Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3e9f3d30-8cc6-3b11-b285-62947d47800e.roa
File:                     3e9f3d30-8cc6-3b11-b285-62947d47800e.roa (raw, json)
Hash identifier:          Sa5gGmfoW74toyWKzG4j4UcmeG54EKGJ26FQoDO+/L0=
Subject key identifier:   CF:31:CF:00:14:77:8B:A8:EF:AE:07:82:17:05:A7:51:8A:4A:52:99
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285838972A3A6B685CAE57A7CFA080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3e9f3d30-8cc6-3b11-b285-62947d47800e.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Mon 17 Apr 2023 04:00:00 +0000
asID:                     61317
IP address blocks:        50.114.68.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:97:2a:3a:6b:68:5c:ae:57:a7:cf:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Apr 17 04:00:00 2023 GMT
        Subject: CN=45d27892-cfc0-46f7-83d5-e3c17ccefb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4e:d9:62:a2:89:18:81:d1:97:52:4a:bd:3c:
                    18:84:59:90:07:79:4e:e9:fc:93:c2:b4:d2:1b:c8:
                    16:ff:5b:b1:e0:7d:dd:e2:34:3e:f5:38:6d:75:b6:
                    75:d3:2e:6d:f7:10:97:93:d2:b4:c2:15:b5:2a:5c:
                    bd:de:89:f4:84:c4:6d:c1:ee:bf:4e:36:cd:04:9a:
                    ae:de:75:bd:fa:6e:36:37:9a:d5:15:fe:63:0f:a2:
                    1f:0c:fe:f3:65:e4:ad:83:a3:20:c1:aa:a5:1d:d0:
                    62:0d:6f:67:41:7c:7e:6c:02:9f:7a:c9:24:d1:da:
                    c7:e2:42:ca:9c:3d:99:47:77:da:d6:4c:1c:2d:91:
                    09:25:36:5a:cc:d1:ed:77:c4:ca:3c:ac:7f:e0:59:
                    25:43:23:c9:0c:8a:61:02:74:06:3d:68:c7:2b:3e:
                    16:c3:97:98:61:14:2a:a3:65:6e:9f:d7:87:26:ac:
                    d5:6c:aa:48:ec:fc:ba:e5:94:b4:f8:da:b9:79:2c:
                    5f:bf:f7:2c:77:9e:c3:b6:49:be:fa:e3:2f:f8:e3:
                    8e:2a:ad:61:4e:9b:8c:e5:79:ab:1d:c4:1d:b7:76:
                    ac:85:88:73:35:54:ef:97:7d:87:7d:d8:8d:4e:31:
                    37:c3:e1:f4:65:1f:ca:2c:08:79:cd:fa:0b:b2:f4:
                    1b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:31:CF:00:14:77:8B:A8:EF:AE:07:82:17:05:A7:51:8A:4A:52:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3e9f3d30-8cc6-3b11-b285-62947d47800e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:e0:df:f4:bb:2c:f6:ca:7d:e0:37:41:3d:37:64:fa:0f:c1:
         6b:94:5f:f8:ba:2c:4a:c6:91:ef:f3:39:7e:15:f9:e6:11:63:
         0d:df:6c:7c:21:64:00:99:5a:91:2f:9e:67:c1:77:c6:3e:ad:
         06:07:c5:ba:da:5d:b9:95:bb:f1:7e:1f:a7:66:7d:bb:df:71:
         de:48:7f:12:49:2d:e3:7a:cd:a4:e5:6e:93:a3:c6:86:b1:f2:
         fe:84:26:09:cb:71:d0:37:ab:35:87:e4:2f:b3:7e:49:4d:fc:
         02:44:8a:6f:27:73:b9:78:4b:af:ea:3b:7d:ab:ee:0a:17:d1:
         84:19:8c:46:c1:52:23:60:5a:e9:e1:a1:1c:43:df:a1:2f:6c:
         f4:b2:8c:37:d1:7f:a1:18:ac:bd:3d:7e:e1:d0:77:de:75:5d:
         bd:83:82:b0:44:18:69:5d:49:c4:1e:70:96:c9:d5:3d:9e:ce:
         d6:b5:34:17:a0:de:87:d7:46:c6:e9:61:98:1f:8a:e7:27:e1:
         71:b6:d9:5d:5e:de:22:8a:b0:3b:0f:55:a0:06:b8:a9:9d:09:
         2e:38:c7:59:0f:6f:75:b2:28:4c:77:ca:bc:c3:e2:85:3f:43:
         ab:9b:47:f6:a4:20:39:e3:76:6b:41:22:1c:f7:72:e6:51:a4:
         fc:57:b2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----