Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/b9d3c935-1a9f-3229-bc9f-d0e80592eb56.roa
File:                     b9d3c935-1a9f-3229-bc9f-d0e80592eb56.roa (raw, json)
Hash identifier:          BkIZs2r1WbyP9OSAVwMbFkE86A4WDs7cPi+Er86c+r0=
Subject key identifier:   BF:D2:B1:F0:04:F4:54:96:06:86:DF:03:42:BB:7F:5C:86:D1:98:74
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328576D51CC73C042CFC171D08EC64E
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/b9d3c935-1a9f-3229-bc9f-d0e80592eb56.roa
Signing time:             Fri 01 May 2020 14:05:50 +0000
ROA not before:           Fri 01 May 2020 04:00:00 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     47050
IP address blocks:        173.224.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:d0:8e:c6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: May  1 04:00:00 2020 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=92040810-4495-4a8f-83e6-b7dc65b7b7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a4:fd:ca:b1:ba:8b:d6:8c:af:c6:07:5e:9e:
                    da:cd:e9:19:c5:ad:51:34:94:5e:88:5f:ee:00:2b:
                    96:83:dd:1f:5a:c8:34:4a:9a:50:ba:78:e2:ca:e2:
                    e4:2d:54:67:2c:5e:9e:a6:62:e1:a2:79:aa:8a:33:
                    3b:6b:ec:0c:24:a1:c2:05:cc:a8:ea:4b:4a:ce:58:
                    09:be:18:a3:4c:93:0d:40:5f:32:f2:87:4c:39:7f:
                    8e:fd:36:da:34:b3:fc:91:a3:36:2e:50:44:47:e3:
                    2a:18:aa:e7:d4:e2:bc:94:ac:49:23:f5:55:2b:70:
                    5b:e4:9c:b3:3f:8c:58:dd:8a:d7:06:f7:42:fb:1e:
                    04:8c:10:77:63:53:8a:6e:61:23:68:5c:ea:e8:ea:
                    01:3d:c3:c4:ad:43:d1:6a:9f:5f:28:ba:1b:e6:51:
                    9c:95:62:02:ed:b7:36:28:74:ab:2b:1b:ba:14:a9:
                    82:44:3f:ce:1f:b7:67:df:08:2f:d1:31:05:f7:23:
                    78:60:e6:8c:9b:53:ae:74:51:41:29:7a:96:4b:fc:
                    cc:55:68:46:aa:96:44:a4:de:9a:f7:7a:6f:23:38:
                    4a:2c:f4:fe:58:bd:06:f4:01:7c:88:58:d5:7d:3a:
                    bb:ad:7f:f1:33:11:de:6f:d2:43:7b:df:06:82:47:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D2:B1:F0:04:F4:54:96:06:86:DF:03:42:BB:7F:5C:86:D1:98:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/b9d3c935-1a9f-3229-bc9f-d0e80592eb56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:6e:52:27:65:c4:49:54:bb:c7:e9:78:ef:fc:aa:87:91:1c:
         75:95:b8:b6:17:3a:94:ce:7d:2d:b2:70:cb:97:51:7c:a0:9f:
         67:ef:9c:10:59:c3:95:3d:89:30:15:f8:5a:06:12:f3:8a:cd:
         c3:0d:29:36:32:1e:97:b1:de:a7:ac:db:4d:8c:49:40:7a:d5:
         45:ef:80:6a:55:ba:e4:3d:64:bb:23:69:61:d6:43:f0:3f:a4:
         57:e0:52:43:61:3e:52:28:b9:a9:ad:3e:39:f6:cb:ff:e8:45:
         33:fb:07:b1:61:c2:4e:82:1a:4f:81:63:c7:86:87:ee:cc:97:
         8b:ae:b2:6c:2b:f8:72:66:d9:ca:ae:93:a7:54:57:0c:63:a8:
         94:58:79:ea:de:d9:c2:c2:ea:07:b9:7b:17:ef:e8:b0:43:cc:
         35:76:4e:8e:99:77:4a:45:83:76:b4:fd:60:54:b0:4c:e6:ef:
         07:18:62:61:fb:59:cf:9d:75:10:f8:e3:7c:22:63:f1:5b:6e:
         b7:f1:38:cf:74:6e:79:fe:a4:7c:e7:7c:34:5e:05:40:a5:38:
         a6:3d:e5:f4:50:03:47:32:fa:9e:a0:ec:f8:d2:8c:b3:a0:ad:
         33:54:ae:2f:99:9e:2f:2d:46:ba:9e:c6:8c:c0:bb:7f:62:e1:
         f9:86:db:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----