Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/57cdf354-1c59-375f-a901-7cae2a7a4663.roa
File:                     57cdf354-1c59-375f-a901-7cae2a7a4663.roa (raw, json)
Hash identifier:          6zA1TBFWuo/I3XFVCrOWDUR0vZUnAiyjKYlkzkkAEKQ=
Subject key identifier:   9E:43:9C:BC:3D:6C:1D:BF:3D:ED:99:19:41:79:B7:B9:DB:EB:57:FC
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1729942BE4C
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/57cdf354-1c59-375f-a901-7cae2a7a4663.roa
Signing time:             Tue 09 Jun 2020 13:26:27 +0000
ROA not before:           Wed 21 Oct 2015 04:00:00 +0000
ROA not after:            Mon 12 Sep 2022 04:00:00 +0000
asID:                     53340
IP address blocks:        23.133.4.0/24 maxlen: 24
                          202.5.29.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:99:42:be:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Oct 21 04:00:00 2015 GMT
            Not After : Sep 12 04:00:00 2022 GMT
        Subject: CN=de80dc0f-f127-4294-9c3f-658eef190c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:bf:38:7c:db:69:29:bf:c1:16:6f:dd:f5:
                    20:8c:9f:4b:22:d1:38:09:c7:d2:40:d6:a5:31:2d:
                    53:7d:17:75:32:0a:4e:22:e2:c8:66:67:ac:da:88:
                    fa:b9:ae:f5:37:64:86:2e:44:2c:b4:aa:f6:10:28:
                    cd:85:28:6c:73:22:6a:2e:28:82:4c:bb:ab:f7:c6:
                    2f:b6:3d:46:3d:48:10:c6:49:31:44:ce:43:62:3a:
                    f8:52:a0:36:a7:54:e2:dc:d1:a0:37:38:ad:0a:02:
                    f8:c8:2b:0b:9e:d6:0a:47:3a:06:96:5f:9a:36:af:
                    69:13:73:ef:ac:f9:2b:f1:33:8e:dc:37:7e:f0:df:
                    f0:3c:81:10:9f:5f:fc:8b:2b:f5:92:70:93:fa:b9:
                    fb:b0:c6:71:d0:80:2f:74:e7:d3:19:c1:76:22:74:
                    7a:8b:19:21:71:95:fb:f3:7d:69:b3:6f:30:ce:63:
                    2c:11:12:1a:b3:c3:ff:8b:a4:39:9f:b9:cc:b2:93:
                    d3:ac:e9:39:2d:98:06:24:88:a7:01:ca:f9:a9:e7:
                    38:3a:1f:4e:29:b0:33:0e:6e:7e:dc:20:6c:58:fb:
                    a3:bc:57:b6:1c:8e:76:27:47:80:32:19:9d:0c:a5:
                    6d:d2:f1:d7:70:b9:2e:ae:38:ac:46:f2:b5:6a:1a:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:43:9C:BC:3D:6C:1D:BF:3D:ED:99:19:41:79:B7:B9:DB:EB:57:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/57cdf354-1c59-375f-a901-7cae2a7a4663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.4.0/24
                  202.5.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:0b:f5:9b:a6:6c:27:e5:64:2f:49:f3:a2:b3:1d:80:c3:75:
         66:71:fa:5a:39:c0:7e:c4:ef:9e:72:6a:0e:bc:44:7a:e7:3e:
         e3:f3:58:7a:99:a2:f2:ae:40:d5:83:0b:d8:f0:e4:7b:e7:9b:
         f9:cd:dc:4b:df:9c:22:7f:cb:e5:79:f1:08:de:68:59:5e:ae:
         82:b2:7c:96:2e:de:51:25:5b:e6:91:16:94:72:96:43:77:ae:
         fc:a3:3c:1b:01:3c:ee:28:4e:36:dc:71:2a:ce:1e:1b:b4:e7:
         47:fd:99:77:bf:7b:7d:b1:05:94:72:ea:c4:d2:df:b2:7f:a2:
         9a:0e:40:d7:6d:82:a5:5a:fc:45:ea:0d:c8:18:8d:2a:40:f3:
         ad:32:3b:d9:4d:10:24:d9:96:3f:06:42:3d:b4:55:93:bc:cd:
         3b:6a:04:e6:98:09:b0:9e:aa:62:56:4d:00:33:d5:51:c4:66:
         a2:23:09:5f:a2:ff:7c:47:eb:a4:7b:58:fc:92:d2:f0:88:4d:
         60:15:ba:93:08:03:06:a8:ea:a7:18:1d:13:99:79:86:9c:8e:
         95:12:c6:9f:d6:aa:8d:9f:c9:72:78:5c:fb:b0:e8:32:7a:c9:
         db:af:35:7f:f8:5c:50:4a:78:19:7e:b1:b0:88:07:d0:33:72:
         f7:ed:ab:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----