Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/6f6549e3-9fcd-35a1-a108-d3ace61e2c4f.roa
File:                     6f6549e3-9fcd-35a1-a108-d3ace61e2c4f.roa (raw, json)
Hash identifier:          neZc4kmiiKgJdt9naCapSk/VW5O0TSKcTUJK9w3md0E=
Subject key identifier:   46:DF:92:27:D5:37:7D:2F:A3:C9:A1:7D:0E:2D:6B:6E:AE:39:2D:C0
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328576D51CC73C042CFC1733074A626
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/6f6549e3-9fcd-35a1-a108-d3ace61e2c4f.roa
Signing time:             Wed 08 Jul 2020 22:03:37 +0000
ROA not before:           Mon 24 Feb 2020 05:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     397103
IP address blocks:        208.117.221.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:30:74:a6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 05:00:00 2020 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=4bfc8003-ef04-4133-845e-da04029c839d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:1f:61:fe:ee:0c:07:63:c6:02:89:d1:f0:
                    b4:3b:81:6d:c9:cd:fb:0d:90:15:c9:3c:f7:0c:2e:
                    68:47:79:c7:96:ae:81:b6:a4:20:5e:15:f2:7a:69:
                    f1:ef:05:c2:31:e4:36:62:af:05:50:94:cc:d6:73:
                    cd:18:27:6a:7d:4b:a0:3e:92:9d:d1:86:7b:eb:d2:
                    21:0f:f8:ba:20:b6:99:81:2c:4f:dc:2f:94:74:3f:
                    38:20:02:30:8e:ee:c1:3c:65:c5:f2:0d:f2:4a:32:
                    6e:a9:89:b4:e6:25:2a:d7:57:fd:3f:4e:06:5b:b9:
                    ab:a6:aa:bf:07:f3:72:6d:12:58:e5:a2:8b:d2:c5:
                    82:d8:7d:16:11:8a:f9:2c:88:4f:03:30:e7:99:34:
                    bf:af:2c:7c:8d:78:63:fa:89:fc:a1:92:91:3d:5d:
                    44:58:52:86:6b:8e:69:cb:9f:67:3e:c5:fe:90:a0:
                    3d:f2:1d:3c:b1:99:9f:1f:04:ec:cd:04:d7:6d:68:
                    c4:93:1f:a8:f8:6d:44:58:de:43:4b:6c:18:b3:22:
                    f9:7f:23:08:34:66:b0:47:8e:ea:1b:79:ec:cb:c3:
                    97:c5:b9:fb:81:81:3e:95:ba:c1:ba:28:f7:76:7e:
                    09:95:a5:64:6f:f1:ee:0b:56:f4:c7:a7:f9:72:c3:
                    d8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DF:92:27:D5:37:7D:2F:A3:C9:A1:7D:0E:2D:6B:6E:AE:39:2D:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/6f6549e3-9fcd-35a1-a108-d3ace61e2c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:e8:2f:71:74:87:be:04:b8:e2:e4:d9:46:7e:9b:51:dd:6e:
         69:59:2c:3d:d6:0f:be:0f:8f:12:0f:29:0a:81:b4:92:01:4b:
         3c:ac:3b:2a:86:20:41:9a:34:f9:66:f9:d0:3a:85:d1:b8:27:
         a6:86:34:8f:cb:d0:02:79:4f:7c:93:23:09:85:f2:9d:d6:7a:
         ed:b4:50:2a:36:b9:eb:e4:86:bb:e7:e7:01:70:f5:7b:38:ca:
         a9:13:77:0e:a3:25:d0:68:2e:01:30:f6:7d:83:5e:85:4c:23:
         3e:1a:50:8d:77:a2:48:f6:ca:ef:82:c9:66:8d:0b:62:c1:4a:
         91:c3:4d:bf:6a:fc:e2:d8:f8:3f:91:e2:22:82:ee:d5:9a:1d:
         79:1f:95:d1:7a:f3:9a:80:fe:31:4c:ba:2d:ae:83:13:c2:d6:
         70:c1:19:d0:f4:a5:48:3d:ea:11:cb:a9:1f:c1:84:57:84:75:
         b0:88:70:de:f5:c2:65:01:07:8a:f9:0a:3c:3b:69:7e:c6:d5:
         57:8c:8c:7d:6b:8f:a2:2f:a1:20:f9:7d:b8:b9:dc:25:02:59:
         15:87:66:1c:a3:f6:e9:e1:e6:a3:ae:8b:5e:f5:98:ed:61:93:
         62:f1:32:b6:21:c6:ae:66:1f:53:bf:cc:c5:f1:87:08:02:9b:
         c5:90:a6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----