Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/ca49e400-8a19-3c3b-ba30-c975e2a20f30.roa
File:                     ca49e400-8a19-3c3b-ba30-c975e2a20f30.roa (raw, json)
Hash identifier:          QCO1lLPw5G9tpCDHYZGymzG91fFkRLpfeMdgycuwnmk=
Subject key identifier:   2E:8A:ED:D5:8F:31:7F:65:15:DF:7C:A2:E2:54:55:6D:98:1A:06:40
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328583C4FBF977B4DB3074C8B71F7C0
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/ca49e400-8a19-3c3b-ba30-c975e2a20f30.roa
Signing time:             Thu 12 Apr 2018 04:00:00 +0000
ROA not before:           Thu 12 Apr 2018 04:00:00 +0000
ROA not after:            Sun 24 Mar 2024 04:00:00 +0000
asID:                     47553
IP address blocks:        199.15.76.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:4f:bf:97:7b:4d:b3:07:4c:8b:71:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Apr 12 04:00:00 2018 GMT
            Not After : Mar 24 04:00:00 2024 GMT
        Subject: CN=e270fa6a-29ac-4d4e-a3bf-1e44122fa18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:cc:93:e4:ce:63:79:cc:47:16:80:0c:06:
                    43:55:05:50:35:1b:5e:66:94:99:00:5e:6c:ab:66:
                    99:9c:d8:9c:97:07:0c:a4:9f:58:c9:02:3a:00:47:
                    9a:bb:42:c5:43:81:fe:ce:3a:9d:6b:be:31:f6:68:
                    2f:a1:e5:08:20:68:b6:32:bd:93:f7:19:8e:85:58:
                    fe:5e:e4:f8:7b:ee:e6:e3:05:77:df:1a:e3:73:59:
                    e3:4b:70:06:6a:aa:1b:d9:25:76:f9:52:75:b0:96:
                    69:d2:5e:87:43:76:45:6f:a4:74:35:f9:9e:9f:99:
                    49:d7:3f:02:08:3e:dc:6a:02:87:bb:22:8a:9e:33:
                    9f:88:5d:2e:99:12:5d:2d:62:32:48:e9:08:66:04:
                    8b:af:1c:85:ff:23:0c:64:69:ca:fd:f8:c0:6d:fa:
                    c9:2a:ed:de:5f:47:0c:b4:07:b9:a6:dc:7f:33:e9:
                    d9:40:43:6d:09:e8:be:40:fc:cd:5e:3a:c7:7b:a4:
                    8e:b2:e9:c3:a0:41:5c:01:0b:fa:38:6a:e9:ad:f0:
                    90:fc:32:d3:cf:08:6f:ff:46:09:12:fb:e7:24:bf:
                    03:c0:61:ef:dd:d4:b1:4b:68:ca:40:cf:e5:20:95:
                    12:08:b3:64:76:de:f4:9a:c0:c0:2d:07:e3:87:da:
                    76:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8A:ED:D5:8F:31:7F:65:15:DF:7C:A2:E2:54:55:6D:98:1A:06:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/ca49e400-8a19-3c3b-ba30-c975e2a20f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:48:ee:79:e8:30:fd:1d:53:56:95:9c:13:4a:d4:b2:0b:51:
         f6:63:ac:24:63:86:a5:e2:cb:09:f3:1f:c2:e9:dc:b6:13:94:
         39:19:fc:24:2c:f7:89:62:02:5b:38:da:ef:4b:28:36:d9:c3:
         5c:98:33:85:2d:9e:be:b4:c3:29:49:b8:a1:17:eb:35:ba:24:
         d9:f7:d0:e5:3e:4d:97:7f:25:ae:79:1e:7b:9e:a3:bd:6e:07:
         9d:0b:92:c2:1f:4d:d2:fb:11:c3:59:61:ee:5b:87:f5:d4:72:
         ac:95:b0:90:05:0a:ed:52:44:e0:25:01:a2:0a:9b:5c:8c:cb:
         14:bb:2e:56:fc:ce:1b:3c:ae:37:61:4a:5d:05:db:f0:ef:73:
         8b:1e:fa:38:08:09:ad:91:2d:50:76:fe:39:61:7c:ca:42:30:
         70:69:c9:44:df:16:5e:62:47:e1:b3:8b:25:82:65:8f:f3:30:
         d8:db:c8:fd:7c:d7:31:ad:a1:08:09:f4:84:16:f4:46:f0:8d:
         16:0a:06:42:50:f9:96:4a:5d:1e:7e:a3:51:5a:9e:31:71:a5:
         8e:85:5d:4b:23:cd:8e:33:94:eb:3a:40:5c:91:32:84:77:f4:
         ea:ca:3a:3e:e8:f0:ff:1a:fb:25:76:94:1f:a0:7c:ba:69:89:
         39:58:15:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----