Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f1eee1e0-c145-3e00-9a77-6b86f9baa09c.roa
File:                     f1eee1e0-c145-3e00-9a77-6b86f9baa09c.roa (raw, json)
Hash identifier:          O5Nd4SNln207ULVQG9Y1zBvxobi/T97fBuybMdAlMVQ=
Subject key identifier:   29:EF:39:F1:40:3E:5E:EB:02:F2:10:62:17:23:B3:BE:A9:90:E0:64
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285839608B1BADD5BD231D60150980
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f1eee1e0-c145-3e00-9a77-6b86f9baa09c.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Wed 28 Jun 2023 04:00:00 +0000
asID:                     396071
IP address blocks:        204.141.192.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:60:8b:1b:ad:d5:bd:23:1d:60:15:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Jun 28 04:00:00 2023 GMT
        Subject: CN=35caad0d-e573-4a1b-bfb6-2d7607952516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:eb:71:3a:6f:ab:ca:29:e8:e9:09:09:ea:66:
                    98:bd:56:9b:70:07:06:33:9a:c5:c9:96:0b:c8:db:
                    53:d6:6b:ee:2a:de:17:0c:ba:82:ba:65:13:27:de:
                    dd:74:b5:0c:15:9a:13:2b:33:18:78:65:67:27:65:
                    8e:08:6e:73:86:7b:9d:a3:f8:f4:c6:97:5e:47:7d:
                    e8:e8:50:c2:7b:74:64:0f:69:21:0d:ef:b2:d8:b1:
                    8e:7c:7f:e2:29:8b:2d:35:99:58:aa:28:f5:55:8d:
                    51:fe:ef:a4:58:96:5c:bd:d5:44:14:81:c8:04:76:
                    34:50:02:8c:93:0f:d3:c4:48:0f:17:c5:fe:b2:b4:
                    cb:65:4b:b9:ba:38:3b:66:e4:63:75:1b:66:1b:b3:
                    64:ca:e0:db:bd:94:97:b1:6c:25:3b:c9:85:45:61:
                    40:db:bd:ac:8f:d7:35:37:8f:f0:a1:d9:1d:32:12:
                    30:4f:5f:1c:62:d9:60:76:4a:b9:4e:f2:02:2d:2b:
                    53:6b:63:d9:30:05:98:17:ca:20:32:5c:a5:73:e6:
                    24:d8:07:03:84:ac:ce:ce:9d:06:0b:13:df:c5:d8:
                    76:25:0c:31:17:9c:86:eb:c0:92:3e:ac:ba:e5:fc:
                    17:2e:3c:19:e6:82:91:18:a4:0a:b0:ac:08:d3:5b:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EF:39:F1:40:3E:5E:EB:02:F2:10:62:17:23:B3:BE:A9:90:E0:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f1eee1e0-c145-3e00-9a77-6b86f9baa09c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.141.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:0e:01:4e:e9:00:fb:0b:04:27:ae:0f:f6:ba:e0:01:68:53:
         c0:03:8f:99:6f:b6:2d:7f:ed:db:f7:d1:ea:59:d6:62:5b:b5:
         9c:93:10:fe:e9:d9:46:18:95:6b:fb:86:7d:35:62:41:f8:c5:
         19:0a:f3:93:74:ba:ef:2a:7f:17:f1:36:c2:e1:b3:45:96:e0:
         a2:4e:92:4d:9c:61:e3:e3:e8:70:f5:16:e3:7a:be:5a:e5:49:
         b2:59:84:c6:c7:58:83:c3:38:7d:9e:2b:5a:58:c3:aa:4d:5f:
         0d:e9:27:17:69:aa:d2:f3:d8:f1:1b:11:6a:94:01:ec:8b:26:
         8b:ff:4a:a0:97:7b:1c:d1:ed:a1:fe:00:e5:44:03:ea:13:96:
         88:e1:d6:1b:79:40:dc:5f:18:f6:9b:de:ae:aa:08:fd:c8:5a:
         33:8f:d5:76:52:7a:13:70:51:01:04:36:7c:ed:80:6b:99:68:
         93:76:4e:49:78:b2:1a:09:bb:81:7f:af:17:9c:d3:04:99:ed:
         96:eb:66:5d:3d:e3:4e:f2:e5:8b:5b:10:60:c9:56:de:95:8f:
         3a:b0:02:19:4b:64:41:04:d3:8a:95:30:59:ea:1b:7c:da:e5:
         4d:e1:a1:a1:22:2b:ff:53:92:fb:d9:b2:d8:4a:bc:b5:7d:8f:
         ba:30:6d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----