Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a18ffb5a-78e5-353d-bb5c-dd0b1ee66eb6.roa
File:                     a18ffb5a-78e5-353d-bb5c-dd0b1ee66eb6.roa (raw, json)
Hash identifier:          Jboa8w3MH7tMxF3DZo/GKF+/OTWlacgTdvREcsLIgIQ=
Subject key identifier:   AA:7A:1F:62:03:FC:45:58:4C:B1:25:E0:0B:40:7E:4A:59:FD:D3:E5
Certificate issuer:       /CN=a91fff12-f74d-4a80-9a5d-f225534bc527
Certificate serial:       010D0C9F4328576D51CC73C042CFC173D9137896
Authority key identifier: 02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a18ffb5a-78e5-353d-bb5c-dd0b1ee66eb6.roa
Signing time:             Mon 10 Aug 2020 15:53:18 +0000
ROA not before:           Wed 22 Jul 2020 04:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     46595
IP address blocks:        216.255.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:d9:13:78:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91fff12-f74d-4a80-9a5d-f225534bc527
        Validity
            Not Before: Jul 22 04:00:00 2020 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=bbff40f1-c928-4552-baba-517f2086219a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:d1:a3:83:47:c7:46:2b:16:fd:3a:c3:b5:
                    f9:e5:23:67:f4:06:05:d6:c3:0b:cf:69:60:d7:2d:
                    7f:df:3d:3d:56:23:d7:c7:2f:08:25:fb:e9:dc:67:
                    d8:d1:4a:b8:61:93:f0:d8:32:b5:b8:0a:14:b5:94:
                    5b:e6:19:e4:77:b0:0a:ac:df:ba:29:9d:29:24:44:
                    55:8e:27:a4:eb:23:7b:a5:75:a8:4f:59:38:74:92:
                    0f:e1:ba:77:aa:85:8d:13:3b:b4:7c:3d:af:9b:12:
                    3d:cf:66:3e:2f:b4:a8:37:68:f9:b8:8f:6b:93:fb:
                    6f:8c:d0:ce:56:3d:6a:26:c0:1c:40:79:b9:ec:1d:
                    f2:6f:bc:21:94:a9:a9:dd:30:2c:53:b0:8b:01:4b:
                    5d:95:f0:1f:c4:77:5a:42:5b:c5:3f:6f:1e:5e:cb:
                    0a:f4:94:f3:5f:58:0c:c1:9b:fa:54:80:ad:c6:5f:
                    98:c3:c8:6c:e2:b7:9f:0d:79:da:27:32:83:47:51:
                    49:9a:35:79:ee:9b:bc:71:24:12:e7:c8:5e:77:89:
                    ce:77:18:c9:c0:40:63:f8:f2:38:73:e7:ca:fb:85:
                    55:20:09:d7:00:38:cc:ae:cd:aa:82:59:8f:d0:3b:
                    86:24:bd:6b:c9:6f:0b:11:4f:8b:da:a0:da:46:13:
                    3b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7A:1F:62:03:FC:45:58:4C:B1:25:E0:0B:40:7E:4A:59:FD:D3:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a18ffb5a-78e5-353d-bb5c-dd0b1ee66eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl

            X509v3 Authority Key Identifier:
                keyid:02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:3d:f2:6f:82:e2:8d:70:ed:9f:72:24:6d:64:f3:07:fa:3a:
         f3:0e:d4:22:ce:34:7e:e9:6b:11:5c:5e:6b:7d:70:07:1b:ab:
         c3:67:c1:31:c4:6b:52:f2:7c:bc:c7:f3:40:15:d2:3b:b8:8a:
         96:9e:1c:d9:9b:45:46:5b:b2:80:b4:6b:a9:f8:77:d1:d4:56:
         ec:12:4a:f3:f4:e3:f9:12:96:69:ed:84:15:6f:4f:24:a5:39:
         8c:f3:d7:2b:19:f3:3a:4b:26:05:a4:27:5f:05:93:ba:81:67:
         a8:04:f7:de:aa:e1:cc:2a:9a:31:ef:ed:89:84:15:2a:ff:83:
         8d:fd:b0:17:57:f5:b8:8a:71:74:a2:57:1c:ad:9a:1f:55:92:
         23:3a:75:ca:97:24:cc:8e:8c:4b:6d:1a:ec:0c:b0:df:7e:3b:
         02:ff:5e:67:87:7d:e0:9b:17:a4:3d:16:ca:13:f0:53:1a:9f:
         26:f2:ed:a8:16:7d:71:46:d6:82:cc:0c:26:8d:05:ee:85:77:
         d4:46:c9:39:63:55:5b:03:54:a6:41:8d:f8:f8:3a:95:ac:57:
         cd:eb:08:69:37:8d:1b:03:d1:d0:36:36:e6:db:37:dc:8a:04:
         b6:43:79:f1:86:df:bd:e2:87:9b:4e:e9:a4:37:68:1b:82:b4:
         15:98:c1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----