Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/1cb5a49e-f5dc-3f61-854b-04f0f28091b3.roa
File:                     1cb5a49e-f5dc-3f61-854b-04f0f28091b3.roa (raw, json)
Hash identifier:          zv8+TFvf/m4i9WiNME68WR5OMnf8ghfUnFb7w5DUJ/0=
Subject key identifier:   C9:7A:DC:1E:B5:EB:74:38:16:77:8B:A3:57:43:5C:0C:29:3F:CC:7D
Certificate issuer:       /CN=ca55544e-ec3b-4452-8f13-dcb54ad7f4ec
Certificate serial:       010D0C9F43285838A2BC6D03F359050F7F46EAC0
Authority key identifier: 74:52:2E:34:FF:2B:04:3F:7A:C9:15:F4:94:2B:53:76:65:9F:F2:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/1cb5a49e-f5dc-3f61-854b-04f0f28091b3.roa
Signing time:             Thu 14 Jan 2021 05:00:00 +0000
ROA not before:           Thu 14 Jan 2021 05:00:00 +0000
ROA not after:            Fri 21 Apr 2023 04:00:00 +0000
asID:                     61317
IP address blocks:        198.207.12.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:a2:bc:6d:03:f3:59:05:0f:7f:46:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca55544e-ec3b-4452-8f13-dcb54ad7f4ec
        Validity
            Not Before: Jan 14 05:00:00 2021 GMT
            Not After : Apr 21 04:00:00 2023 GMT
        Subject: CN=451c66f5-d501-45a1-8425-73654d750f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e5:52:f6:2c:66:72:82:4b:e4:93:f9:58:89:
                    52:3d:a4:46:1d:9e:c7:f4:31:7d:4a:54:91:44:1e:
                    20:c5:5a:fb:44:63:0b:33:eb:fb:ef:73:b0:d0:9c:
                    40:fd:ab:14:ae:fa:c7:10:b3:e2:dd:91:44:61:fc:
                    3e:64:e3:6e:e8:c7:a0:31:f4:9c:4d:37:ce:8b:f1:
                    f7:70:ad:a6:6a:38:db:66:ee:bf:11:84:38:d5:0f:
                    14:0d:3e:6e:68:af:7a:6c:70:4a:44:b8:7a:0c:72:
                    9a:84:3a:28:2c:3f:57:8d:98:d1:15:67:fc:f0:01:
                    0f:95:3b:6b:9b:11:ee:3f:9f:c7:94:fa:3f:e2:87:
                    36:e2:b9:63:ce:6a:cd:55:d6:74:04:68:1d:67:40:
                    04:90:de:6b:e9:2b:bb:36:61:fc:28:6b:20:b9:d5:
                    28:f8:29:69:5c:c0:2d:f4:48:6d:66:2d:4a:d8:6e:
                    b1:56:19:52:33:f4:f3:c1:d8:8d:c6:be:27:9e:f8:
                    72:ad:53:1c:5c:78:f8:79:db:98:15:fa:7a:f9:fc:
                    26:84:61:e5:74:3f:a1:01:05:35:a1:ca:b8:7d:91:
                    9f:3e:fb:c9:5d:63:61:8c:de:f5:29:4d:06:46:7e:
                    19:a0:c3:36:5f:43:d9:ae:da:96:ac:11:a5:49:b5:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7A:DC:1E:B5:EB:74:38:16:77:8B:A3:57:43:5C:0C:29:3F:CC:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/1cb5a49e-f5dc-3f61-854b-04f0f28091b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:2E:34:FF:2B:04:3F:7A:C9:15:F4:94:2B:53:76:65:9F:F2:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e5:d8:c0:20:79:8f:0b:70:9e:96:af:8f:e5:8f:98:cf:ea:
         c8:1c:ce:6a:9a:57:06:aa:70:d4:06:0e:77:c9:92:93:2a:c4:
         c9:91:d4:c6:d0:00:ec:33:40:4a:09:df:93:9a:91:aa:e1:0d:
         65:85:ec:89:ff:b4:36:8a:d8:8d:0c:9b:c5:ed:c1:78:c4:11:
         3f:da:8c:68:cc:62:a2:98:30:5c:b2:71:10:fc:1c:84:17:fc:
         29:89:b3:37:ac:f0:fc:b7:9f:2f:8e:07:52:28:67:0f:b1:28:
         0c:f4:92:a9:2c:1f:dc:ca:78:bc:43:4d:f2:fc:59:aa:ce:90:
         eb:32:f7:d0:1c:63:a3:92:60:a1:d2:b7:1c:ed:da:d3:b1:79:
         cf:72:4d:ae:47:4c:3c:47:83:c4:07:a1:b0:25:a5:e6:de:9e:
         7b:a5:57:e6:45:25:2f:25:39:21:97:e4:56:52:4d:36:88:c5:
         05:75:47:c8:c6:73:08:28:4b:97:a5:21:9b:bb:1e:32:a4:29:
         de:af:9b:79:b0:49:24:35:74:06:e2:0d:11:ae:1a:3c:66:93:
         5b:7f:9b:cf:a1:57:e3:46:7a:ae:27:91:d8:51:73:63:ef:69:
         53:b7:06:af:90:6f:e1:fc:ee:f4:9f:37:82:5a:b5:ce:ca:fb:
         6c:21:a3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----