Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a0041e3d-6e07-3c97-b380-75c26fc0e322.roa
File:                     a0041e3d-6e07-3c97-b380-75c26fc0e322.roa (raw, json)
Hash identifier:          WE50I1bIoJBqDPI9VY3pI5YE1Y1hYhUrkEwwWFSE+7w=
Subject key identifier:   55:7D:0D:50:81:73:3D:5A:03:FF:9C:1D:55:F5:FE:98:6F:32:7F:71
Certificate issuer:       /CN=a40fbee7-5dae-4a5d-a79b-cf60cd73e49d
Certificate serial:       010D0C9F4328576D51CC73C042CFC173499AF00C
Authority key identifier: 72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a0041e3d-6e07-3c97-b380-75c26fc0e322.roa
Signing time:             Mon 13 Jul 2020 19:15:57 +0000
ROA not before:           Mon 13 Jul 2020 04:00:00 +0000
ROA not after:            Sun 16 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        192.245.195.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:49:9a:f0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40fbee7-5dae-4a5d-a79b-cf60cd73e49d
        Validity
            Not Before: Jul 13 04:00:00 2020 GMT
            Not After : Oct 16 04:00:00 2022 GMT
        Subject: CN=a59e0f50-261c-4c6f-a72c-dcb47f464847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:3b:eb:69:d6:1f:76:67:55:27:f6:d4:85:aa:
                    92:a3:d1:f6:13:00:1a:6d:69:9a:84:49:32:11:27:
                    5e:02:81:09:71:b3:ed:39:aa:9e:a4:75:de:90:91:
                    d2:f5:ec:e8:59:4a:79:4f:d7:23:ce:8e:83:e2:d1:
                    fe:17:e3:3a:75:eb:2d:e2:3e:3a:b5:12:05:41:d4:
                    ab:e7:fc:7b:14:49:a0:e5:e8:5f:ce:39:b6:c2:24:
                    a9:33:04:c4:83:34:25:e8:93:5e:da:24:74:50:36:
                    d4:ff:ad:02:78:c0:53:f6:95:d4:8d:5a:ed:0d:d0:
                    89:eb:1f:07:63:f0:d2:62:92:97:53:31:9b:9b:3f:
                    34:42:bf:f4:b7:15:41:72:c4:8f:4f:38:db:cc:d0:
                    10:9b:c9:80:1a:20:64:05:43:13:de:44:16:2a:9e:
                    44:47:5c:0b:2d:68:2f:a7:3e:ff:f8:4f:77:01:c7:
                    6b:91:d5:3d:f2:d4:1a:c6:aa:08:82:af:aa:8f:20:
                    a0:64:eb:59:f1:8a:8a:fd:ef:ff:59:c7:2a:3d:b4:
                    3c:0d:fe:a0:48:04:7f:ad:24:b9:89:0c:79:a9:d2:
                    ed:e1:c1:11:3d:7e:25:76:0e:bb:73:c7:ae:96:a8:
                    50:d4:4d:9a:be:d2:e2:5d:53:c1:89:67:06:30:6c:
                    12:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7D:0D:50:81:73:3D:5A:03:FF:9C:1D:55:F5:FE:98:6F:32:7F:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a0041e3d-6e07-3c97-b380-75c26fc0e322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.crl

            X509v3 Authority Key Identifier:
                keyid:72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:06:97:90:fc:42:f3:a0:16:f7:8a:a6:e0:fa:b8:94:0b:3c:
         15:41:4a:e6:81:39:c8:28:70:88:2d:bd:30:11:92:e9:da:bd:
         31:6c:da:2f:c3:08:28:ef:1a:52:21:e2:53:4e:df:15:da:c2:
         80:dd:0e:2c:17:fd:9b:da:70:cc:00:71:07:bd:1d:44:ba:cc:
         31:22:ba:15:d2:c6:74:95:69:2b:9c:0b:8b:5d:44:dd:a3:e8:
         52:95:d3:b8:5b:24:31:41:c6:cf:5d:eb:73:f9:ec:6e:6c:50:
         62:34:4d:4c:02:33:2b:7f:18:09:9c:6f:fd:20:19:6b:77:13:
         db:f3:13:cb:0a:62:c8:ba:b5:68:67:95:89:b6:e5:80:b1:33:
         61:89:8f:4c:e6:91:76:b8:22:a3:b1:0a:42:bc:bd:bf:42:56:
         92:1b:56:98:cc:bf:b0:47:dc:c6:e2:56:69:4a:28:36:18:7a:
         7a:40:d2:e6:cc:4f:29:de:c8:11:48:55:90:fb:6d:f8:f7:d8:
         ec:8b:64:94:50:5c:11:7d:ff:be:52:88:c4:b6:e5:74:c5:c2:
         c4:45:f7:5a:a2:81:2e:73:ce:90:73:e8:4e:c4:1a:8b:33:9d:
         a3:73:d5:e8:28:12:93:c8:56:05:96:28:4b:a9:42:cd:b7:a5:
         e8:e0:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----