Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/f55a6a64-4253-3b18-810d-4960bc79ddd7.roa
File:                     f55a6a64-4253-3b18-810d-4960bc79ddd7.roa (raw, json)
Hash identifier:          RIGfKfRy51UTTH56bGou+/dYVd1+KQQREA+pcIRHgmY=
Subject key identifier:   F4:9D:22:D7:F6:CC:AB:B6:75:65:2E:81:26:BD:9C:F3:65:C7:65:68
Certificate issuer:       /CN=b3a75266-06ce-463f-bfbd-1da0c867f18a
Certificate serial:       010D0C9F4328576D51CC73C042CFC166AC727FF7
Authority key identifier: BB:30:9A:65:E0:81:49:49:64:B4:87:E8:4C:93:36:77:10:84:CC:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/f55a6a64-4253-3b18-810d-4960bc79ddd7.roa
Signing time:             Thu 25 Oct 2018 18:17:56 +0000
ROA not before:           Thu 25 Oct 2018 04:00:00 +0000
ROA not after:            Tue 25 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        198.177.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:ac:72:7f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3a75266-06ce-463f-bfbd-1da0c867f18a
        Validity
            Not Before: Oct 25 04:00:00 2018 GMT
            Not After : Oct 25 04:00:00 2022 GMT
        Subject: CN=c4f379f8-8125-47a1-9916-0572d1d169d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:f6:92:0b:ed:34:31:9e:35:f5:4e:69:fb:
                    45:62:41:88:06:35:70:3d:fa:70:0d:e9:8c:98:07:
                    12:2d:7e:b8:e5:7c:57:6f:29:04:84:8c:85:51:08:
                    e1:64:ec:43:fd:c5:97:d3:65:30:53:fd:1c:9a:68:
                    9f:2c:93:2c:b8:5c:2a:af:26:57:37:4e:07:e4:9e:
                    53:c8:7d:29:5e:74:c6:9d:81:5f:3e:4d:1c:24:7b:
                    81:10:88:45:77:a7:79:2d:e9:c3:f6:02:b7:37:dc:
                    f1:ce:7a:86:6b:84:4b:d6:01:db:f5:40:d7:bd:fb:
                    24:c0:15:da:28:1f:a2:07:e9:07:a1:2b:a9:f7:d3:
                    0d:b6:fe:8a:01:df:2e:d1:97:94:48:99:e4:80:3e:
                    07:8d:ea:9b:6a:88:8f:09:93:70:0e:cb:0c:29:17:
                    1d:c8:19:b0:5e:db:87:8c:1b:c6:ba:fa:ed:78:28:
                    f4:81:f5:42:b1:6c:5e:35:19:82:86:64:a7:ec:38:
                    36:dc:7d:59:0a:71:64:9f:3e:aa:b1:ff:7a:a7:ef:
                    e4:c3:5e:60:de:3e:c5:45:90:e3:aa:87:3a:12:3e:
                    98:14:3d:56:05:a5:33:25:08:13:a5:5d:cd:0e:9b:
                    be:22:64:bb:0f:72:ad:2a:ad:ec:fa:05:12:cd:08:
                    0d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9D:22:D7:F6:CC:AB:B6:75:65:2E:81:26:BD:9C:F3:65:C7:65:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/f55a6a64-4253-3b18-810d-4960bc79ddd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/b3a75266-06ce-463f-bfbd-1da0c867f18a.crl

            X509v3 Authority Key Identifier:
                keyid:BB:30:9A:65:E0:81:49:49:64:B4:87:E8:4C:93:36:77:10:84:CC:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:88:94:c4:e4:d3:ce:48:3c:0f:85:be:d4:cc:65:eb:09:21:
         c0:32:72:81:7f:5a:2f:43:e8:82:c7:07:e9:a2:7a:4e:88:c2:
         06:78:e8:09:69:73:5e:1d:6f:25:ff:78:ed:fd:37:78:b8:0e:
         7e:aa:58:12:22:18:20:17:bd:80:0d:70:69:42:92:2f:c5:af:
         54:a8:de:4a:e2:4b:3c:a9:93:ac:fa:a1:ff:32:99:41:5a:7f:
         51:24:6b:15:99:ff:71:a0:3c:03:cc:eb:d1:7d:e8:a2:d8:fc:
         f7:c9:32:97:2e:08:a5:d8:f1:7d:05:9f:56:16:f7:76:95:21:
         cc:ab:ca:38:f3:a8:86:1c:c7:c5:f9:95:31:e8:2b:9e:af:af:
         f1:62:3a:66:b1:b0:19:2e:75:35:0a:74:b7:3b:02:84:45:64:
         b2:6b:d0:83:1c:a0:32:13:ab:e2:6d:7a:5a:82:21:02:89:2d:
         db:c8:8e:32:d5:0b:22:d8:61:bd:43:a2:81:2d:66:73:7b:b7:
         5d:8c:ad:53:ac:a5:39:83:93:93:1a:31:33:0c:1c:37:ca:eb:
         74:d9:1b:e4:49:77:c1:56:df:c1:65:99:bb:b7:6b:a1:2b:03:
         62:03:0c:e4:65:bf:af:a3:66:7d:2a:ea:1b:e2:f1:94:c8:89:
         d5:35:5d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----