Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/77c41b47-0a1e-360f-8872-fd23caad4c4f.roa
File:                     77c41b47-0a1e-360f-8872-fd23caad4c4f.roa (raw, json)
Hash identifier:          7XkLd11qHZ3MMR7ub60shOkBvczrtL3EYxaBHjHvx3I=
Subject key identifier:   8B:05:14:0F:F0:F5:0D:C3:66:F0:84:4C:31:93:75:59:ED:E0:2E:C7
Certificate issuer:       /CN=12fa7453-6b85-412b-b280-7c71eec6c46b
Certificate serial:       010D0C9F4328576D51CC73C042CFC17348C94914
Authority key identifier: 6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/77c41b47-0a1e-360f-8872-fd23caad4c4f.roa
Signing time:             Mon 13 Jul 2020 15:26:57 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Sun 16 Oct 2022 04:00:00 +0000
asID:                     394356
IP address blocks:        134.195.44.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:48:c9:49:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fa7453-6b85-412b-b280-7c71eec6c46b
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Oct 16 04:00:00 2022 GMT
        Subject: CN=69764785-3ae2-4d8f-9866-9f8a77de8fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:50:0a:e5:db:0e:eb:66:df:de:09:9d:65:b9:
                    32:48:da:cd:5a:58:25:68:5c:6a:ee:20:25:8d:59:
                    37:3c:cf:8d:fb:8d:0b:95:b8:3c:51:e8:47:b8:0c:
                    71:e9:06:90:7b:e3:09:92:d5:62:88:8e:6e:f1:9a:
                    b7:33:cd:55:48:a5:01:86:1f:91:60:96:a2:0e:a8:
                    e4:d9:dc:97:fb:1b:d2:a1:90:be:03:bc:7d:b0:1f:
                    80:b8:2c:71:cd:94:c2:c3:7a:83:bb:4e:fa:1e:d1:
                    6b:c5:92:60:ba:d8:08:76:b9:93:46:4d:73:20:ee:
                    4c:e7:38:6d:d5:a8:b9:3b:fa:df:86:0d:9a:68:e5:
                    fd:f3:d5:52:51:8e:ff:ed:2c:71:10:71:22:49:80:
                    69:e6:f7:01:4b:12:08:ce:71:62:c2:28:16:d5:8d:
                    11:6f:92:e1:e7:19:f7:94:7d:1c:94:28:7c:a7:a1:
                    58:7b:44:d5:a5:6e:b5:a4:4d:81:a7:51:5e:0e:73:
                    a2:04:75:6f:90:f4:aa:f7:92:5b:22:9f:f9:b7:34:
                    a1:3f:3f:e7:4a:c2:98:77:0f:c9:c9:f1:34:d5:64:
                    75:40:66:fe:fd:71:cc:04:ef:bb:56:e4:f4:fe:17:
                    97:f1:d0:c9:87:cb:e9:7f:d2:f3:fe:14:7a:ca:e9:
                    af:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:05:14:0F:F0:F5:0D:C3:66:F0:84:4C:31:93:75:59:ED:E0:2E:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/77c41b47-0a1e-360f-8872-fd23caad4c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl

            X509v3 Authority Key Identifier:
                keyid:6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e2:0c:14:47:52:1d:e6:6c:40:a7:01:57:07:99:70:e3:1d:
         c5:ab:42:1a:44:3d:ea:b0:dd:dd:ce:59:7d:87:0b:79:94:30:
         7b:00:c5:e3:1e:29:c4:4d:27:84:88:ba:00:c1:07:83:39:b2:
         ac:a2:36:3d:e3:a7:22:6b:7b:eb:e9:a6:64:4e:92:c2:fe:6b:
         ea:b4:60:94:69:fd:96:45:86:ef:a4:a4:96:05:0a:cf:2e:1d:
         bc:53:55:9b:b1:e3:56:46:c4:46:bc:3c:fa:fa:c2:54:e6:0a:
         e1:8b:69:4d:b1:b9:5d:f6:33:4d:00:4b:4e:3a:1e:00:12:4a:
         06:e5:3b:3f:0d:f8:84:9d:fc:bf:12:80:51:9f:ec:85:7b:e2:
         58:09:10:aa:b6:8e:04:4d:92:4b:e1:d7:ee:ea:61:b1:2f:10:
         b4:78:c4:e1:45:0c:2d:8d:55:59:35:d0:4b:44:5c:ee:74:c3:
         24:c2:32:53:ac:77:3d:41:2a:da:b4:24:86:6d:41:a1:7c:4d:
         43:66:67:91:9a:2a:3d:fb:16:b7:e4:aa:17:1d:af:71:fe:49:
         89:5d:93:b0:cb:af:e7:99:5d:f5:ed:7a:3b:c1:bc:bc:0d:91:
         a9:a7:3b:b1:b3:7a:62:40:42:b1:32:f8:fc:de:a9:0c:07:74:
         15:7d:ec:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----