Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a/c9ffce26-dc31-3d69-a195-cb08edd46746.roa
File:                     c9ffce26-dc31-3d69-a195-cb08edd46746.roa (raw, json)
Hash identifier:          pwCS2jI3T+JklIf0BdsKZ/irhUDTThPDqGJ3QOV4ijg=
Subject key identifier:   C0:7D:AA:F9:68:BE:23:F4:C0:EB:E2:FF:1E:5A:D1:0B:05:F0:D7:10
Certificate issuer:       /CN=c66eadbc-5490-4fb5-ab87-936c9491420a
Certificate serial:       010D0C9F4328576D51CC73C042CFC173DEC8BE84
Authority key identifier: 4E:55:A4:53:C4:4B:D7:A1:F3:50:82:A4:32:56:98:2A:B9:01:EE:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a/c9ffce26-dc31-3d69-a195-cb08edd46746.roa
Signing time:             Tue 11 Aug 2020 18:29:24 +0000
ROA not before:           Mon 10 Aug 2020 04:00:00 +0000
ROA not after:            Mon 14 Nov 2022 05:00:00 +0000
asID:                     34549
IP address blocks:        104.255.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:de:c8:be:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66eadbc-5490-4fb5-ab87-936c9491420a
        Validity
            Not Before: Aug 10 04:00:00 2020 GMT
            Not After : Nov 14 05:00:00 2022 GMT
        Subject: CN=ad180f51-8694-4d9d-9f82-b20ad017c7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:02:9d:b3:c5:43:e0:b3:e7:47:57:95:fe:
                    51:14:79:fa:61:db:01:f1:64:35:d8:ce:b7:fb:32:
                    88:89:ba:95:1d:aa:f7:18:59:d9:8f:5d:18:df:f3:
                    9e:ab:13:62:a0:c3:5d:20:b5:42:7b:ee:cc:80:4e:
                    b3:40:bb:bf:4c:11:7a:5e:82:91:c0:71:53:0e:34:
                    c4:0d:3e:3a:2b:9e:c8:69:d5:b0:2a:d5:a9:d4:20:
                    df:f5:06:4f:36:12:05:8d:0f:62:a4:ff:31:8f:8a:
                    25:79:22:f4:3a:1e:2c:23:ba:c3:7c:f8:f4:66:de:
                    c4:20:d4:27:91:d3:9a:74:fa:98:0b:b4:66:10:84:
                    7b:c6:92:7a:0e:3e:b1:c1:da:05:a4:e3:4e:34:bf:
                    ef:41:94:47:54:32:04:ad:a3:e4:d9:bc:50:e6:e6:
                    69:f0:19:d2:14:e5:cb:a4:d7:fe:b7:6b:71:d7:97:
                    5f:56:a9:0a:83:4f:6a:22:fe:93:b2:4e:54:9c:e1:
                    0d:ee:83:de:d4:55:aa:71:a4:21:70:08:34:07:cd:
                    7b:3d:0b:7a:8f:ca:c0:cf:83:04:43:87:cf:42:5d:
                    72:b5:8f:16:e6:de:3d:c1:6c:3d:7f:33:fb:1f:73:
                    52:5f:ec:92:bb:51:b8:5d:e6:b9:ad:32:c9:14:89:
                    08:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7D:AA:F9:68:BE:23:F4:C0:EB:E2:FF:1E:5A:D1:0B:05:F0:D7:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a/c9ffce26-dc31-3d69-a195-cb08edd46746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a/c66eadbc-5490-4fb5-ab87-936c9491420a.crl

            X509v3 Authority Key Identifier:
                keyid:4E:55:A4:53:C4:4B:D7:A1:F3:50:82:A4:32:56:98:2A:B9:01:EE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ea:83:63:82:67:97:75:c2:29:7a:5e:08:8b:cf:ab:e4:35:
         60:ad:6f:e1:6b:3d:e6:79:bb:34:f1:4c:de:3d:b3:89:a2:63:
         40:8d:55:99:b1:91:9a:95:1a:c3:3a:59:55:7b:15:bd:39:61:
         e8:3b:1e:b2:7f:35:97:85:58:ec:d8:21:d8:b7:0a:01:e9:4d:
         f8:9c:0d:c2:f0:47:c8:3e:93:27:1f:38:0a:9f:85:2b:47:89:
         e3:6f:89:7a:34:03:20:8a:21:b6:a2:b4:c8:b9:a3:b8:a0:61:
         d8:fa:e5:a7:e1:10:32:d3:fa:3d:f3:3f:41:81:ec:1d:18:d7:
         ce:8d:35:48:a6:29:90:cc:f3:e5:04:29:01:2e:e3:5e:57:cd:
         8c:3d:a7:32:d3:7e:07:e2:3e:eb:f1:24:d8:52:b0:ed:eb:61:
         66:11:8e:7b:a6:46:52:ff:5f:1f:6f:b3:50:63:4c:97:bb:2d:
         73:51:15:3f:69:7e:65:e6:ba:3a:1a:f6:0c:7b:28:d7:bc:87:
         c5:a8:3b:ca:3d:fc:77:dd:4b:e0:dd:f2:b8:4a:1b:2a:18:e8:
         1e:a4:33:20:92:ad:4e:59:4b:c2:07:47:d1:2f:76:5f:19:dc:
         ef:8c:f3:59:5f:75:de:3b:85:31:24:6e:45:83:fc:34:1b:4c:
         62:24:e3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----