Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/0f1d07aa-ba64-3ed7-849e-4bde36c55573.roa
File:                     0f1d07aa-ba64-3ed7-849e-4bde36c55573.roa (raw, json)
Hash identifier:          aujz/Nt99p+tjpGnb5jWACtaqzvdBhuUgSdG24trmuk=
Subject key identifier:   0F:A5:50:BC:CA:2B:11:45:25:9D:AC:33:FE:29:CC:33:67:BD:64:8E
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F4328576D51CC73C042CFC171A7204982
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/0f1d07aa-ba64-3ed7-849e-4bde36c55573.roa
Signing time:             Thu 23 Apr 2020 13:00:43 +0000
ROA not before:           Tue 21 Apr 2020 04:00:00 +0000
ROA not after:            Wed 27 Jul 2022 04:00:00 +0000
asID:                     46562
IP address blocks:        216.201.80.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:a7:20:49:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: Apr 21 04:00:00 2020 GMT
            Not After : Jul 27 04:00:00 2022 GMT
        Subject: CN=716de4c7-8610-4341-a0d1-8825e8098086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:16:1b:d3:c5:cb:c7:3a:1c:53:26:eb:3b:ce:
                    19:35:6d:f1:26:4c:d6:ec:d2:0a:aa:56:04:73:97:
                    cf:0b:4c:71:d7:83:ec:6d:5d:ff:60:74:48:21:8b:
                    56:12:9e:cd:77:8b:7c:df:5e:5f:8c:82:50:37:c6:
                    ae:4c:98:31:97:f2:65:73:60:b7:60:b8:26:5a:de:
                    60:33:c9:3c:97:c3:16:43:bf:ae:ba:bd:ba:32:6e:
                    69:f8:2c:0f:ac:6c:70:1b:2d:b6:eb:03:04:bc:02:
                    a6:e8:2c:e1:57:ad:87:9c:80:79:16:3b:f1:1a:22:
                    cd:e0:50:42:8f:6a:de:0e:97:0c:c5:3d:1e:b8:93:
                    57:f9:42:ba:c6:5b:18:f5:be:58:cf:18:5a:fa:49:
                    78:c5:dc:e5:c7:92:6d:bf:4b:af:db:5b:4f:77:4c:
                    88:ee:c0:0a:03:56:8b:c7:4e:89:80:d2:aa:55:a3:
                    91:06:92:81:1a:9a:ae:9f:c1:e8:7c:89:49:b8:1e:
                    ee:79:e0:5d:e4:78:dd:89:dc:6f:79:19:aa:67:6f:
                    d6:f0:8a:ad:cc:8c:91:58:64:f8:d1:fa:2b:59:c8:
                    7c:73:60:0e:5c:b0:08:55:5a:c8:a3:cf:2d:a7:f0:
                    e2:2a:72:40:c5:1b:1f:a7:bb:c8:08:36:b2:d6:d3:
                    1b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A5:50:BC:CA:2B:11:45:25:9D:AC:33:FE:29:CC:33:67:BD:64:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/0f1d07aa-ba64-3ed7-849e-4bde36c55573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.201.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:85:43:13:2a:aa:98:c6:51:a6:42:eb:dd:d2:ad:7b:c8:59:
         c0:67:d3:13:b9:3f:00:94:9b:f0:c4:c6:e1:ee:34:e6:99:df:
         a9:e7:b7:a2:64:22:7b:fc:26:db:d2:da:90:64:3e:15:3a:64:
         ab:5e:a6:b0:ab:79:0c:bc:9b:9e:37:df:ec:45:98:80:a2:f5:
         84:e6:b9:36:83:10:84:a0:45:16:c3:02:35:f0:37:e1:0c:3d:
         13:8f:be:74:1f:e6:9a:ba:62:7e:aa:b2:fd:b6:c7:7d:aa:96:
         92:85:bd:f6:94:b8:4d:84:20:18:df:8d:0f:43:9b:95:6e:2c:
         2f:5d:35:e1:df:bd:9e:66:ef:ef:bc:87:dc:59:05:c3:07:45:
         7d:c7:08:eb:33:1c:4f:e8:dc:7a:65:00:5c:eb:e5:15:fc:96:
         53:dc:db:1c:15:df:2e:4c:d6:70:d6:1e:e9:6e:a4:9c:04:08:
         b5:29:b0:d5:43:75:3a:8e:53:a1:84:3b:b1:b2:4e:92:d1:49:
         72:90:53:dc:8e:7f:fb:83:42:a6:eb:dd:ea:cc:82:8d:6a:db:
         aa:60:22:ec:72:c6:10:96:f7:42:84:3e:e6:fa:c1:16:3a:81:
         cb:1c:98:33:59:b9:1b:53:8f:c2:83:ba:f1:ce:59:5c:de:12:
         a0:27:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----