Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/fc21010d-fc1b-319c-afe9-60d63166d1ef.roa
File:                     fc21010d-fc1b-319c-afe9-60d63166d1ef.roa (raw, json)
Hash identifier:          Ta/T31N4S+S8Srd5sGJ3NSnaT7QIvj1lUeZuK4LSST8=
Subject key identifier:   0D:57:80:C9:5E:3F:50:07:3B:7B:6B:86:24:0F:5D:D7:97:A9:3C:EF
Certificate issuer:       /CN=b3a75266-06ce-463f-bfbd-1da0c867f18a
Certificate serial:       010D0C9F4328576D51CC73C042CFC166AC735A75
Authority key identifier: BB:30:9A:65:E0:81:49:49:64:B4:87:E8:4C:93:36:77:10:84:CC:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/fc21010d-fc1b-319c-afe9-60d63166d1ef.roa
Signing time:             Thu 25 Oct 2018 18:18:52 +0000
ROA not before:           Thu 25 Oct 2018 04:00:00 +0000
ROA not after:            Tue 25 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        198.177.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:ac:73:5a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3a75266-06ce-463f-bfbd-1da0c867f18a
        Validity
            Not Before: Oct 25 04:00:00 2018 GMT
            Not After : Oct 25 04:00:00 2022 GMT
        Subject: CN=56700c76-bb0b-4d1e-9e27-2145ce3b9044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:87:70:39:d6:22:df:34:79:b0:84:2d:46:
                    8c:79:64:19:23:dd:cd:1e:02:2f:f7:af:09:27:57:
                    55:88:2b:ad:80:71:80:d3:81:94:2d:2f:55:41:34:
                    fe:e2:37:47:2a:bf:10:13:00:6e:fd:38:57:96:14:
                    e0:77:fd:e3:20:52:96:3a:2b:66:62:60:74:0d:21:
                    eb:47:23:19:8b:a6:9f:b8:35:e6:cb:aa:c8:ee:b3:
                    9b:9a:71:6e:d9:fd:a0:08:d9:f5:d9:2b:ae:7a:29:
                    fd:2f:80:dd:8a:13:e7:f1:9f:c1:d5:98:1d:94:56:
                    82:66:89:97:28:22:93:41:07:fa:df:74:6e:c6:8f:
                    64:88:68:57:94:0d:9a:a5:a5:bc:30:89:6c:c5:98:
                    35:bb:f1:46:6f:53:89:ed:ee:a3:71:31:cc:67:90:
                    77:9b:14:c1:26:2c:7b:66:e5:43:fa:8d:d7:62:81:
                    16:c5:c4:8e:26:39:17:5d:eb:34:ea:f5:8a:93:84:
                    8e:76:04:b1:dc:22:65:92:92:c7:4a:fd:1e:0c:3b:
                    50:47:86:2c:3d:65:8c:40:9e:e0:28:75:bf:83:b1:
                    68:a2:93:40:8a:8a:21:86:81:36:16:f9:7e:06:91:
                    0e:8c:d8:11:f6:88:e5:2c:96:72:ba:f0:00:f4:41:
                    25:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:57:80:C9:5E:3F:50:07:3B:7B:6B:86:24:0F:5D:D7:97:A9:3C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/fc21010d-fc1b-319c-afe9-60d63166d1ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/b3a75266-06ce-463f-bfbd-1da0c867f18a.crl

            X509v3 Authority Key Identifier:
                keyid:BB:30:9A:65:E0:81:49:49:64:B4:87:E8:4C:93:36:77:10:84:CC:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ba:5c:e1:92:51:5c:ea:72:07:93:c1:18:bd:25:78:a9:2b:
         a7:e1:c5:f8:7b:2a:cf:89:b1:e3:13:55:38:f6:47:af:b8:42:
         9a:88:8b:78:bc:7e:ab:3a:27:38:11:ef:6d:41:7d:b6:86:dc:
         e5:1e:31:3c:13:7e:72:09:88:15:9d:1e:04:fb:d5:c6:b8:b7:
         b9:27:a8:18:79:2c:c3:8f:05:a5:f6:8f:1b:cf:1f:0f:59:32:
         4a:18:40:be:58:31:ea:b6:0d:7c:4b:68:d1:3a:b6:d1:db:e9:
         7f:2a:c1:33:d7:3e:e3:72:c2:40:21:84:d3:bd:43:1b:4b:dd:
         76:78:7f:08:9a:7e:d1:ce:31:9b:5e:03:52:f5:cd:72:4a:9e:
         86:47:e5:2a:9d:11:66:8d:4a:f6:a8:86:df:7d:17:42:cd:d7:
         51:98:da:4f:30:42:77:22:2f:21:ac:f9:e2:7c:5f:12:8b:c9:
         db:75:b5:63:5d:02:25:00:27:e9:9a:f3:eb:73:ac:76:4f:b8:
         f4:0a:cf:b6:a4:48:42:d6:81:48:c6:1f:37:1c:84:4d:b0:ae:
         65:19:4c:90:cd:ed:51:99:d0:89:c6:8a:66:85:43:79:fa:7c:
         8d:13:10:84:16:01:bb:d7:fd:e8:be:88:bd:e7:e2:2e:25:b6:
         f0:a2:f0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----