Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/32e3076c-8d02-3855-9e63-f0027fb622a4.roa
File:                     32e3076c-8d02-3855-9e63-f0027fb622a4.roa (raw, json)
Hash identifier:          i1XKHTamFV1t4hd5y7LN1CkCGjEG2NCAjd4DCx6xZT4=
Subject key identifier:   CF:23:8E:D3:4D:DF:6B:4D:99:E9:69:59:DC:4A:83:87:E0:E5:42:B3
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F43285838C2D4A5E264F5621A35B2A542
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/32e3076c-8d02-3855-9e63-f0027fb622a4.roa
Signing time:             Mon 11 Mar 2019 04:00:00 +0000
ROA not before:           Mon 11 Mar 2019 04:00:00 +0000
ROA not after:            Wed 03 May 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        143.244.80.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:c2:d4:a5:e2:64:f5:62:1a:35:b2:a5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Mar 11 04:00:00 2019 GMT
            Not After : May  3 04:00:00 2023 GMT
        Subject: CN=8867ea8f-be23-416f-8005-eba3b2c3d334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6f:d8:73:d4:71:ce:e5:92:f0:7e:fd:69:2a:
                    f1:07:24:de:9a:75:32:47:05:76:7b:b4:ed:c7:d8:
                    ff:9b:71:83:bf:91:5d:88:ec:cf:3c:c0:69:e4:1b:
                    c7:69:1e:b3:56:53:99:b5:74:8b:d7:71:36:f8:fe:
                    76:ce:1f:98:7b:dc:43:35:9a:49:19:9d:7e:93:98:
                    9b:72:d2:1b:67:eb:ce:26:c0:24:1c:24:02:36:b9:
                    9d:44:cb:10:7c:ad:f7:a2:2f:8d:19:2c:9f:60:ff:
                    ac:6b:dc:b2:91:1f:a8:f1:1a:77:09:41:51:5b:83:
                    83:bd:ee:18:7f:75:5a:45:94:e6:6d:4d:d3:cc:31:
                    06:5c:40:ab:31:52:83:ed:13:1d:6c:ab:13:58:a8:
                    e0:e5:11:0b:d5:51:3d:dd:3c:85:47:83:71:85:79:
                    95:5e:07:6c:2d:2e:0b:3a:73:25:53:6b:de:37:e4:
                    d2:20:41:a0:e9:4a:23:32:af:4f:7e:8b:8c:fa:5a:
                    b3:f3:78:d4:58:39:a8:18:54:ab:b0:ce:35:02:e3:
                    dc:5b:85:4f:71:e1:bf:7c:49:44:50:56:dc:2b:79:
                    c6:a3:1c:6e:4a:16:a4:65:b7:25:15:95:be:61:82:
                    89:89:89:57:91:bf:2a:a8:24:ed:5d:ce:5e:36:00:
                    7d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:23:8E:D3:4D:DF:6B:4D:99:E9:69:59:DC:4A:83:87:E0:E5:42:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/32e3076c-8d02-3855-9e63-f0027fb622a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ce:59:10:a8:60:3c:5d:5a:38:e7:8a:64:bc:40:3b:82:43:
         e7:cc:87:3d:97:c0:24:1e:0b:a2:ab:fd:7b:69:b3:7f:68:00:
         a4:85:72:84:6d:73:9b:72:8f:b3:c4:e0:1c:98:c3:1a:b5:a9:
         0c:78:7a:81:78:0d:4d:1a:a8:9a:cb:1d:cb:bf:9c:15:fc:b7:
         88:36:87:c5:1a:37:a8:cd:67:d1:39:76:62:38:09:1d:90:aa:
         14:84:bf:1a:69:ac:52:03:63:5a:96:9c:38:d4:bd:c8:ee:fb:
         3a:22:86:3b:fd:d7:4d:16:4b:12:1b:ba:b7:09:b7:17:04:96:
         db:54:6b:87:d1:01:51:e6:62:40:97:f1:ad:ed:73:12:a8:aa:
         4b:26:95:87:62:df:5c:ee:7b:21:53:f0:73:db:60:7c:ae:71:
         1d:cd:17:21:ce:d4:b7:de:40:af:62:14:11:2c:44:82:75:75:
         f6:72:8c:30:6d:c3:32:15:00:ab:ec:1b:f3:32:1e:c7:ed:bb:
         ed:7e:0b:bc:8f:30:aa:2a:a9:b8:f5:2a:29:dc:12:c2:9c:e5:
         73:a8:6a:b8:a2:19:4f:94:84:45:f5:76:fe:a6:a0:82:92:cd:
         21:36:04:5e:6b:9d:c3:02:e2:51:88:fe:42:fd:27:50:44:e4:
         03:49:d9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----