Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bcbe8b08-a09a-3884-8a3b-b94af51b7194.roa
File:                     bcbe8b08-a09a-3884-8a3b-b94af51b7194.roa (raw, json)
Hash identifier:          sfA73D6n6BfTXnrn8I32AuURjpaIWlRLFg2jfRH9We4=
Subject key identifier:   1A:49:86:53:0D:97:75:76:0E:0A:48:E8:CE:50:04:27:E1:3B:E5:BF
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837BD9DFB886E140154DAEBDFC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bcbe8b08-a09a-3884-8a3b-b94af51b7194.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 29 Jan 2023 05:00:00 +0000
asID:                     25668
IP address blocks:        209.53.214.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:bd:9d:fb:88:6e:14:01:54:da:eb:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Jan 29 05:00:00 2023 GMT
        Subject: CN=e39602a0-8051-4861-ad05-207c96bc55cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:88:6f:6d:18:c5:3b:cc:72:ad:b8:1c:ca:08:
                    70:a5:47:16:95:f9:99:a2:1b:d5:97:87:2e:25:1a:
                    1c:f3:c2:0c:12:c0:66:20:6e:db:da:56:65:1d:ac:
                    b9:f3:b8:7d:ff:b5:61:63:bc:0c:c2:69:af:e4:c6:
                    a1:c5:aa:2a:5c:e4:62:1c:4e:5d:d0:9f:14:10:0e:
                    3a:6f:4f:59:aa:0e:5a:b6:e5:62:17:84:58:80:7d:
                    e2:7f:fe:19:36:ea:1d:96:2e:0a:25:d5:c0:59:c5:
                    8f:5d:f3:43:3f:9f:df:7a:c7:78:6d:6b:b1:0d:1a:
                    67:6e:f5:84:7b:ef:ff:c1:5a:34:9c:8a:88:62:c8:
                    88:f3:29:35:56:52:e7:29:aa:ac:37:a5:d4:90:da:
                    8c:ee:7b:3a:41:c9:09:83:6b:1b:16:98:e3:b0:f1:
                    0f:4f:04:93:f1:3c:32:4e:b3:b0:c6:6f:81:39:5c:
                    d8:c2:29:ac:d8:d4:05:cd:52:67:a0:78:8e:f0:4d:
                    60:3f:f9:38:7f:e3:cb:70:c3:d2:93:ef:d4:99:99:
                    04:66:c7:4e:18:53:14:f1:a6:64:59:0b:72:ec:97:
                    46:a1:23:6e:1b:91:3a:9c:82:a1:56:d9:fb:d1:3c:
                    7f:67:b9:5b:a7:6b:4e:48:ab:05:42:73:c9:25:8e:
                    9f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:49:86:53:0D:97:75:76:0E:0A:48:E8:CE:50:04:27:E1:3B:E5:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bcbe8b08-a09a-3884-8a3b-b94af51b7194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ed:a6:a9:d6:d2:d6:72:4e:81:5c:1c:b0:51:8b:d7:f3:fc:6a:
         41:5c:94:84:49:c5:9d:0e:37:f6:02:95:8d:23:9d:4c:02:d8:
         a7:cc:80:5c:ce:e3:38:44:2f:60:4f:b6:4f:8c:15:6b:07:21:
         5d:92:87:f7:8d:4d:e7:dd:f1:95:c9:ac:88:62:b0:41:7f:b3:
         30:34:29:81:3a:dc:18:14:78:8f:ac:f4:57:55:54:49:01:1e:
         1c:0b:0a:70:ee:84:30:4d:f0:32:3e:4b:dc:ec:b6:e3:cd:8e:
         de:94:60:48:8f:d7:98:7c:03:f6:21:fb:8a:b1:66:9e:4f:88:
         55:14:81:44:56:32:61:ee:49:4f:3f:e9:7b:d6:d1:2f:f3:b6:
         97:55:96:2b:09:2c:7c:0e:8b:b1:e9:ae:9d:ae:1a:00:6c:29:
         6c:ff:78:dc:db:ee:7c:46:20:9b:21:f6:b8:e6:e8:9f:73:09:
         6d:bb:e8:ee:7a:9d:c4:35:bd:74:09:03:6a:6f:66:dc:b3:e7:
         40:cd:2c:84:82:6a:00:5b:37:0a:4c:34:8c:17:e1:43:31:a2:
         f0:f5:3b:bb:29:c9:80:15:87:71:50:f2:4f:49:76:4d:6c:09:
         72:58:74:4f:05:c8:48:f2:ac:02:f9:97:c8:37:1c:02:ab:07:
         56:d6:17:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----