Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/9eb9b804-4d38-34fd-851a-19e9378021b2.roa
File:                     9eb9b804-4d38-34fd-851a-19e9378021b2.roa (raw, json)
Hash identifier:          pSQDPW0dUXY9TMnxHiTMs2LN7S91N40Jl1420YOXzko=
Subject key identifier:   96:BD:44:2D:B4:6C:2F:7B:59:18:91:18:65:FE:55:3F:31:78:2C:3E
Certificate issuer:       /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial:       010D0C9F4328576D51CC73C042CFC173DC0AFD26
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/9eb9b804-4d38-34fd-851a-19e9378021b2.roa
Signing time:             Tue 11 Aug 2020 05:42:54 +0000
ROA not before:           Mon 10 Aug 2020 04:00:00 +0000
ROA not after:            Mon 14 Nov 2022 05:00:00 +0000
asID:                     20278
IP address blocks:        23.94.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:dc:0a:fd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
        Validity
            Not Before: Aug 10 04:00:00 2020 GMT
            Not After : Nov 14 05:00:00 2022 GMT
        Subject: CN=08cbe8e3-8d48-484e-8039-f031d22e9718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:bb:d2:7d:4a:04:aa:85:40:41:e7:09:52:
                    6a:03:b0:b8:0d:07:3c:55:d0:d0:ac:47:4d:17:0a:
                    07:93:4b:aa:df:76:08:c1:a8:51:ed:d4:1a:7f:1b:
                    cb:46:2c:a5:d7:db:1a:fc:ec:95:11:8c:e7:c2:98:
                    cc:90:2b:6c:2b:90:f4:74:b5:21:ad:6d:5e:26:41:
                    50:5e:8f:ac:0f:37:2e:64:c8:f1:f3:7f:d6:e2:4d:
                    c1:6c:a4:52:67:6a:70:41:f7:cf:81:ef:5c:fc:5d:
                    6d:39:19:9a:c1:e4:c7:b1:ec:88:fe:b6:9a:2d:2a:
                    79:cb:b8:81:ae:ab:f1:3c:68:17:5b:c6:ce:c4:fc:
                    cd:fe:3a:b9:0b:fd:4c:99:58:18:60:d6:a6:b3:25:
                    d1:eb:2c:9f:e3:f7:3d:e9:c2:87:5b:20:00:0b:56:
                    f4:27:e9:4d:3b:ba:c0:be:3c:4d:e3:92:c3:8a:04:
                    2f:26:b9:90:2b:0b:f3:47:c5:43:8a:fd:34:d8:ee:
                    88:4d:c0:f1:c2:e7:b9:9e:55:f0:73:b7:cb:06:e9:
                    2c:08:0f:c6:6c:ba:a9:62:83:3f:22:67:21:74:bb:
                    6b:23:4c:ba:f1:c0:04:19:13:27:23:fc:b3:57:a8:
                    ad:0c:7c:8a:f9:dc:87:f3:d6:d2:fc:5e:b7:75:51:
                    91:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BD:44:2D:B4:6C:2F:7B:59:18:91:18:65:FE:55:3F:31:78:2C:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/9eb9b804-4d38-34fd-851a-19e9378021b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl

            X509v3 Authority Key Identifier:
                keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:f8:62:c6:88:27:ae:49:50:f8:64:7f:00:06:f8:94:67:90:
         d7:d4:f7:03:96:b3:2c:76:c5:bf:da:66:f4:78:8a:82:26:ca:
         e6:07:6d:c8:48:c1:d0:ae:57:07:fc:7a:5e:ac:92:89:ab:be:
         3f:48:bd:83:1b:27:62:8a:e2:c3:94:fe:71:71:57:b3:8a:fb:
         89:02:53:4f:35:4b:a8:84:bf:17:eb:7c:4c:7c:df:4c:73:be:
         9a:b1:61:cf:41:6d:64:94:5c:42:47:7d:9f:36:b1:c5:4c:28:
         79:41:0e:6e:a5:18:d0:77:5e:d3:45:bf:95:10:42:59:85:86:
         da:b3:fd:b0:cf:64:d7:3e:17:be:c0:4a:3f:32:93:ed:71:4d:
         88:2c:fc:16:ff:f3:7b:4f:2b:95:b4:98:d1:7c:99:26:c1:22:
         9e:b3:b5:45:51:97:0f:6a:6b:f6:6e:88:5c:bd:db:ad:2c:38:
         16:28:c5:a4:66:cd:11:d0:ef:02:be:72:ca:12:c6:5f:2d:00:
         5e:25:48:92:71:1f:0d:45:1b:15:d8:a2:1b:ea:9f:e5:3f:89:
         d1:3e:8f:0d:13:8a:50:07:b2:a0:4a:e5:b5:24:3a:7a:3c:16:
         93:02:2a:30:45:42:af:82:f4:d8:e1:b9:23:81:c7:f2:4a:ba:
         79:b4:33:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----