Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1163bdb8-da51-3878-b9c8-b692b125aed5.roa
File:                     1163bdb8-da51-3878-b9c8-b692b125aed5.roa (raw, json)
Hash identifier:          lXLxRoj+s/tTqzUddipVHY+t7Q5nwaVM/dpqQWQPxqM=
Subject key identifier:   BD:CB:98:62:B6:84:7B:CD:7B:71:FB:5D:B3:10:E4:B8:C2:E8:F8:CA
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328576D51CC73C042CFC17074C99708
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1163bdb8-da51-3878-b9c8-b692b125aed5.roa
Signing time:             Mon 24 Feb 2020 01:22:13 +0000
ROA not before:           Wed 17 Jul 2019 04:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     64200
IP address blocks:        45.56.203.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:74:c9:97:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Jul 17 04:00:00 2019 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=4fe82bc5-a2a1-4452-9895-0ba6b2a5c982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:d3:26:55:22:bb:60:f3:4e:9e:ff:97:50:
                    05:89:30:38:73:89:0e:7a:56:6a:b6:ea:e8:6b:fc:
                    f3:21:e7:a9:ee:5c:de:3a:fe:36:31:50:4e:02:bc:
                    f7:d6:94:78:c4:92:54:02:a6:0c:a5:90:60:37:c7:
                    f5:e6:73:29:da:9b:4b:47:1c:cd:34:12:9a:0c:b6:
                    d5:93:f8:42:8c:ae:ac:89:2b:51:ba:8e:b6:fd:65:
                    d2:cf:be:22:44:dd:9e:c3:3a:bf:63:d4:5b:22:f9:
                    8c:96:98:0a:3c:70:c2:d4:03:76:7b:40:35:b6:9f:
                    e1:92:83:9b:40:3d:e4:94:20:1a:cc:04:2d:f0:03:
                    4b:65:3b:32:44:0e:db:22:68:4b:a8:e5:2a:1d:de:
                    bb:46:e4:51:9d:24:86:45:2f:e2:8c:e8:27:7d:87:
                    99:52:51:7a:74:66:49:c9:50:60:89:0c:65:73:ad:
                    4a:3f:d9:85:2c:99:7b:db:66:e8:a6:3b:7d:75:7f:
                    71:77:ec:08:29:17:84:01:82:d5:04:a8:c6:34:b7:
                    7d:ee:2a:cb:4f:c5:25:c3:41:4d:95:62:f8:f7:1f:
                    17:00:08:fb:51:7b:b9:3f:a6:7e:e4:55:32:de:11:
                    00:c0:7f:87:70:d9:44:92:f4:f8:d9:43:cb:bf:82:
                    dc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CB:98:62:B6:84:7B:CD:7B:71:FB:5D:B3:10:E4:B8:C2:E8:F8:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1163bdb8-da51-3878-b9c8-b692b125aed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.56.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:0d:c0:b0:8d:47:9f:3c:ce:18:63:69:87:05:57:ae:be:bf:
         c7:18:75:52:ff:2f:81:1f:c3:d9:e5:35:80:a8:3c:19:19:88:
         05:f1:a5:0b:d5:c5:df:f4:ef:66:ab:87:42:9c:a5:9f:20:15:
         17:d1:35:f2:5c:ba:cc:8f:70:73:53:d3:33:b8:e7:e3:d9:9f:
         08:9c:05:9d:e3:83:12:ca:b3:a9:d1:8c:c9:65:fc:9a:8e:56:
         de:80:4c:e5:bb:81:57:09:1a:f3:66:0e:0f:08:8c:5d:f4:1b:
         36:ed:96:3a:be:f5:4b:22:c1:90:4a:c4:33:55:14:e6:82:03:
         f3:d6:4a:f3:9d:72:cc:80:9b:fb:ea:54:6f:cb:3e:6a:6b:4f:
         29:7c:fd:85:72:99:91:1f:76:dd:56:ed:70:68:60:c2:e4:a6:
         f7:22:e4:df:3c:a3:ce:2e:7b:bd:31:b1:97:02:e4:0c:04:5e:
         a6:ea:a4:10:2a:4b:22:bb:26:f9:2a:59:18:44:56:e9:a3:5e:
         bb:77:ba:c3:09:55:17:b0:e3:3e:c5:9d:73:53:05:30:b4:44:
         8d:41:c0:6c:af:42:c9:d8:b4:01:c3:70:c7:e9:df:67:d1:7a:
         51:9d:7c:52:9a:3b:61:c4:f2:58:1c:fc:85:fa:f3:24:a3:e8:
         21:c8:71:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----