Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/f989b94d-ba9c-3b8b-b5c6-140864efb7d3.roa
File:                     f989b94d-ba9c-3b8b-b5c6-140864efb7d3.roa (raw, json)
Hash identifier:          W634fwZtLV14ojTHi+28EjKDefW4VnhpF0QF7EINOiY=
Subject key identifier:   49:2F:FF:BB:23:DA:E9:C7:47:B2:C2:AA:9D:99:AE:FC:FD:95:25:2C
Certificate issuer:       /CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
Certificate serial:       010D0C9F4328576D51CC73C042CFC16C10EABDCA
Authority key identifier: 2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/f989b94d-ba9c-3b8b-b5c6-140864efb7d3.roa
Signing time:             Sat 20 Jul 2019 19:45:15 +0000
ROA not before:           Mon 08 Apr 2013 04:00:00 +0000
ROA not after:            Sat 08 Apr 2023 04:00:00 +0000
asID:                     55079
IP address blocks:        198.176.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6c:10:ea:bd:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
        Validity
            Not Before: Apr  8 04:00:00 2013 GMT
            Not After : Apr  8 04:00:00 2023 GMT
        Subject: CN=9b00e566-c97a-4a8d-b911-9e1d1681fc6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:92:cc:a6:37:08:b6:79:80:ad:4a:a6:6a:90:
                    c1:f1:e6:07:40:a0:72:bd:54:e8:dc:6f:c8:05:97:
                    a8:02:72:39:91:07:64:70:9c:c3:20:7b:b2:aa:4a:
                    a0:4b:40:61:3d:92:15:ec:73:b1:a9:b0:99:71:42:
                    71:4c:18:ae:d5:22:48:5c:d1:e6:9c:4f:77:25:e4:
                    96:1c:73:06:c1:ff:30:ee:22:32:e5:44:b5:98:ed:
                    a6:f9:ba:fb:d0:58:a2:46:74:3a:5d:81:ec:9c:7d:
                    af:78:00:b8:21:4a:f0:6a:58:bd:ad:3c:c1:d3:9e:
                    58:b7:15:4e:fb:88:f2:9f:61:99:92:f3:42:c2:75:
                    2c:d6:24:7a:c3:2a:1e:e7:26:5d:df:ad:28:35:ab:
                    02:e4:77:67:82:d5:1c:36:74:9b:ef:fa:b0:8b:e5:
                    f9:53:7a:9d:21:3d:16:7e:36:fd:29:22:08:a8:e2:
                    7d:fd:eb:4c:8e:05:ad:91:6f:be:69:d7:53:5f:b4:
                    ec:37:15:7d:cf:75:94:c5:12:5c:c5:de:b4:fc:85:
                    ed:c1:a3:ce:b4:6d:e7:9e:dc:02:c3:c4:0d:35:5f:
                    10:4c:cc:a3:06:53:e6:71:e9:56:d7:11:ca:fc:2e:
                    99:b2:8e:f8:8b:de:32:67:93:c6:2c:8d:d1:23:99:
                    2e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2F:FF:BB:23:DA:E9:C7:47:B2:C2:AA:9D:99:AE:FC:FD:95:25:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/f989b94d-ba9c-3b8b-b5c6-140864efb7d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl

            X509v3 Authority Key Identifier:
                keyid:2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d2:6a:cf:25:eb:23:2b:46:3c:51:08:94:65:91:b9:32:f9:
         25:74:9c:a3:09:d2:8b:3e:2f:c4:aa:91:0f:55:ac:01:c4:b1:
         3b:6e:a9:b4:9a:f6:8c:55:e7:a9:2c:67:9a:93:eb:96:89:34:
         98:b4:a9:16:e3:8a:29:20:10:37:a3:00:37:ef:31:df:a8:f5:
         03:1e:86:ca:00:d5:a9:f1:a4:a5:0e:d0:bf:db:26:87:cb:5d:
         b5:4d:44:03:0c:5b:ee:03:33:61:12:d0:5c:62:3e:66:ad:45:
         fa:18:69:89:46:a5:eb:65:b3:25:2c:5a:c1:b5:e2:84:60:3a:
         b8:f0:f7:76:2f:b8:76:51:77:aa:ba:77:36:02:f6:ec:00:a9:
         b3:8f:e2:54:93:0b:88:f7:ff:40:cd:78:1f:55:42:90:8b:ce:
         3a:e8:1b:9d:f0:7d:64:70:dd:f0:bb:ff:bf:bc:93:21:60:60:
         d4:29:9d:3a:01:32:3f:58:91:11:7a:bf:ab:b2:c4:c1:ac:f2:
         c4:de:3e:f2:d0:8e:6c:fc:9e:a2:50:74:6d:47:bf:35:71:69:
         2d:fb:09:9c:b1:85:19:9d:28:3b:96:aa:c9:46:93:36:56:29:
         a1:3c:e5:74:51:00:6c:61:10:a3:a9:50:d3:68:0f:b7:ce:73:
         c8:a7:15:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----