Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/795722a2-773a-3ee3-8580-340f9ebd9654.roa
File:                     795722a2-773a-3ee3-8580-340f9ebd9654.roa (raw, json)
Hash identifier:          02uWQYG/C2mYvH5UVrSVVQ6NWjF1GG7efScHNLSZo1w=
Subject key identifier:   CE:BB:A7:72:3B:A3:0C:71:25:AA:27:82:E8:F9:70:0F:1A:52:A7:DB
Certificate issuer:       /CN=49aa3661-0fa7-43a8-937b-3dbcc28b39d5
Certificate serial:       010D0C9F43285838891EAB0586499C40AE972100
Authority key identifier: BC:D1:5B:DC:4C:F1:27:56:D4:0E:CF:F0:CE:C6:EC:7A:B5:B1:DD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/795722a2-773a-3ee3-8580-340f9ebd9654.roa
Signing time:             Wed 22 Apr 2020 04:00:00 +0000
ROA not before:           Wed 22 Apr 2020 04:00:00 +0000
ROA not after:            Wed 12 Apr 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        216.152.66.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:89:1e:ab:05:86:49:9c:40:ae:97:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49aa3661-0fa7-43a8-937b-3dbcc28b39d5
        Validity
            Not Before: Apr 22 04:00:00 2020 GMT
            Not After : Apr 12 04:00:00 2023 GMT
        Subject: CN=9f5508d4-058f-42e6-9ba2-24dc3b4f846d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:fa:c1:b8:cb:2d:98:e8:e5:90:d4:06:a8:
                    7f:2e:1c:d3:4d:1b:ba:f6:71:dc:ce:30:7c:7e:69:
                    46:6a:83:a8:ee:86:71:4e:6f:b4:2f:7d:2e:ef:f6:
                    0a:36:2b:01:d5:4f:17:f1:5b:b9:df:ce:aa:90:3c:
                    f5:1a:d1:13:7b:67:92:1e:6b:00:9b:ec:c9:1e:a9:
                    e1:ea:95:0a:7d:00:01:c6:8b:be:fb:db:bb:67:b8:
                    48:b1:a7:9d:59:a3:4a:35:45:c6:15:73:b4:43:22:
                    d1:11:58:f4:99:e8:11:f8:0e:90:5a:80:29:14:3c:
                    fc:31:1e:17:b7:b5:bd:a3:fd:69:79:04:19:c0:b4:
                    c9:a4:48:a5:6c:15:93:6f:00:50:f8:9e:0c:27:f7:
                    88:30:01:50:07:19:14:4e:c4:3d:73:c5:c5:0a:0c:
                    d5:7d:bd:df:85:1c:39:96:ef:5e:2b:17:a3:29:0b:
                    5b:23:12:45:da:5f:5d:2c:95:fd:5d:db:58:39:c1:
                    b2:e7:7c:af:03:f2:10:28:96:77:d8:59:42:f3:d0:
                    08:24:89:f4:94:e1:4e:80:77:68:69:57:fc:ee:c0:
                    99:92:8b:f2:70:59:c9:78:19:79:4b:08:d9:08:e5:
                    c2:97:e2:4a:d1:61:ce:3d:c1:b8:24:b6:15:4c:da:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BB:A7:72:3B:A3:0C:71:25:AA:27:82:E8:F9:70:0F:1A:52:A7:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/795722a2-773a-3ee3-8580-340f9ebd9654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D1:5B:DC:4C:F1:27:56:D4:0E:CF:F0:CE:C6:EC:7A:B5:B1:DD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.152.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:b8:f8:85:38:da:68:a1:c1:91:a7:84:b8:92:ca:1c:d9:1a:
         6e:c7:c6:f9:fe:ab:bb:75:66:ab:ae:49:6e:b8:6a:d7:c8:1d:
         3e:59:73:6c:a8:70:d8:b0:f6:92:05:73:42:23:c9:b1:83:52:
         ea:97:bc:30:bf:f7:52:2d:36:c9:e8:f7:05:fa:5a:04:c1:4e:
         de:bc:15:c4:d8:5c:c6:38:fc:5d:7e:22:1e:63:80:76:cb:8f:
         cb:db:70:ff:00:b1:15:52:3a:1c:5e:83:24:bd:81:d9:92:6c:
         ea:6c:15:5a:7d:4d:b9:11:b2:d0:88:c5:dc:9a:fc:9f:00:9a:
         cc:0a:de:7b:af:da:9b:78:f2:ac:4d:e1:75:af:86:0d:d0:04:
         01:5a:e0:3e:63:35:6e:f4:13:c8:26:8e:44:7f:fc:50:c4:db:
         47:49:1a:e1:4b:c0:58:12:5f:2d:8e:94:5f:90:71:df:e3:79:
         c4:9f:eb:d0:70:fb:60:a5:a0:3f:b0:73:38:36:ea:f5:5d:5e:
         ef:f2:6d:e1:04:10:29:4e:9c:cc:f6:09:ae:49:bc:a3:09:a2:
         af:e9:f3:8a:d0:0a:e8:ec:e2:08:44:70:a1:71:d5:c3:f1:bb:
         64:80:c1:a9:ed:d1:b9:31:61:f5:6c:6e:7f:1b:59:80:db:a3:
         fb:a2:bd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----