Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/1282d970-b6dc-3bc1-a8a8-1b3bed3b586a.roa
File:                     1282d970-b6dc-3bc1-a8a8-1b3bed3b586a.roa (raw, json)
Hash identifier:          pYEHE6+CxekdT8H2HP0Y2CnQq/9vAATBt41FtoWu0gk=
Subject key identifier:   F1:3C:ED:26:A3:0C:B9:6C:F3:E9:9B:AD:E9:C1:34:AF:3D:21:02:30
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328576D51CC73C042CFC17330587D01
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/1282d970-b6dc-3bc1-a8a8-1b3bed3b586a.roa
Signing time:             Wed 08 Jul 2020 21:32:52 +0000
ROA not before:           Mon 24 Feb 2020 05:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     53846
IP address blocks:        206.40.248.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:30:58:7d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 05:00:00 2020 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=1b1ef31b-7ca4-4897-b15b-ebaa88083ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:c5:02:0c:6d:cf:56:ee:62:28:0b:70:c3:
                    09:3b:72:4d:44:49:10:fe:c4:62:3b:3e:cd:dd:0c:
                    18:78:af:f8:fd:bb:63:92:28:2b:f8:6a:fb:a8:44:
                    f5:d4:8b:3a:59:7e:47:d0:0a:d9:9f:66:bb:48:fe:
                    f1:fa:82:b9:0c:83:37:f3:14:bd:9a:7e:8c:14:4a:
                    e4:9f:1e:96:56:d4:7e:c6:9b:e5:91:4c:8d:5c:4d:
                    9d:0a:49:91:1d:36:f4:0e:09:09:62:4f:ce:c4:75:
                    c0:3a:c1:26:62:df:c7:e5:52:2e:62:1a:97:c3:a7:
                    ed:21:a0:20:f0:4c:6c:c4:dc:19:d1:e1:ea:3f:9d:
                    b1:84:97:4b:08:8b:03:44:a1:15:3e:a7:34:66:4d:
                    59:bc:c9:4e:75:dc:64:aa:fb:ee:49:6c:af:0f:ff:
                    d0:91:b6:89:1b:04:39:90:84:f6:03:bb:a4:79:6c:
                    12:e7:0c:9d:a8:67:87:10:c6:25:a3:94:44:f4:18:
                    c1:d7:f6:1a:40:e7:f5:66:f7:0b:74:0e:e8:05:61:
                    78:fd:c7:0f:9f:da:82:c6:49:dc:25:b8:de:e4:fc:
                    38:39:1c:b9:3e:d5:9a:29:4e:77:96:6d:94:69:86:
                    2b:23:57:97:dc:d6:7d:a3:47:bd:89:98:1f:42:32:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3C:ED:26:A3:0C:B9:6C:F3:E9:9B:AD:E9:C1:34:AF:3D:21:02:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/1282d970-b6dc-3bc1-a8a8-1b3bed3b586a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.40.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:61:65:6f:c1:7c:af:27:e5:90:4d:47:c5:f9:7b:51:f2:c2:
         21:a4:06:36:7b:37:91:fd:5c:f7:98:9d:6b:14:d5:cf:81:e6:
         a4:1a:40:79:fa:f2:31:bf:d6:c6:b3:94:7e:50:07:60:64:75:
         0b:8d:cb:e9:be:6c:1c:f4:0e:5c:c8:b8:05:ba:48:32:22:93:
         0a:75:bd:11:b5:e4:4d:3f:88:ae:85:0a:0f:7c:5e:7b:1a:9b:
         fe:f4:c1:6e:80:b4:9e:88:32:a0:88:95:50:a5:76:a5:50:16:
         fb:fb:fe:8d:86:a1:cb:c6:59:85:66:0c:ad:8b:fc:36:71:f7:
         90:c9:fd:89:2b:6f:5b:fd:6a:be:14:3f:cf:c3:3e:ff:74:e1:
         9d:61:3b:2e:04:fa:d1:ec:fc:f8:44:06:15:b2:8c:73:6f:bf:
         89:7c:32:82:57:5a:1d:70:22:7b:18:2a:be:14:f5:2b:7b:6d:
         51:60:ac:40:05:8f:e4:09:3e:45:73:b9:fb:f7:dc:60:3d:1f:
         77:31:23:4b:cc:49:55:61:dd:f1:29:74:d7:78:6b:b3:91:13:
         37:30:5b:5e:34:3c:8f:eb:f4:af:8d:74:22:95:75:4e:5d:1b:
         46:3c:f2:d0:f3:a5:93:55:c8:cf:03:2c:56:dd:ff:02:b2:d1:
         84:40:a6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----