YQjXDb4uSq6d8+qCvbfnM1xvHMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBR8h4Hh9rG3qxjNyv+IRve+CQI1wjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2
ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzliNGU1LzdhYTExN2U0LWU2ODAtMzM0
MC1iMDJjLWEzOWE0NjQ1YTFmNC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2Rj
LTk1OTc3YjM5YjRlNS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0
ZTUuY3JsMB8GA1UdIwQYMBaAFLp4Y5D/htHvdY51KRz8/JlzyDw8MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5Nzdi
MzliNGU1LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBERDwDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAEfVRRDVWBIVdxzoVXhiTZjsV7DWdWMM4u5XaI1OMquIu5/5pSgKk2alZmx4r
ryCIfWnZ/pMKaJp7222IGM5hKu6llGHm4MsfzLSFFQj+2vGK/kXqYCPIH0LC4nDk
VFPZ45zjhMWDlJxmJcenQNgB/mOOrvTW1RnII+qd7eDMDeUE1TpBLKy/nZv4bjTP
bfHpHrcusPeYE+ImePHOw1Ic3SYr2ozV5yay2r65lLe/ptSe8cpYOwS2m6diG7OY
eI7bF07Juz/LcbeRHfuKlOXwfFI7/jbi1Nw1qx5I6jpp7Dyh46iy7xX+rsQtyK9g
X32RffiRM74e6n2mlqW/tEIRcQ==
-----END CERTIFICATE-----