Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/54fd6a1a-9029-3d53-a026-187835d23cb4.roa
File:                     54fd6a1a-9029-3d53-a026-187835d23cb4.roa (raw, json)
Hash identifier:          wxDy2QaKy0VL/IzPT2DmhkMiQM7/ApsDi1rLsvPE1xs=
Subject key identifier:   AE:B0:00:8C:D7:A2:82:5E:9E:A3:E3:F9:0A:81:69:D4:A1:14:5D:7B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC170E96106FF
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/54fd6a1a-9029-3d53-a026-187835d23cb4.roa
Signing time:             Tue 17 Mar 2020 16:43:35 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 20 Jun 2022 04:00:00 +0000
asID:                     26896
IP address blocks:        198.172.48.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:e9:61:06:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Jun 20 04:00:00 2022 GMT
        Subject: CN=e7a9893b-6990-4036-ae56-650b72a64fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:f6:39:f2:8d:0d:bc:86:5b:43:00:52:b2:
                    14:d7:cd:9e:74:9c:d3:0a:c5:be:43:52:95:0d:e3:
                    84:33:e0:34:30:20:f6:55:06:e7:1d:c6:ec:b5:bf:
                    0f:be:96:0d:18:1a:f0:be:3a:14:53:e6:a5:11:c1:
                    ed:f2:f1:e0:55:16:83:ec:ec:65:ae:c4:88:52:78:
                    d5:f3:28:db:30:56:d1:06:40:25:c0:48:a4:a8:09:
                    04:af:5c:1a:de:89:7b:06:c6:05:6f:b4:85:c0:c4:
                    cb:f8:be:5a:e8:54:f0:e6:f1:9a:4a:8a:03:5b:3d:
                    5e:e7:b9:1c:cd:23:52:68:29:d5:67:32:77:0b:55:
                    ec:5f:64:74:e8:05:1f:55:2d:ee:96:9f:b1:00:8e:
                    85:7c:15:50:e0:0f:be:52:15:35:d2:db:79:b7:a2:
                    a5:6c:a5:b5:7b:87:3f:fc:21:1e:fa:16:ae:bd:57:
                    6b:04:03:22:d1:f6:49:3f:bc:74:3f:e8:10:92:46:
                    92:fd:12:25:af:94:e3:d2:55:f3:9e:fd:cf:46:06:
                    1e:5e:b8:b0:f4:2a:be:d5:5f:ef:81:c4:59:c6:62:
                    9e:09:d6:1b:4f:3c:f6:ef:5f:02:05:10:16:34:4d:
                    3b:96:dd:36:d1:4b:1f:fe:22:57:8f:98:52:e6:6a:
                    f3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B0:00:8C:D7:A2:82:5E:9E:A3:E3:F9:0A:81:69:D4:A1:14:5D:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/54fd6a1a-9029-3d53-a026-187835d23cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.172.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d5:44:96:4f:14:26:8c:93:9d:ba:3f:f6:36:b3:15:e8:71:
         4e:4c:fe:42:98:4f:c1:c0:0c:1e:b2:ec:c9:7c:f3:d7:6f:8f:
         95:f7:33:b9:9b:9f:49:e3:da:1b:6e:cf:80:33:a0:93:b0:f7:
         70:60:75:5b:c5:27:d7:8e:42:15:7d:46:8e:2f:0c:7b:de:17:
         fb:63:3f:7d:91:9e:7d:57:e1:72:ef:e7:95:c8:7e:ce:ee:a9:
         ce:02:41:62:14:2b:6a:ec:d8:98:48:33:a6:2e:69:ea:b8:06:
         65:d3:bd:8e:97:e6:1b:41:ab:45:04:8a:1d:ab:ff:42:32:dc:
         e7:06:0b:c3:72:8e:7c:05:2f:51:cf:84:b6:f5:09:ec:72:7e:
         1a:90:8d:18:fc:be:7d:cc:95:0b:5d:94:fc:79:3d:92:72:c0:
         41:e0:80:74:3c:c9:a0:d3:e6:5f:d9:44:81:1e:6e:2f:10:60:
         c8:5e:d9:02:89:45:72:12:ff:db:db:e7:bb:65:79:7c:cc:9f:
         da:93:8f:ba:e2:88:ca:99:c9:a6:2d:38:4c:8e:b7:6d:ca:f5:
         ac:fe:4f:53:15:4a:8c:94:b1:61:ba:0c:7c:90:8d:74:bf:82:
         32:3b:80:09:99:e2:14:23:04:8e:1a:6f:83:c8:4b:44:6b:23:
         8e:75:71:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----