Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/218b39f5-7d69-30a3-9640-ed9c3c604796.roa
File:                     218b39f5-7d69-30a3-9640-ed9c3c604796.roa (raw, json)
Hash identifier:          2lRcQSU7Gm1xaVemv2iOJMzXOfZLLQIcQ+uIBsXbEIw=
Subject key identifier:   90:3F:FC:8A:ED:8B:AD:B7:32:E5:33:CF:B3:C4:BB:A7:FF:A8:52:11
Certificate issuer:       /CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
Certificate serial:       010D0C9F4328583E8DEB66E0D4783B40027FF200
Authority key identifier: 10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/218b39f5-7d69-30a3-9640-ed9c3c604796.roa
Signing time:             Tue 19 Feb 2019 12:14:40 +0000
ROA not before:           Tue 19 Feb 2019 12:14:40 +0000
ROA not after:            Tue 15 Oct 2024 04:00:00 +0000
asID:                     2381
IP address blocks:        216.56.252.0/23 maxlen: 23
                          216.56.252.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8d:eb:66:e0:d4:78:3b:40:02:7f:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
        Validity
            Not Before: Feb 19 12:14:40 2019 GMT
            Not After : Oct 15 04:00:00 2024 GMT
        Subject: CN=18de7f6a-5be7-4393-a830-cd72e18fb944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e6:3b:da:9c:d2:6e:98:23:7c:ea:35:af:62:
                    87:3a:7e:76:46:48:71:00:22:7d:a5:9b:69:2b:a4:
                    6a:ee:3a:88:a8:ba:1a:04:f9:f6:8c:7e:b6:f2:89:
                    fe:fc:69:32:b4:ad:e1:99:66:7d:5d:31:be:46:82:
                    0c:72:a9:e3:18:65:d2:81:54:ca:24:33:2a:ef:fe:
                    2e:2b:88:4e:ca:a4:a5:7e:89:05:85:b1:3f:0f:70:
                    53:d3:f7:b5:1e:bc:02:15:f8:6a:f5:79:d7:a0:64:
                    20:45:3d:13:0f:0e:ac:35:cd:28:73:5a:12:55:a5:
                    a4:87:cd:78:52:c9:cf:26:59:b5:88:bd:7d:9d:e1:
                    fc:b6:47:13:d5:56:8b:0e:15:c0:75:5f:a2:b5:dc:
                    08:0d:13:6d:8a:57:04:4c:9e:d9:22:36:d3:41:f2:
                    ea:12:e6:35:d7:4c:8c:a9:03:f7:82:8f:d6:94:4c:
                    44:46:d0:bb:29:bf:93:49:c0:30:3c:b9:df:6b:6c:
                    c3:24:dd:d6:6e:54:45:8b:7c:ea:e4:5e:a8:0f:79:
                    7c:c6:91:fa:25:0f:a0:cf:b2:a5:42:8d:02:02:f2:
                    d1:46:a0:4f:1b:d1:38:85:c3:2d:80:30:36:da:64:
                    0c:e9:29:90:12:32:f6:ac:49:76:98:95:0d:55:d9:
                    26:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3F:FC:8A:ED:8B:AD:B7:32:E5:33:CF:B3:C4:BB:A7:FF:A8:52:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/218b39f5-7d69-30a3-9640-ed9c3c604796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl

            X509v3 Authority Key Identifier:
