Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/ab83b995-e978-3ce5-88da-c2ddf6c5c691.roa
File:                     ab83b995-e978-3ce5-88da-c2ddf6c5c691.roa (raw, json)
Hash identifier:          IBCBNXm3J8uhylK7MlhFctLzUqz3IM2VD72rGnwEeIM=
Subject key identifier:   C0:67:5F:D6:38:02:75:A4:66:1A:3F:27:7C:4E:90:77:55:1D:49:B9
Certificate issuer:       /CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002
Certificate serial:       010D0C9F43285838C0A6F413563807F75E7EBD60
Authority key identifier: D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/ab83b995-e978-3ce5-88da-c2ddf6c5c691.roa
Signing time:             Mon 02 Dec 2019 05:00:00 +0000
ROA not before:           Mon 02 Dec 2019 05:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        161.199.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:c0:a6:f4:13:56:38:07:f7:5e:7e:bd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002
        Validity
            Not Before: Dec  2 05:00:00 2019 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=126a0b52-acf4-417f-8182-a8913d4c24c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:6a:f6:ff:2c:7e:56:25:88:65:8c:38:30:
                    73:b5:f1:04:e3:ed:8e:1b:f6:04:14:4e:7e:54:b0:
                    92:b0:e2:75:03:9a:cd:df:3a:97:8a:ab:b4:47:2c:
                    25:25:c0:63:44:c6:08:11:e4:74:a5:ed:ca:3f:f9:
                    f5:bb:78:32:02:c2:2c:27:27:47:18:d9:1b:f1:6f:
                    80:42:28:a0:9b:3d:71:82:e4:45:1f:50:3b:91:a6:
                    82:84:fa:0c:2e:2a:7a:d9:fb:35:9e:0e:af:5a:40:
                    d5:9a:ed:5f:1f:57:43:9d:1f:8c:41:5a:39:18:22:
                    62:8c:6d:63:90:77:2a:53:d0:99:af:ef:c4:70:e2:
                    de:aa:7a:79:40:84:30:0f:0d:c7:fb:fb:49:91:79:
                    27:0c:3f:18:02:37:84:c7:ce:d8:09:3f:21:25:02:
                    b1:ea:2d:9b:2f:0a:4d:a7:b1:84:3e:ff:39:2c:a0:
                    7e:52:78:35:43:ac:f6:4f:0b:2c:ff:3c:47:df:3e:
                    a8:5e:cd:7c:93:fd:61:8b:b4:7a:2c:e6:46:8a:9f:
                    2f:96:69:95:f0:c3:e8:6d:fc:72:6c:1c:d7:8c:0d:
                    d3:d4:f7:df:14:e0:ea:ed:59:2a:80:0d:39:b4:16:
                    95:68:21:32:61:01:9d:55:c4:ab:27:28:3d:93:87:
                    99:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:67:5F:D6:38:02:75:A4:66:1A:3F:27:7C:4E:90:77:55:1D:49:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/ab83b995-e978-3ce5-88da-c2ddf6c5c691.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl

            X509v3 Authority Key Identifier:
                keyid:D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:29:73:d4:54:65:42:86:10:6a:58:33:35:ab:fa:17:44:63:
         99:fd:05:c4:48:41:78:80:39:2e:79:fc:f3:d1:18:cc:35:fd:
         3d:cb:a2:e8:2f:88:74:82:f7:b4:5d:1c:c2:c6:84:62:c1:08:
         c7:67:88:72:ad:0b:6f:3b:14:87:29:e4:ea:72:5b:4a:bc:75:
         ce:c8:7a:0c:c2:eb:bc:35:d7:77:2e:52:80:98:5c:f9:46:c5:
         1e:f3:34:bd:8b:22:d7:00:7f:0f:80:c8:42:c0:3d:6a:fb:d2:
         e1:93:e6:dc:37:c6:ee:18:ff:33:eb:27:f2:5a:3d:5f:81:fa:
         b8:8c:ab:08:98:4c:10:50:46:1b:53:3d:5f:72:67:50:16:b0:
         5c:4b:33:54:66:05:a1:20:2b:51:0c:71:2a:2a:ab:0c:4a:44:
         5c:3c:28:87:9d:6a:e9:34:8d:95:0f:ec:f0:14:5e:53:d1:fd:
         97:80:38:4a:db:5a:dc:e4:ca:2b:55:d7:67:bd:ea:69:82:db:
         bc:7a:66:40:ad:a6:a6:1f:e4:46:89:3c:f8:68:06:a6:64:42:
         2c:90:ac:5e:21:13:bc:5b:b1:78:ec:cd:a7:52:92:50:c4:7d:
         a2:ea:39:69:44:4c:c0:bb:c2:44:7a:cb:34:91:de:b1:cc:8f:
         76:85:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----