Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/08ac727a-fa6b-31e8-b57c-9c5ad517d7e0.roa
File:                     08ac727a-fa6b-31e8-b57c-9c5ad517d7e0.roa (raw, json)
Hash identifier:          sSbL2FwzDQbd5BEkxo6qsAr0tqy3OBcUVt4lpXPo2yo=
Subject key identifier:   85:46:63:7E:26:2E:E2:00:14:26:54:CC:01:32:18:05:AB:7E:BB:9F
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F4328576D51CC73C042CFC1711D15562F
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/08ac727a-fa6b-31e8-b57c-9c5ad517d7e0.roa
Signing time:             Fri 27 Mar 2020 17:41:09 +0000
ROA not before:           Fri 27 Mar 2020 04:00:00 +0000
ROA not after:            Thu 30 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        170.176.155.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:1d:15:56:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Mar 27 04:00:00 2020 GMT
            Not After : Jun 30 04:00:00 2022 GMT
        Subject: CN=3177dc7d-117f-4849-99bf-0f26b58d8483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:74:de:da:72:6d:9c:ec:8d:ca:f0:b0:37:
                    f2:85:d5:c3:30:cc:87:19:2d:ba:d2:96:5c:7d:ec:
                    e3:9f:7e:93:9f:63:18:c0:11:f8:e4:c5:c0:91:7e:
                    f3:d2:c6:98:82:b2:58:26:92:9e:70:83:43:2f:8c:
                    de:39:b2:6d:38:47:b3:6a:08:38:29:36:76:b9:d2:
                    4e:bb:65:f1:ae:9b:a4:81:66:e5:3b:6e:98:3e:16:
                    dc:ad:18:f7:e3:41:6f:ff:31:a1:9d:4d:99:76:f6:
                    f7:20:45:bd:4a:f9:26:34:b0:29:a6:01:aa:91:97:
                    46:eb:a2:f6:94:24:3b:82:bc:f1:a0:88:b1:fb:e9:
                    ae:e4:a2:62:c7:6e:76:7d:31:4f:7e:31:d7:5a:19:
                    5f:7b:bc:3e:69:00:5e:b7:79:09:7b:00:9b:ba:a8:
                    5c:ed:52:70:36:71:03:da:b0:f6:13:45:7f:9f:88:
                    57:0d:80:47:5e:30:4e:ce:a5:c0:62:47:4e:29:d2:
                    aa:e3:f4:2d:f0:d6:e2:fb:01:67:fd:09:e4:82:91:
                    68:2d:6e:42:e5:b3:a8:09:5c:49:73:e1:45:14:f8:
                    64:8d:d2:a4:ec:0d:4e:f5:ee:1d:b0:33:7f:22:0a:
                    d0:12:05:bb:9b:40:54:90:74:a9:44:5d:02:e9:c8:
                    e5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:46:63:7E:26:2E:E2:00:14:26:54:CC:01:32:18:05:AB:7E:BB:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/08ac727a-fa6b-31e8-b57c-9c5ad517d7e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4e:7f:3e:bd:de:24:3f:18:94:a6:ab:a6:5b:dc:a7:cb:fe:
         7a:fd:f0:b8:54:b3:85:df:41:6c:01:87:7a:cc:c1:cb:69:c9:
         11:66:22:d8:3b:55:d9:fd:51:9b:8a:41:3b:32:2c:4a:e6:a6:
         1b:df:66:e0:35:09:68:e8:68:2f:42:ea:e4:2f:f2:f6:93:36:
         6d:8d:32:99:85:c4:d1:a6:cd:a5:c8:17:72:45:35:b7:e1:12:
         62:84:c1:e2:fb:db:7b:d5:d9:94:9a:e3:f8:d1:ff:d7:a3:66:
         d9:bc:96:52:b6:ac:5a:e9:2c:04:b9:43:05:8a:35:d8:b6:31:
         2a:1d:1d:86:20:e8:ab:8b:9a:1a:74:75:1b:c3:61:ba:3d:b4:
         18:94:0b:42:dc:e7:41:4f:7f:7c:22:39:17:61:46:e8:18:12:
         95:1e:dd:7f:df:9f:51:8d:8d:7d:b7:44:ca:58:23:c0:2e:aa:
         a5:13:9d:6f:97:c7:9d:1d:6b:3f:5f:0a:22:ff:e3:f7:fe:5e:
         55:f8:0d:88:a9:2c:6d:99:a1:4c:d7:8f:ff:27:76:8a:b4:6b:
         f3:58:2a:3b:07:d2:89:e7:6b:91:5e:b1:28:11:22:a6:3b:41:
         e8:64:2c:81:d6:27:50:58:3d:8a:e4:03:96:34:43:b9:46:4e:
         7f:0d:00:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----