                keyid:10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.56.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:01:f9:0e:17:fd:36:ac:51:dc:9a:10:8c:d4:cf:a6:16:c7:
         39:76:66:61:15:2f:5e:bc:01:97:da:a7:a5:a8:35:cf:eb:86:
         64:ac:bc:e6:08:2b:ee:ba:e1:7d:a0:d0:92:36:28:6b:ab:29:
         4e:8e:ee:cb:01:e5:f4:43:f3:86:7e:24:27:f0:93:e1:f2:57:
         18:6f:2e:f6:32:9d:0e:80:91:b5:74:96:4b:10:39:4b:dd:d8:
         d2:d5:cb:0d:24:72:ce:ab:07:47:59:3b:56:96:a2:4d:f7:f1:
         b1:f1:78:9e:ff:48:92:4f:1f:ad:cc:6c:f5:c6:e3:8e:c0:f8:
         47:ac:45:8b:20:a7:9f:31:4e:7f:14:6a:bf:8d:a7:91:55:4b:
         0d:70:40:ff:1e:2c:49:2b:21:8f:26:87:f9:e1:1c:22:da:aa:
         91:d6:c5:8c:68:d2:3f:4b:ba:be:6a:31:3a:b6:1d:3c:44:be:
         1b:2e:25:f9:e0:c6:42:5a:4e:bb:96:67:c4:8a:dc:f0:fa:1e:
         9b:6c:98:74:91:34:b0:97:83:55:fd:80:5c:2f:b5:2f:1f:ab:
         e7:a0:3c:db:5d:ec:07:55:05:d0:3e:66:39:a6:8b:42:cb:36:
         14:42:ed:97:9f:d9:33:48:84:55:a9:40:ef:07:17:d2:7d:5f:
         dc:29:35:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6N62bg1Hg7QAJ/8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGZkYTBlMTAtZjZiZi00YzIzLWJmZmItZDRhOWE3MzUy
MzU1MB4XDTE5MDIxOTEyMTQ0MFoXDTI0MTAxNTA0MDAwMFowLzEtMCsGA1UEAxMk
MThkZTdmNmEtNWJlNy00MzkzLWE4MzAtY2Q3MmUxOGZiOTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeY72pzSbpgjfOo1r2KHOn52RkhxACJ9pZtp
K6Rq7jqIqLoaBPn2jH628on+/GkytK3hmWZ9XTG+RoIMcqnjGGXSgVTKJDMq7/4u
K4hOyqSlfokFhbE/D3BT0/e1HrwCFfhq9XnXoGQgRT0TDw6sNc0oc1oSVaWkh814
UsnPJlm1iL19neH8tkcT1VaLDhXAdV+itdwIDRNtilcETJ7ZIjbTQfLqEuY110yM
qQP3go/WlExERtC7Kb+TScAwPLnfa2zDJN3WblRFi3zq5F6oD3l8xpH6JQ+gz7Kl
Qo0CAvLRRqBPG9E4hcMtgDA22mQM6SmQEjL2rEl2mJUNVdkmfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJA//Irti623MuUzz7PEu6f/qFIRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZmRh
MGUxMC1mNmJmLTRjMjMtYmZmYi1kNGE5YTczNTIzNTUvMjE4YjM5ZjUtN2Q2OS0z
MGEzLTk2NDAtZWQ5YzNjNjA0Nzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGZkYTBlMTAtZjZiZi00YzIzLWJm
ZmItZDRhOWE3MzUyMzU1LzhmZGEwZTEwLWY2YmYtNGMyMy1iZmZiLWQ0YTlhNzM1
MjM1NS5jcmwwHwYDVR0jBBgwFoAUEFJ7frj3pvQHb8/NWj8S4x3SLMwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZmRhMGUxMC1mNmJmLTRjMjMtYmZmYi1kNGE5
YTczNTIzNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Dj8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwB+Q4X/TasUdyaEIzUz6YWxzl2ZmEVL168AZfap6WoNc/rhmSsvOYI
K+664X2g0JI2KGurKU6O7ssB5fRD84Z+JCfwk+HyVxhvLvYynQ6AkbV0lksQOUvd
2NLVyw0kcs6rB0dZO1aWok338bHxeJ7/SJJPH63MbPXG447A+EesRYsgp58xTn8U
ar+Np5FVSw1wQP8eLEkrIY8mh/nhHCLaqpHWxYxo0j9Lur5qMTq2HTxEvhsuJfng
xkJaTruWZ8SK3PD6HptsmHSRNLCXg1X9gFwvtS8fq+egPNtd7AdVBdA+Zjmmi0LL
NhRC7Zef2TNIhFWpQO8HF9J9X9wpNZw=
-----END CERTIFICATE-----