Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/b4100986-1cab-3848-a41f-30bb3b336902.roa
File:                     b4100986-1cab-3848-a41f-30bb3b336902.roa (raw, json)
Hash identifier:          WBKHwEtrLbSD0tqtkf78lOBCcHnOVpkUbfs1/1vU+O4=
Subject key identifier:   30:DA:B4:EB:3E:27:2E:F7:06:7E:3C:3F:16:3A:D4:0E:75:73:49:23
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328583D1C36C73BE7234125E56D5100
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/b4100986-1cab-3848-a41f-30bb3b336902.roa
Signing time:             Thu 03 Mar 2022 05:00:00 +0000
ROA not before:           Thu 03 Mar 2022 05:00:00 +0000
ROA not after:            Mon 02 May 2022 04:00:00 +0000
asID:                     1239
IP address blocks:        115.42.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:1c:36:c7:3b:e7:23:41:25:e5:6d:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Mar  3 05:00:00 2022 GMT
            Not After : May  2 04:00:00 2022 GMT
        Subject: CN=1f9e2d13-98f8-46f6-8bac-9d448c57dd9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:0e:ce:48:46:0c:fa:20:53:aa:4f:c8:5e:
                    6f:e4:e4:8e:84:e5:23:ad:a1:29:ca:dc:2a:7b:3f:
                    fb:36:df:8f:08:37:30:d4:59:2b:dc:df:2b:e9:b0:
                    6f:6d:74:a6:da:bf:4e:79:9e:de:ef:7c:f2:67:9c:
                    24:2f:31:e0:59:0d:e8:fe:1d:b6:29:6d:cb:80:08:
                    40:7e:dc:ff:e8:16:b5:a5:d6:b5:c2:94:38:c4:a0:
                    c1:f9:ab:7e:52:05:ca:a3:26:b5:8f:58:a6:7a:83:
                    79:ca:e1:bf:89:12:fb:4e:a7:cd:65:11:ad:92:56:
                    26:82:e1:a1:31:9a:cf:d6:49:26:73:83:9e:e8:4a:
                    69:4d:17:8f:c2:0e:06:12:49:42:0e:5d:35:41:b3:
                    fc:e1:21:8e:64:5f:40:44:0f:1d:30:7c:2a:ad:68:
                    61:b4:92:46:c5:cb:e0:f4:40:c8:ef:07:38:f1:2d:
                    65:18:08:cc:a3:06:b1:e0:fc:b2:28:4a:12:5c:30:
                    83:fa:2b:e4:8c:fa:56:ea:55:06:1d:fa:3b:6c:c8:
                    f5:dd:76:ea:68:41:6a:d4:15:30:08:79:89:63:75:
                    5b:0a:13:3f:21:47:bc:2b:c8:76:fe:41:60:06:55:
                    0f:d5:d7:03:12:eb:76:2c:14:c9:20:c2:03:07:bc:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DA:B4:EB:3E:27:2E:F7:06:7E:3C:3F:16:3A:D4:0E:75:73:49:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/b4100986-1cab-3848-a41f-30bb3b336902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:17:77:f1:17:4f:1b:98:c6:77:6d:9d:2a:f3:01:94:e2:aa:
         87:29:66:e9:1b:99:61:84:37:52:6a:1c:11:bc:77:e7:7c:b6:
         73:5b:e5:e3:6a:d7:8e:1b:f8:be:5d:fb:c3:a9:34:bb:3d:75:
         8f:a9:76:b8:8d:25:02:5a:a3:99:0d:f4:65:b2:d6:7e:2a:ea:
         43:96:91:df:c8:81:3d:1c:06:04:41:68:3a:b0:71:3a:85:db:
         06:76:7a:b8:33:fd:10:99:8d:81:1d:c4:ba:45:39:25:c0:47:
         93:ca:34:f6:40:f1:6a:d7:66:d9:6f:4e:e2:fb:92:d1:12:da:
         1b:3d:7b:14:9a:f7:28:18:e1:01:1a:be:5a:29:73:19:0b:7d:
         f1:e8:8c:68:23:18:bf:74:f2:b0:7d:72:c7:d7:3d:18:eb:ed:
         6d:2b:d4:d3:e6:b0:1e:11:b6:5f:d7:5f:97:7c:e6:ad:32:8a:
         79:a8:63:84:44:39:76:79:e1:9b:62:b2:52:51:9a:3b:68:1f:
         11:e7:88:af:4b:b9:e8:09:17:d8:20:af:e1:8e:9b:2c:1d:b7:
         f1:83:6b:fb:b4:f1:e7:9b:30:1f:6c:67:8a:ea:7a:5e:42:3d:
         17:26:e5:0f:cf:1d:ec:18:cc:b5:8e:ec:40:92:af:6f:4e:71:
         58:6a:48:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----