Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/edac1836-bbad-3a65-9e09-f4e69a1b19d6.roa
File:                     edac1836-bbad-3a65-9e09-f4e69a1b19d6.roa (raw, json)
Hash identifier:          1FIwmrKtfVNWzYSEPNVVQaSovD7M0wSN/VqF7NGSxZw=
Subject key identifier:   4E:A9:E1:A4:F4:AE:63:52:BF:7D:50:1F:5F:1B:7E:3A:7B:4A:33:F6
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328576D51CC73C042CFC17422490C65
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/edac1836-bbad-3a65-9e09-f4e69a1b19d6.roa
Signing time:             Wed 22 Apr 2020 04:00:00 +0000
ROA not before:           Wed 22 Apr 2020 04:00:00 +0000
ROA not after:            Sun 27 Nov 2022 05:00:00 +0000
asID:                     46450
IP address blocks:        69.12.26.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:22:49:0c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Apr 22 04:00:00 2020 GMT
            Not After : Nov 27 05:00:00 2022 GMT
        Subject: CN=ae02cbb8-8d96-4046-8afc-71b74951b7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:65:b8:be:cc:e5:ef:c7:79:2a:7c:cd:6e:
                    27:05:69:06:32:01:fd:64:00:1a:75:42:2f:84:24:
                    0c:44:29:57:d7:9d:c8:a9:9f:97:e8:a5:d6:49:d2:
                    59:f8:f1:e7:0a:7f:8e:e2:c8:01:2a:03:b5:1c:cd:
                    30:8e:5a:5c:73:8c:53:b8:f1:99:55:39:1c:ec:9d:
                    83:28:c5:0e:45:3a:43:73:f5:0d:51:43:a6:e6:29:
                    3b:82:95:04:77:3b:e5:15:65:e6:e6:43:27:fa:a4:
                    81:0e:1c:77:50:6f:5b:00:64:47:c7:b8:7c:03:9b:
                    85:cf:e3:1a:da:c1:82:f0:7a:de:dc:0b:86:da:0e:
                    8f:5e:20:fd:c6:07:34:30:68:48:87:d5:08:ab:2d:
                    7a:1e:0f:09:72:d0:0f:9a:70:60:fe:32:8f:eb:c6:
                    1c:2f:ee:98:e0:3b:87:79:d4:f0:57:aa:d6:51:e8:
                    be:25:8f:9d:08:3f:7d:ac:d9:9f:54:21:10:4d:7d:
                    86:60:0f:6c:49:d0:d8:5d:89:97:fb:bb:e6:bc:0c:
                    3a:ea:46:e2:a0:fd:32:2b:df:2b:4c:9c:9c:f1:65:
                    33:e8:45:3c:c6:97:1c:cc:e8:30:df:8d:b3:33:f9:
                    cd:05:f3:e2:68:c1:87:f3:11:e8:94:0a:19:fa:1d:
                    8a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A9:E1:A4:F4:AE:63:52:BF:7D:50:1F:5F:1B:7E:3A:7B:4A:33:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/edac1836-bbad-3a65-9e09-f4e69a1b19d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.12.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ab:a2:63:3c:ba:37:10:fb:d9:d1:be:22:12:63:09:e8:31:
         fe:38:a0:3c:5f:2c:02:b2:3f:6a:2e:22:e3:1d:ea:e6:82:0a:
         47:a7:c6:ff:90:bd:b7:7a:84:5e:1b:39:d6:3d:8c:df:a1:73:
         6e:9a:3c:05:ff:37:07:8f:10:9c:37:46:f5:1a:af:09:d2:4f:
         df:8e:9c:89:95:e1:28:08:b1:56:39:75:df:a7:86:9b:90:5c:
         09:c9:60:9b:58:3f:38:37:68:6c:f3:b0:7a:36:44:4f:d3:19:
         98:13:de:d6:a1:a8:be:44:be:1a:94:a6:94:67:e6:51:ed:61:
         b6:4c:9b:8a:c4:31:ef:d4:36:b0:de:df:01:94:a4:61:10:9c:
         21:8d:eb:91:1a:ff:07:cb:e8:fa:98:d2:4c:69:72:04:1d:f9:
         68:ca:94:58:86:14:7e:c5:b0:76:ca:b6:8f:fe:ef:98:a4:20:
         a2:46:a7:85:ed:09:f4:54:26:fa:a9:40:34:4b:7a:f7:63:fb:
         8f:c6:e6:e4:80:41:c6:26:d4:35:45:75:94:0e:78:e2:0f:19:
         49:fd:6d:a3:4f:34:86:4a:0c:ce:81:25:ae:9e:26:bd:c8:40:
         32:77:f3:5a:2d:ac:f2:27:c6:c3:7d:73:2c:27:8c:ce:d7:d8:
         19:a9:bc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----