Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/75b9da80-77f2-35d4-b0c6-62731d725da7.roa
File:                     75b9da80-77f2-35d4-b0c6-62731d725da7.roa (raw, json)
Hash identifier:          8/zTS71VCOUbrbCD2gHj/8HWGIWy5kGnuTbOPrJbdm0=
Subject key identifier:   F4:01:DE:E2:B1:CD:AF:D4:F7:EE:45:73:13:74:32:18:D2:5A:E6:33
Certificate issuer:       /CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E1EB4B43
Authority key identifier: DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/75b9da80-77f2-35d4-b0c6-62731d725da7.roa
Signing time:             Tue 23 Jun 2020 16:03:13 +0000
ROA not before:           Fri 19 Jun 2020 04:00:00 +0000
ROA not after:            Mon 26 Sep 2022 04:00:00 +0000
asID:                     396982
IP address blocks:        144.49.240.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e1:eb:4b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
        Validity
            Not Before: Jun 19 04:00:00 2020 GMT
            Not After : Sep 26 04:00:00 2022 GMT
        Subject: CN=7fa60014-df99-4180-91e6-73da2a795487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:91:c9:65:11:4d:f9:6a:1c:dd:50:8e:9a:
                    ea:13:72:3d:3b:65:42:4a:2d:b6:db:a7:d0:91:b4:
                    19:fc:86:a4:c8:61:90:a9:03:28:c5:d9:df:6e:b8:
                    52:f8:39:7a:b1:3d:c7:f8:e4:74:07:20:73:1b:3d:
                    fb:19:6d:93:48:52:b8:0a:31:45:7a:29:7f:90:e0:
                    87:02:f4:b3:1f:14:09:f7:15:0b:37:e9:56:26:43:
                    f2:e5:ac:86:b8:8b:bb:55:50:6d:89:bd:d6:04:57:
                    86:16:db:8a:cc:64:c5:e9:07:0a:b5:25:cd:99:31:
                    01:1a:20:01:6b:bf:e9:e2:57:40:cc:47:46:ba:84:
                    87:47:3c:c7:9a:11:a5:db:a4:1e:d9:48:f7:d9:ff:
                    05:b2:18:ff:d1:71:7e:21:6e:43:61:61:84:84:97:
                    5a:df:bc:33:71:4b:6e:cf:05:e4:d7:89:09:cf:e2:
                    84:82:a9:a0:c2:77:99:a0:5d:32:3d:84:dd:05:c2:
                    aa:f1:4c:25:f3:41:70:06:1b:2f:85:d7:18:b6:8e:
                    5f:d0:6a:16:35:c3:31:61:bd:d1:69:a1:38:b2:13:
                    3d:61:89:1e:8c:87:ab:4e:4e:b3:8d:ce:f6:6b:c5:
                    4a:32:9e:5e:9b:cd:85:0c:58:2c:df:33:82:f1:b1:
                    c6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:01:DE:E2:B1:CD:AF:D4:F7:EE:45:73:13:74:32:18:D2:5A:E6:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/75b9da80-77f2-35d4-b0c6-62731d725da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.crl

            X509v3 Authority Key Identifier:
                keyid:DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.49.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d0:cc:33:5f:bd:a2:02:7d:be:8e:9d:75:b7:2f:69:5b:64:
         38:20:84:37:c4:63:a5:30:93:7c:4e:35:1f:15:2a:9d:d0:aa:
         16:24:8f:ab:9e:ae:e9:2f:8d:aa:4e:22:07:9d:8e:74:d0:1b:
         b9:b2:8a:f8:c9:ad:4b:17:43:e3:13:cc:e4:c8:81:b7:19:5b:
         b0:fa:df:69:f9:4f:87:b2:a6:ec:03:cd:e9:88:b7:69:f5:c7:
         cd:c3:d8:86:56:e6:07:f0:96:f5:7b:23:c1:06:50:d0:4e:c3:
         d0:7f:e8:4c:04:a6:4b:7a:66:e4:93:63:bc:21:39:77:33:32:
         a8:9f:21:bc:63:7f:9a:1c:35:ce:d3:0d:f2:07:46:8a:c0:a7:
         1e:95:46:18:40:a1:10:ae:d2:16:4a:5a:cb:97:cc:61:e2:da:
         b5:bc:53:59:49:99:0e:72:62:ec:6f:88:2e:54:09:09:73:62:
         70:d5:1f:68:1b:b6:8d:4b:df:14:ff:11:58:55:c3:51:f9:64:
         f8:46:e2:c4:fc:0d:b9:81:6c:dd:6a:ff:b8:6e:89:eb:7f:6b:
         2b:0f:06:0e:54:db:0f:52:06:cd:d8:cf:fe:50:02:1a:69:f3:
         f4:f0:7e:fd:1a:dd:98:46:f2:99:2c:1d:01:63:18:fb:5d:18:
         83:82:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----