Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/1cee2d49-3a4b-3895-bcd1-4e26ec2ab229.roa
File:                     1cee2d49-3a4b-3895-bcd1-4e26ec2ab229.roa (raw, json)
Hash identifier:          HiGRVgBjb7s3zy58FuE8w/XYNfzUFmCzlCfkbf7ZX+E=
Subject key identifier:   5C:4E:04:AF:47:30:FC:09:B1:71:D7:97:AE:6B:E1:2A:F3:C5:AA:7A
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328576D51CC73C042CFC17344A9CF81
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/1cee2d49-3a4b-3895-bcd1-4e26ec2ab229.roa
Signing time:             Sun 12 Jul 2020 20:14:06 +0000
ROA not before:           Thu 28 May 2020 04:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     53667
IP address blocks:        162.245.0.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:44:a9:cf:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 28 04:00:00 2020 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=322b83d2-4392-462c-8b6c-f578085cc687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:4f:ee:29:0f:82:a8:34:d9:c2:0c:4d:5b:
                    15:e4:5d:6b:11:05:92:09:75:00:ae:02:ad:dd:b1:
                    50:7d:f9:3f:8a:bf:ad:22:9d:56:5a:00:c1:16:96:
                    eb:3e:d2:c7:b3:5f:1b:16:68:3a:6a:f5:52:d8:9c:
                    c4:96:65:40:2a:dd:76:c2:20:44:4b:00:e8:fe:6b:
                    46:64:71:13:9a:f9:80:90:4f:10:aa:5c:fb:0a:b5:
                    a9:d1:43:4b:a1:b3:28:3c:f4:38:64:82:d1:39:ae:
                    cd:15:98:7f:58:56:0a:62:ba:41:ec:cc:bc:e9:95:
                    66:60:66:a2:23:63:d4:2a:47:49:a3:4f:54:18:04:
                    93:99:db:5a:5c:57:53:f8:05:7e:2a:aa:88:cb:6c:
                    d6:fc:46:73:b2:36:79:da:14:1f:f8:92:bc:7c:c1:
                    ed:c7:22:ba:06:9a:b1:f2:e1:1f:a6:f0:4b:d4:78:
                    cc:c7:6a:43:e8:59:33:fb:aa:af:bc:83:c4:8d:f9:
                    f1:15:1a:03:ca:1e:36:47:a9:ca:9d:ad:36:d4:83:
                    c9:b5:9f:bc:1b:1f:cc:22:0e:90:ae:81:61:28:0e:
                    2b:a9:37:3b:af:50:46:ac:97:06:95:62:3f:3a:37:
                    68:f9:ed:ba:52:2f:b3:e3:e5:ee:3c:71:6a:c4:6d:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4E:04:AF:47:30:FC:09:B1:71:D7:97:AE:6B:E1:2A:F3:C5:AA:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/1cee2d49-3a4b-3895-bcd1-4e26ec2ab229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:2f:f1:07:7b:29:99:e9:46:24:e3:80:0d:7b:aa:84:c1:9a:
         a2:af:fb:81:3d:cc:fb:23:d3:5c:3a:c5:82:64:e5:e9:76:14:
         01:0e:70:ab:a7:4a:37:1d:62:be:94:9e:9f:bd:50:02:a9:8e:
         6a:b1:1e:a9:ec:97:68:f9:4b:90:4d:74:16:9a:61:4e:d9:81:
         1b:00:6b:30:a3:09:e7:ce:db:e4:d1:38:a7:cf:2f:08:6a:6e:
         fc:4d:54:df:c2:60:86:88:86:55:6c:6b:7c:b2:24:5e:f8:ad:
         1e:c6:49:e6:4f:d0:f8:42:c7:79:17:4e:46:e8:e1:76:a8:85:
         ff:7e:6c:61:61:89:c6:ed:00:05:74:40:97:48:07:3d:13:44:
         d5:61:9b:ce:57:eb:ea:61:71:3d:1a:18:8c:5a:a5:d4:56:38:
         91:41:09:38:82:03:5e:7d:4a:47:a4:d7:ff:bf:30:be:78:45:
         dc:18:c3:50:97:dc:1f:b2:e9:1e:21:7e:1d:ba:31:ad:c9:a1:
         5e:5a:e6:a1:60:ee:2d:61:bd:37:16:b7:42:36:24:a0:bc:d7:
         03:04:fa:c9:cb:52:48:bf:24:a3:4e:e5:f6:18:06:ac:1d:2a:
         85:9d:29:55:b4:0c:11:ea:53:4d:78:0b:be:bc:7b:df:c2:15:
         d6:ab:f7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----