Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/db70b29d-bab2-3b67-b31d-0347539214ef.roa
File:                     db70b29d-bab2-3b67-b31d-0347539214ef.roa (raw, json)
Hash identifier:          ywSMHKihYkUg6LDcPGlRVxemZd9MpqnnxpF/jkpdE4Y=
Subject key identifier:   73:3B:0D:39:3C:F0:AA:93:53:8C:33:83:CD:38:77:CD:A5:46:70:6D
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328576D51CC73C042CFC1705662F9D6
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/db70b29d-bab2-3b67-b31d-0347539214ef.roa
Signing time:             Tue 18 Feb 2020 03:41:31 +0000
ROA not before:           Tue 11 Feb 2020 05:00:00 +0000
ROA not after:            Sun 22 May 2022 04:00:00 +0000
asID:                     40568
IP address blocks:        149.112.122.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:56:62:f9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Feb 11 05:00:00 2020 GMT
            Not After : May 22 04:00:00 2022 GMT
        Subject: CN=5b6e0d63-3b20-4591-aad5-20064b394831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:f3:60:70:6b:77:c5:65:dd:34:2a:07:73:
                    89:62:3a:19:7e:59:54:04:bd:03:6d:f7:57:85:81:
                    bc:87:2a:3f:cf:4d:01:e9:8f:9f:49:c7:db:47:39:
                    6c:1b:34:ca:33:ab:1d:03:7c:8f:e3:56:97:9c:91:
                    5d:3f:4c:c5:79:cb:80:ab:a5:20:54:2f:aa:bb:c2:
                    1f:34:84:7b:68:26:27:62:58:fc:86:8d:94:7e:cd:
                    df:ec:ae:ce:aa:a8:d1:58:93:aa:e3:5c:08:b3:ec:
                    b2:7d:76:1e:df:9b:90:cd:d8:22:45:b2:94:61:0a:
                    4f:50:0d:2c:ff:da:57:14:95:1c:24:2c:05:8f:d0:
                    03:30:57:01:82:78:b0:31:09:c7:17:37:92:93:7c:
                    10:7c:2a:5d:f9:12:60:ce:9c:8d:9f:74:1a:c5:61:
                    72:94:07:20:2a:56:50:e2:bc:65:0f:39:33:0c:02:
                    f6:79:64:75:0f:96:e4:7a:c9:b7:ac:93:f1:12:d8:
                    b4:dc:7f:a8:eb:99:3f:e7:4a:dc:4f:fc:d6:3d:9f:
                    85:cd:c1:36:b1:13:fe:42:66:0c:48:30:ba:77:17:
                    f4:11:84:ec:ee:02:01:8b:ed:b0:8e:0b:79:e1:14:
                    52:77:61:02:09:8f:a4:75:a5:ae:e4:4a:f2:5b:00:
                    02:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3B:0D:39:3C:F0:AA:93:53:8C:33:83:CD:38:77:CD:A5:46:70:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/db70b29d-bab2-3b67-b31d-0347539214ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:56:22:12:f9:a4:61:d5:b8:f2:2b:a7:7c:9f:75:45:61:27:
         e4:b4:72:80:11:2c:3d:49:dd:ca:76:87:d4:2e:1a:6f:ec:78:
         ec:ea:c3:80:ad:82:33:77:ef:14:5b:eb:58:ff:f8:58:35:b9:
         71:46:9d:79:ce:82:be:8c:63:9d:da:41:9d:c4:de:67:fe:dc:
         81:2b:67:38:b4:33:d3:58:d0:f3:5c:b8:35:74:4e:32:0c:47:
         09:ef:10:85:10:ad:9b:1b:cb:e3:68:2e:37:55:eb:29:25:d0:
         2b:1c:1c:1e:8d:2c:a2:b9:e1:8c:03:8c:d2:6d:24:ce:ce:83:
         73:4c:8d:bc:b9:19:0d:ee:cd:9d:c8:2a:6a:78:8d:f9:b7:ff:
         b0:6d:69:31:5d:b5:1d:1f:65:7f:3b:2e:bc:43:66:31:ad:f0:
         ae:dd:88:4c:fb:dc:61:19:ac:e2:06:cd:81:c6:18:6d:7c:84:
         a9:5d:c7:1f:41:3d:09:2b:5c:f4:a9:a7:fe:05:a3:fd:5f:9b:
         29:7c:64:46:ec:43:b7:38:fd:f2:09:cd:65:6c:a5:b1:ce:a0:
         7f:e2:c3:f6:d3:29:0d:9e:13:1e:3e:65:fa:e9:a1:10:cb:c3:
         04:7b:ad:f4:d5:8a:57:e0:27:27:3b:3c:db:b5:6e:43:d2:f7:
         c1:44:78:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----