Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/90321b03-2342-3b4b-84d0-6593e95afe3d.roa
File:                     90321b03-2342-3b4b-84d0-6593e95afe3d.roa (raw, json)
Hash identifier:          6PYXYcck5hQsgm/gLcjRCSRfctppYoVwVQeMsJE/bHw=
Subject key identifier:   B0:95:87:72:D4:0C:6E:8B:55:6D:1E:C1:DF:3C:54:98:2E:9E:E1:38
Certificate issuer:       /CN=2777da36-faff-4a3d-a4c5-1a6ce89b194a
Certificate serial:       010D0C9F4328576D51CC73C042CFC1722AF2CC71
Authority key identifier: E7:0D:6D:9A:55:D3:D6:4C:FC:9F:A8:21:DD:5F:19:99:24:8D:9A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/90321b03-2342-3b4b-84d0-6593e95afe3d.roa
Signing time:             Tue 19 May 2020 03:20:54 +0000
ROA not before:           Mon 18 May 2020 04:00:00 +0000
ROA not after:            Sun 21 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        212.8.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:2a:f2:cc:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2777da36-faff-4a3d-a4c5-1a6ce89b194a
        Validity
            Not Before: May 18 04:00:00 2020 GMT
            Not After : Aug 21 04:00:00 2022 GMT
        Subject: CN=15262e69-83e4-4b12-9e92-97965ea8ec36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:d9:bc:1d:8d:cf:7b:7b:a1:2c:eb:7f:5d:
                    15:b3:89:b4:c4:92:b6:e6:ca:18:50:5d:1e:f3:81:
                    1d:fd:a0:3d:2f:70:9e:a1:d9:8d:cb:19:0a:0c:15:
                    c5:1f:11:65:f8:ac:00:9d:7a:c1:d8:df:c3:45:c5:
                    ea:33:03:51:46:51:3f:2c:a1:0d:55:0b:f0:68:af:
                    72:83:70:fb:ea:22:f0:16:53:70:8b:bd:ac:87:c7:
                    a4:1a:57:d7:6b:77:03:e1:21:f3:30:49:3f:5d:1b:
                    bb:ef:f6:eb:33:77:87:34:e6:5d:97:6a:de:d1:03:
                    5f:3f:81:55:8a:b4:ee:02:f9:3c:f6:fa:0a:66:a2:
                    7f:50:08:b0:e3:ff:aa:40:50:d4:d4:0e:2d:6e:28:
                    cf:c6:7d:25:15:bf:bc:21:af:24:2d:7b:b7:e0:b3:
                    a4:ee:a3:c0:f8:48:81:1e:d9:3a:41:15:65:ef:b2:
                    ce:6c:a1:47:99:3f:d6:0a:ab:5f:df:dd:75:78:d3:
                    6d:d9:02:bd:cb:28:47:8e:79:8c:6c:12:a8:87:c1:
                    67:77:42:59:49:bb:f1:8f:44:07:54:b6:6f:3a:27:
                    56:16:58:4e:f2:84:a6:0c:a6:ac:80:38:c8:ea:e0:
                    8e:b7:a8:ea:e5:f6:44:f8:7b:76:e3:69:f0:f9:be:
                    f5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:95:87:72:D4:0C:6E:8B:55:6D:1E:C1:DF:3C:54:98:2E:9E:E1:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/90321b03-2342-3b4b-84d0-6593e95afe3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/2777da36-faff-4a3d-a4c5-1a6ce89b194a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:0D:6D:9A:55:D3:D6:4C:FC:9F:A8:21:DD:5F:19:99:24:8D:9A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.8.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:7d:91:ed:4f:6b:97:d5:30:6f:46:4f:ac:64:cd:10:bd:6f:
         22:b7:cb:80:50:5f:b3:b5:d4:64:4e:15:77:5e:cf:cf:18:b9:
         a5:dc:03:90:33:5c:78:01:42:9b:6a:0d:4b:af:69:1d:4e:46:
         b2:9a:3f:f7:f9:0a:c2:ef:a0:77:d4:aa:4a:04:dc:3b:bb:bc:
         76:1d:bc:10:12:7e:e7:cb:91:2e:47:d0:58:1d:a2:67:0e:ba:
         39:70:95:7e:fd:e2:fd:45:be:31:c4:9a:7e:72:c7:bc:62:1c:
         a4:bd:8e:c0:25:02:0e:b3:61:6a:d3:28:dc:36:2e:9a:2d:90:
         ce:1a:83:1a:bd:bd:61:47:dd:f7:8f:dd:a3:e3:69:59:1a:43:
         c1:e6:83:db:35:82:1b:d3:ad:aa:49:bb:0d:1d:04:c8:56:e2:
         9e:e9:bc:f5:e0:8b:81:59:1d:71:b4:3c:8f:f9:68:19:44:da:
         0c:2a:4d:98:ef:35:fc:dd:7d:7a:79:c6:40:e5:6f:c7:d2:56:
         6f:a3:9b:50:ce:5c:11:ce:fe:52:51:b5:5a:bd:3c:97:90:4c:
         16:ad:c1:75:24:e8:34:20:ec:fd:7a:60:ac:e9:b9:76:c0:d7:
         72:96:e1:be:85:fe:e7:a6:7d:e1:de:97:f6:f7:c6:2b:b3:58:
         38:6d:2e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----