Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7bc94555-5a30-324f-8190-2740e05760af.roa
File:                     7bc94555-5a30-324f-8190-2740e05760af.roa (raw, json)
Hash identifier:          L7l10+i0F09QOscgiWDAwEYiRKXyvA8fsQt83ddZ0No=
Subject key identifier:   68:9C:02:2E:15:D4:20:30:F7:58:9B:95:D2:5C:28:F1:51:E9:7F:66
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC171DC75A193
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7bc94555-5a30-324f-8190-2740e05760af.roa
Signing time:             Sun 03 May 2020 21:33:48 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     3949
IP address blocks:        204.141.228.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:dc:75:a1:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=cb1386d6-342a-4d88-a848-8bc8e814ce12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9f:87:56:56:2e:61:f1:74:e3:32:f6:52:0c:
                    5c:6b:fe:4f:87:d7:f2:82:dc:ad:5d:23:1a:07:d1:
                    45:da:71:f8:3a:7d:03:09:0b:ec:8f:5b:1e:3d:0e:
                    2c:90:f6:60:a3:3a:1a:ef:73:1a:42:a2:08:83:89:
                    d6:b1:14:79:af:bb:80:b9:ec:84:e2:9a:6e:c9:9d:
                    96:14:3f:7a:82:1c:a8:02:03:92:6d:f1:b4:06:eb:
                    34:7c:26:0e:55:95:70:86:22:f0:5e:21:fc:42:8f:
                    e4:d5:ff:bf:fc:83:cb:18:3a:7c:56:69:b1:7f:77:
                    27:d3:b1:b5:f7:74:8f:ac:e8:48:46:ea:1d:56:d5:
                    29:e1:54:bf:29:a2:9e:f2:09:a2:55:12:b5:55:bd:
                    4a:b9:e4:95:1c:e0:6c:36:f7:4e:ac:1d:13:43:e1:
                    a0:62:e6:fe:0c:ff:c5:e7:df:42:fb:f2:3c:72:21:
                    d1:0c:f6:27:1d:b3:86:d8:37:be:84:b0:43:79:d2:
                    35:51:70:d7:e8:e5:77:36:6a:bc:3f:6c:43:b2:e3:
                    ed:35:b8:aa:f7:5a:ed:51:82:16:ce:5f:6e:17:31:
                    0c:d1:b6:2f:4d:59:80:50:d4:cd:50:e9:6d:ba:d8:
                    b3:16:46:df:df:26:18:17:1b:2e:96:4d:03:ac:59:
                    72:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9C:02:2E:15:D4:20:30:F7:58:9B:95:D2:5C:28:F1:51:E9:7F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7bc94555-5a30-324f-8190-2740e05760af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.141.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:de:82:1f:51:b9:33:17:46:d9:9a:c4:33:bb:46:5d:22:77:
         b8:ed:5f:aa:2e:1a:67:93:8b:c9:63:f7:69:bd:3f:47:35:83:
         7f:9b:90:0b:2b:8e:fa:8b:cf:e2:9a:69:e9:91:38:5b:03:5f:
         5d:ea:d6:2b:b7:05:83:ce:c3:ff:03:24:8c:77:69:1a:77:38:
         83:4e:3a:70:51:be:4e:da:e6:b3:8a:00:5a:7a:74:fa:3e:c4:
         3d:c8:9a:70:e1:eb:c5:a8:28:4b:2d:3e:c1:9a:75:5b:ac:4f:
         1d:c6:32:58:7c:78:0a:26:82:df:36:ef:7e:2f:60:4c:e4:f4:
         38:75:fa:e8:ac:e2:c7:1d:ce:0c:94:57:db:92:69:be:d0:d9:
         22:fc:91:08:85:3d:aa:d0:70:2b:24:2e:76:ec:57:a9:9a:e2:
         1f:1c:5f:b8:e8:8b:a9:c1:7b:1f:b7:7a:3a:28:38:65:71:06:
         b3:b6:1e:f8:fb:50:bd:1c:2d:0c:5e:b0:ad:2f:6a:b4:dc:b0:
         dd:3c:1f:9c:59:df:a9:ad:33:eb:c6:33:7e:9f:72:7c:c8:e3:
         82:e9:64:b2:bd:13:fa:af:f3:5b:93:76:7f:41:51:aa:bb:b9:
         0e:c6:cc:d7:1a:24:2d:8d:1c:08:1c:62:c1:69:16:f8:35:16:
         56:15:3e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----