Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c6864a77-c847-37df-aa9d-cea706a05479.roa
File:                     c6864a77-c847-37df-aa9d-cea706a05479.roa (raw, json)
Hash identifier:          +cQZnlNuaAEw0H9upMiKv+81zX/3Yh+I0MDh3qVLUpU=
Subject key identifier:   4C:C6:2D:C0:3E:78:12:E2:C3:C6:6F:2D:49:0B:CB:06:ED:4A:A0:31
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328576D51CC73C042CFC17344A14A36
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c6864a77-c847-37df-aa9d-cea706a05479.roa
Signing time:             Sun 12 Jul 2020 20:04:47 +0000
ROA not before:           Thu 28 May 2020 04:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     53667
IP address blocks:        199.19.224.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:44:a1:4a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 28 04:00:00 2020 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=6dc95323-b99e-4b21-8b2a-b0c411084e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:54:96:b6:18:5a:b8:f3:08:ac:31:fe:0b:3c:
                    11:43:4b:58:0d:df:43:c8:aa:3d:ce:7b:8f:96:9c:
                    4c:04:24:64:03:e9:8d:c2:e9:19:0e:87:3f:9f:1f:
                    04:40:05:e4:47:04:d3:be:95:54:40:b4:4a:f9:17:
                    50:35:35:c7:0b:6a:60:41:89:fe:fd:2e:06:de:da:
                    fc:31:12:c5:77:2a:48:75:3c:55:2c:b7:25:20:61:
                    cd:c4:87:00:5c:12:55:54:3a:6c:9f:21:63:30:97:
                    77:95:d5:f2:79:83:24:1c:e6:21:a5:49:58:ce:de:
                    7b:6b:10:34:53:aa:20:e9:92:e0:50:0a:ee:44:f6:
                    ed:09:9d:04:20:88:e7:91:bc:fd:53:6e:f0:c3:3c:
                    b2:8e:e1:9b:b8:c0:b2:7b:2d:34:0c:45:78:73:33:
                    90:c3:3e:51:98:89:7e:95:e1:23:7e:3e:7f:8a:b9:
                    16:da:54:9a:f7:11:6f:67:e8:f3:9a:cb:4d:df:09:
                    8f:3a:01:5f:71:31:ff:d6:24:99:bb:51:07:20:cc:
                    6e:6b:b3:8b:dd:b7:41:96:5b:09:52:0a:2c:08:fc:
                    52:ab:ef:85:f2:ec:f2:2f:42:ff:b0:7a:e1:d6:6c:
                    90:99:1e:1a:70:1c:08:4d:49:f9:58:57:a2:cf:77:
                    01:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C6:2D:C0:3E:78:12:E2:C3:C6:6F:2D:49:0B:CB:06:ED:4A:A0:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c6864a77-c847-37df-aa9d-cea706a05479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:31:d4:5c:8d:24:52:54:88:a3:81:ba:2c:fd:48:f2:fc:c0:
         e8:15:7f:96:62:a0:cb:9d:94:8a:44:77:62:63:42:06:e1:54:
         d0:d5:9a:ab:59:f2:1a:24:4b:ba:44:91:72:64:77:98:6d:39:
         4d:02:ae:5c:08:c7:6d:82:3c:3b:5f:77:dc:5c:00:eb:27:36:
         47:ee:cb:d6:a5:c2:01:38:c7:78:66:69:e1:f7:05:95:ea:28:
         7f:ca:db:10:80:cc:e9:7f:94:7c:d5:8d:21:12:18:d0:9c:76:
         dd:3f:7f:d6:5f:16:83:2b:d4:53:d4:18:92:bb:0f:7a:6a:88:
         8d:f7:62:94:3f:fe:23:f8:59:aa:ef:61:95:28:f6:4f:86:24:
         a7:60:9e:4f:5d:ee:53:15:38:55:02:e5:22:56:e6:95:8c:02:
         37:86:eb:16:b2:e1:38:2f:39:57:a1:c2:dd:68:8b:3a:2c:3e:
         cf:bd:e3:ce:66:b9:97:4b:3c:25:f5:70:ab:31:09:04:ef:f4:
         54:0f:dd:7a:9f:c0:60:3f:67:e4:e2:77:b3:86:6e:a6:28:a6:
         af:f0:41:94:78:78:9d:ea:b7:54:79:22:7b:c0:29:d3:9f:4c:
         af:8e:50:b0:69:6a:40:21:cb:1d:1a:b9:96:e2:02:7a:de:3b:
         df:40:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----