Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/4a99e6b5-2a55-38cd-ac7c-9f9c4416be50.roa
File:                     4a99e6b5-2a55-38cd-ac7c-9f9c4416be50.roa (raw, json)
Hash identifier:          ngF6XH+bpEkX1DbxKgVNIoAfr85CQkaT86lm9NR0l0Q=
Subject key identifier:   76:A0:D9:93:CF:9B:85:F5:23:AA:4E:54:16:D4:DD:B1:A8:4D:63:DA
Certificate issuer:       /CN=1dd142d7-5311-487b-9c11-f16950e4d57d
Certificate serial:       010D0C9F432858380364B8C99CC606E0992D56E0
Authority key identifier: 47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/4a99e6b5-2a55-38cd-ac7c-9f9c4416be50.roa
Signing time:             Fri 20 Nov 2020 05:00:00 +0000
ROA not before:           Fri 20 Nov 2020 05:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        173.241.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:03:64:b8:c9:9c:c6:06:e0:99:2d:56:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd142d7-5311-487b-9c11-f16950e4d57d
        Validity
            Not Before: Nov 20 05:00:00 2020 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=7aa9c531-cd62-4aac-9be3-b0a43c5f0176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:5d:4c:73:79:7f:b5:6c:eb:7c:c0:c2:fb:
                    3a:f8:ad:f5:ae:dd:d4:06:a5:57:63:cf:41:fc:56:
                    06:b8:5d:65:ad:d0:ec:b0:80:3d:a2:13:b7:12:bc:
                    8a:b3:28:38:df:c4:0f:f2:96:17:32:72:70:53:d8:
                    c9:9c:41:f6:fd:e3:f9:48:90:de:0b:bc:87:bb:23:
                    a5:66:51:cf:46:42:a5:65:33:4c:69:0c:39:ac:5d:
                    c8:2f:15:5e:98:6b:2b:e8:55:a0:8a:08:9b:af:7b:
                    3c:62:a7:0b:0a:fa:7f:c8:86:38:fb:ad:6d:88:8f:
                    3e:17:93:bb:f0:e1:79:7d:46:38:cb:2f:e2:88:03:
                    1b:d3:d6:9f:49:2c:98:14:2e:3d:c4:47:f0:2f:e5:
                    58:06:63:e4:a3:96:c7:e7:b7:5b:74:d6:6c:ee:10:
                    95:ee:67:f9:70:07:de:c5:8a:60:8d:83:16:25:c5:
                    5b:bb:87:e6:e9:5d:a2:b9:ef:8d:fd:60:74:03:0d:
                    ad:7a:93:11:8d:96:37:e5:fd:62:e9:29:74:6d:38:
                    40:23:42:3a:ef:95:51:6c:dd:2c:1a:e6:5d:e7:2b:
                    21:3f:64:5f:6c:a6:10:f8:25:a3:a7:8f:52:26:86:
                    88:b3:b0:fe:89:6a:92:7e:9a:54:5b:62:f8:a8:19:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A0:D9:93:CF:9B:85:F5:23:AA:4E:54:16:D4:DD:B1:A8:4D:63:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/4a99e6b5-2a55-38cd-ac7c-9f9c4416be50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl

            X509v3 Authority Key Identifier:
                keyid:47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:96:67:5f:b7:3a:16:26:c4:c3:15:9e:41:43:c2:32:14:87:
         f3:ee:f3:01:55:2d:d3:d3:eb:1d:5f:8d:67:fd:a7:06:86:7a:
         15:c0:07:89:8c:a9:fe:79:b6:53:c0:b4:b5:af:f8:37:78:61:
         97:d2:0c:51:e1:37:0c:8d:c8:4a:b0:b7:f3:24:f2:7a:80:31:
         3f:4b:0c:d5:72:2b:b9:b3:5e:02:b3:52:5d:2f:92:37:2a:9b:
         b6:92:e2:1c:85:7e:9c:cd:3a:4d:d7:28:d3:85:9c:81:54:45:
         eb:56:ba:0e:27:bd:5c:fd:50:34:bc:40:1e:e0:a9:d8:90:8a:
         f7:8d:fe:a3:ad:74:fc:4b:bb:9d:3d:8b:f8:ec:28:49:28:cd:
         d2:64:97:d8:8d:82:12:80:3e:6b:44:18:7e:68:f3:d6:a1:ce:
         2c:0c:80:83:20:2d:86:f9:b2:93:06:df:8d:23:5e:4e:c0:fd:
         5a:77:97:e9:1c:bf:65:38:c2:d5:66:e6:f5:15:3d:b5:64:9a:
         5c:22:7b:7a:50:7b:f5:c9:9b:73:4c:94:37:f0:8a:c8:7a:72:
         5c:95:d4:ad:3a:00:f4:e0:1b:39:07:38:f7:81:0e:a2:84:9d:
         c2:5f:ed:de:6a:b9:42:fd:a8:45:6a:ca:71:ee:6b:f7:7b:08:
         ec:87:d2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----