Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/82d4bfc4-d01f-35f4-adce-89b92643608c.roa
File:                     82d4bfc4-d01f-35f4-adce-89b92643608c.roa (raw, json)
Hash identifier:          RskbM8EA7IRNzZi9l5L0XCeqrkYnw6z0iVV9lZyJIHM=
Subject key identifier:   CF:73:45:1A:5A:EB:73:F6:38:58:10:F3:8A:E1:4C:1D:21:4E:02:B8
Certificate issuer:       /CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
Certificate serial:       010D0C9F4328583EBBB607465E8F645B2F6C4580
Authority key identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/82d4bfc4-d01f-35f4-adce-89b92643608c.roa
Signing time:             Thu 20 Aug 2020 16:04:58 +0000
ROA not before:           Thu 20 Aug 2020 16:04:58 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     46450
IP address blocks:        169.197.188.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bb:b6:07:46:5e:8f:64:5b:2f:6c:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
        Validity
            Not Before: Aug 20 16:04:58 2020 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a68e85eb-076b-4fa4-8428-5ba44d9e237d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4a:83:a2:7f:60:3d:29:95:92:67:af:25:d1:
                    bf:86:db:a4:18:ae:92:fc:65:88:20:9f:ff:4d:64:
                    8c:49:1f:58:d3:27:0a:e3:60:1f:35:0a:d0:cd:d6:
                    e3:42:a5:1a:3c:03:86:49:39:6a:be:b4:ce:52:44:
                    83:06:ca:c4:7e:0b:2a:29:f5:33:bd:28:bc:58:91:
                    33:33:de:8a:f4:35:f0:b0:b3:bc:1c:70:5d:2b:bb:
                    10:01:35:ea:59:ed:53:13:3a:dc:0c:d3:2c:e4:9e:
                    2f:ea:b1:30:0e:98:96:4a:83:12:f2:e7:f6:be:de:
                    24:c1:9b:3e:f6:a2:e2:01:27:46:f1:20:fa:1d:24:
                    6c:1a:2f:b5:67:54:ab:91:d4:52:48:dd:70:a0:a0:
                    bf:e1:46:9e:70:7a:5a:e7:66:6d:fc:56:65:de:5e:
                    5c:8a:01:df:c5:c8:e3:ed:2b:e1:eb:77:7c:8b:70:
                    d5:1e:dd:7a:a3:e2:81:2b:c4:a4:a7:fe:0a:ce:1e:
                    a8:89:70:34:cb:a6:ea:b9:10:e5:a5:16:3b:e8:46:
                    c2:d7:74:2c:44:c1:48:49:85:d2:7d:88:87:31:47:
                    f2:40:19:32:64:6d:a6:fe:82:f5:ff:5d:8c:32:e6:
                    14:51:36:97:d2:d9:e4:cd:71:68:3f:4e:32:80:49:
                    c4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:73:45:1A:5A:EB:73:F6:38:58:10:F3:8A:E1:4C:1D:21:4E:02:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/82d4bfc4-d01f-35f4-adce-89b92643608c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl

            X509v3 Authority Key Identifier:
                keyid:9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e0:21:16:95:c6:43:c2:11:3c:3b:41:93:0b:26:aa:06:9d:
         61:7c:4d:7b:34:a5:05:69:53:dd:58:ac:f3:27:80:d4:82:29:
         64:bf:75:00:3d:c3:c9:2e:79:48:82:76:d9:4b:39:50:28:72:
         4c:3d:e2:dc:2c:71:d7:30:ca:71:2a:0a:6b:9f:a8:06:76:c3:
         72:4a:f1:cc:53:58:75:d1:e9:57:b5:13:0a:e9:ce:aa:93:87:
         40:61:8b:0b:f9:8c:18:f6:6e:65:72:90:17:7f:28:a0:5c:d8:
         fb:b7:de:1c:ae:75:ec:91:bc:75:24:11:9c:7e:fa:d6:3c:95:
         03:59:3f:79:c8:fd:d3:b0:43:2a:07:50:5d:7b:41:ed:1c:7e:
         25:b8:ca:4d:05:a6:4f:1d:b9:b8:23:3a:fe:8a:b0:8c:44:3f:
         a8:6f:7d:bb:93:77:7d:fd:0a:5d:9c:31:d7:86:6d:c0:92:4f:
         dd:0d:59:1e:c2:f2:91:e1:a0:12:c5:59:e0:4b:6e:1f:a0:ea:
         f7:a4:3b:c6:05:1f:2e:88:56:67:ff:cb:8a:66:03:0d:f2:b5:
         6b:d8:ab:06:69:c9:78:64:15:9c:c6:17:99:4e:ac:cb:5b:e0:
         54:18:7f:0e:ad:84:48:12:8e:a1:09:91:3f:89:02:44:38:06:
         d9:7e:56:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----