Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/af6f7603-7e93-3653-9c76-3c4cf484b247.roa
File:                     af6f7603-7e93-3653-9c76-3c4cf484b247.roa (raw, json)
Hash identifier:          vx2mH6iOAvxCayepvGG/MSvjPtPvkvSMTFJV/bB+iJU=
Subject key identifier:   BC:52:7B:F7:72:BC:53:33:C7:5A:88:09:16:D8:31:B4:6F:D9:42:57
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328576D51CC73C042CFC17344AB9FFE
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/af6f7603-7e93-3653-9c76-3c4cf484b247.roa
Signing time:             Sun 12 Jul 2020 20:16:05 +0000
ROA not before:           Thu 28 May 2020 04:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     53667
IP address blocks:        198.98.48.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:44:ab:9f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 28 04:00:00 2020 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=eb47bcdc-2de6-4cbf-9b8f-9573f9378888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:29:38:51:43:86:ed:4a:c1:1b:8d:0c:45:04:
                    60:07:1e:d2:99:65:fa:79:bb:8e:e0:75:0e:39:b8:
                    c8:0e:c6:4e:87:ed:d6:a5:7e:99:88:f4:76:7a:24:
                    b8:f1:91:d5:a6:7a:ac:b9:aa:c8:31:a1:0a:83:89:
                    57:75:1e:1d:cc:15:41:f8:b7:08:6a:b0:08:29:20:
                    49:5a:fd:13:9b:36:a2:73:1e:3a:60:c0:db:88:4d:
                    6a:ec:a6:46:79:53:54:a0:21:c5:21:55:f9:15:3e:
                    dc:3d:a8:a8:96:58:6a:3b:1c:ae:7a:cb:bb:59:40:
                    4f:e8:76:e9:98:df:80:5c:a2:98:69:d8:35:0c:bf:
                    7f:af:6e:4d:c3:fe:f7:70:e3:ac:f6:14:99:e4:d4:
                    24:0d:3b:84:ba:c5:27:77:af:79:5e:b7:d8:74:46:
                    5b:03:16:a6:76:ca:75:13:0e:3b:d4:af:d4:b6:d8:
                    37:a8:d5:67:ee:d3:36:81:cc:7a:c2:75:67:51:9e:
                    b0:7d:ed:42:87:c1:37:3c:a9:64:d6:a6:f1:fa:0f:
                    a9:91:87:6f:91:4b:de:0a:3a:e6:b3:77:bf:94:1e:
                    a3:39:b4:1a:e9:32:a0:e1:9b:8c:bc:27:ad:d9:74:
                    a6:24:d5:1c:57:a1:ff:52:bc:b8:c4:58:70:a5:d9:
                    86:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:52:7B:F7:72:BC:53:33:C7:5A:88:09:16:D8:31:B4:6F:D9:42:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/af6f7603-7e93-3653-9c76-3c4cf484b247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.98.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:82:15:0b:43:05:49:78:77:4f:60:db:71:ac:a9:2f:6f:45:
         bf:f8:82:d7:db:e4:ad:32:98:70:39:69:75:0a:27:e3:2d:9d:
         0e:e6:53:82:9f:b5:d3:dc:af:3a:d9:89:61:4d:53:35:d4:be:
         7c:52:2f:0e:07:7a:bb:43:02:91:fa:9d:83:24:1f:7a:40:53:
         83:a0:d1:f0:07:e2:ca:69:d2:bb:97:0f:21:44:ea:0d:e6:50:
         32:d5:3a:e0:81:cc:ff:2e:b9:ab:59:05:65:7e:5c:62:34:af:
         0c:7a:82:35:3b:14:c6:44:5a:c9:2b:ba:d1:64:be:36:5c:50:
         7f:ae:69:d1:3d:1b:20:3b:85:79:f3:fb:f6:46:80:c0:d8:e5:
         25:94:41:13:3f:b8:db:6d:01:32:c5:cc:e4:b3:22:f4:9a:79:
         5a:b6:46:82:c3:16:a8:67:eb:29:09:af:57:50:03:b6:ae:0e:
         27:74:e4:82:ee:3a:83:5a:6b:c8:2f:99:ad:fd:10:b3:b0:ea:
         9b:d0:da:cf:51:2c:3b:84:30:7d:33:ef:3e:55:77:75:0e:c9:
         03:46:83:7b:81:3e:67:f6:6a:f3:59:c9:1f:db:3b:ac:da:61:
         64:5b:36:95:37:4b:2d:f3:df:5a:e2:2f:88:28:c5:dd:4e:e1:
         3c:0f:ed:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----