Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/02f42f4d-56c1-3809-892d-5d7b35d4086c.roa
File:                     02f42f4d-56c1-3809-892d-5d7b35d4086c.roa (raw, json)
Hash identifier:          PFES/Un7dRoYXG4wNPSyB+k99rE38VdpIMikQ8xVz6k=
Subject key identifier:   02:AB:78:0D:8A:97:05:A6:57:84:B6:2A:3D:37:7E:9E:45:A8:4E:D8
Certificate issuer:       /CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E1EDF420
Authority key identifier: DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/02f42f4d-56c1-3809-892d-5d7b35d4086c.roa
Signing time:             Tue 23 Jun 2020 16:06:07 +0000
ROA not before:           Fri 19 Jun 2020 04:00:00 +0000
ROA not after:            Mon 26 Sep 2022 04:00:00 +0000
asID:                     396982
IP address blocks:        144.49.248.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e1:ed:f4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
        Validity
            Not Before: Jun 19 04:00:00 2020 GMT
            Not After : Sep 26 04:00:00 2022 GMT
        Subject: CN=19283167-423e-43d7-9196-2cc6e828cdf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:48:16:16:7a:f8:6b:3b:99:f0:4e:26:11:
                    4a:57:7a:e9:dd:e5:05:07:23:7f:ff:d5:06:c1:3f:
                    53:42:b0:9c:d2:b7:2a:dc:1c:23:ab:e2:63:46:63:
                    25:2c:34:98:e5:cf:16:a8:e5:2a:84:6c:c7:c6:88:
                    d2:4b:91:d9:6c:d0:ba:21:3f:85:3a:14:52:12:77:
                    62:4c:84:a1:2b:44:45:53:f3:ed:28:be:2f:3f:c6:
                    11:92:f8:a1:71:92:06:fc:f1:0d:2b:9b:9e:85:2b:
                    a4:aa:f0:bb:b3:21:4d:a6:f1:59:00:d5:43:d5:0c:
                    8c:e9:c5:5c:27:e2:16:4f:9e:2a:f5:18:e0:95:f8:
                    c6:6f:cb:3e:11:aa:f4:03:05:03:43:f2:12:6c:25:
                    b9:85:86:88:80:63:44:14:b7:0c:54:d7:5d:24:d1:
                    bf:ba:ba:12:34:fb:23:39:a9:e5:b3:2e:47:d5:c2:
                    65:14:65:72:06:40:e5:a0:c7:b4:ff:21:9b:cb:37:
                    25:00:a9:5a:ce:23:22:6e:1f:a3:b5:7d:b5:62:ec:
                    0b:6f:5b:2d:4b:5b:04:b1:cb:e7:24:d6:e7:1e:9d:
                    fa:0b:6c:74:98:ec:d7:99:e3:d3:11:eb:fe:88:81:
                    db:ab:08:e5:42:a7:ee:38:a8:54:10:3b:cc:66:df:
                    59:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AB:78:0D:8A:97:05:A6:57:84:B6:2A:3D:37:7E:9E:45:A8:4E:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/02f42f4d-56c1-3809-892d-5d7b35d4086c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.crl

            X509v3 Authority Key Identifier:
                keyid:DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.49.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:48:e0:a4:2d:9d:5b:a4:a2:a9:ba:be:28:1f:d4:f9:d5:8a:
         8f:f1:4c:87:de:29:5b:82:a9:68:71:5a:f9:eb:5a:02:d1:a7:
         a7:ae:a2:85:8d:45:9d:db:8b:fd:b2:39:e2:c3:96:42:1b:cc:
         57:44:e1:fd:5b:6c:e8:bd:05:0a:f2:c5:35:07:20:eb:a4:c8:
         c1:49:24:bf:02:92:cd:2d:4d:ed:a8:9a:4c:d6:91:63:ca:59:
         f1:c5:bb:16:39:f0:a9:0a:2a:14:c7:fe:95:08:a7:19:93:08:
         90:51:c5:d9:8b:4a:2b:26:3f:58:41:4f:e2:4e:8a:5c:ba:c8:
         85:83:6f:01:3e:19:71:a0:98:31:2a:f4:ae:a5:ae:d0:3e:a3:
         11:18:df:ff:ad:a9:d5:31:bc:8c:24:38:b1:fb:de:c7:e5:b8:
         42:22:73:23:bc:1f:e9:02:43:63:be:20:94:31:24:c1:12:64:
         b8:33:f5:e6:16:ab:bd:15:bf:90:95:b2:2b:9c:bf:8f:de:78:
         ea:a2:05:0a:de:1a:15:9a:e2:ac:88:c6:00:35:a5:d3:8f:55:
         54:35:fa:60:e7:7a:03:df:fe:77:6b:f6:80:3f:97:46:b3:28:
         e4:df:1c:88:b3:bd:4c:c5:81:95:62:91:47:8c:c7:37:12:82:
         c0:22:b7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----