Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/e4265cb5-b330-3e63-82c2-15eecee6f2ec.roa
File:                     e4265cb5-b330-3e63-82c2-15eecee6f2ec.roa (raw, json)
Hash identifier:          VyGLpOsfi3LBEVuX4sfrXPaEwFYNzcvM9zsWfMYrKd4=
Subject key identifier:   06:1D:54:01:36:4B:D8:38:02:58:2A:47:5C:7B:AC:71:8D:2D:4F:C4
Certificate issuer:       /CN=55452ee1-697d-484d-b971-7a8c75820ecc
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E737F9C5
Authority key identifier: B6:86:A0:07:79:5A:6A:89:6F:58:55:92:09:53:B7:56:7D:D3:7C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/e4265cb5-b330-3e63-82c2-15eecee6f2ec.roa
Signing time:             Wed 24 Jun 2020 16:45:04 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     32391
IP address blocks:        74.120.128.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e7:37:f9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55452ee1-697d-484d-b971-7a8c75820ecc
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=2be50c1d-bc74-4cf5-8484-428a43ada001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:9b:d5:d6:54:6a:38:30:7b:5f:87:39:43:
                    30:a8:1e:6b:d2:92:da:d7:c5:25:e8:af:8e:67:b4:
                    57:5b:5b:60:a5:d1:5d:70:7c:0b:85:eb:01:58:db:
                    50:ea:b8:3b:5e:8e:c8:2e:04:d3:a2:1a:df:c9:4e:
                    45:56:1d:25:ac:ff:34:10:21:07:6d:c0:46:9c:fc:
                    43:ff:57:1c:06:52:37:f8:0b:01:95:e9:05:35:3c:
                    48:6b:79:9c:3b:98:d8:b5:a8:f6:79:dd:71:bf:99:
                    ab:72:a9:aa:dd:41:1b:b8:13:28:d2:79:57:21:8a:
                    ad:6a:4c:17:df:9a:b2:74:b4:ec:d5:53:60:e3:04:
                    fd:12:8a:5c:74:70:1e:a3:c3:1d:f4:48:6a:de:5f:
                    7e:d7:0b:bc:aa:be:ba:93:bd:5d:94:72:28:c6:41:
                    7b:4f:98:6e:e8:aa:5e:45:73:b5:72:cb:b1:8a:be:
                    6b:e1:9e:1c:3b:d7:e3:30:0e:6c:19:64:c9:1c:45:
                    19:e7:45:fe:81:15:fb:dd:ff:c2:a7:8a:a5:08:2b:
                    8f:39:df:74:ed:4c:5e:66:6d:82:64:af:0c:2c:00:
                    38:6e:04:43:76:fd:39:0a:fc:84:77:94:0a:c3:6a:
                    f5:eb:dd:3b:4f:a2:bd:84:b8:ee:bf:87:d2:48:72:
                    4c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1D:54:01:36:4B:D8:38:02:58:2A:47:5C:7B:AC:71:8D:2D:4F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/e4265cb5-b330-3e63-82c2-15eecee6f2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/55452ee1-697d-484d-b971-7a8c75820ecc.crl

            X509v3 Authority Key Identifier:
                keyid:B6:86:A0:07:79:5A:6A:89:6F:58:55:92:09:53:B7:56:7D:D3:7C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:4c:dd:21:cb:c9:ce:db:cd:2f:eb:d1:42:7e:02:97:5e:76:
         b6:94:56:3b:86:c6:0d:e9:dd:51:6f:82:47:39:c5:6f:aa:ff:
         50:c5:a2:88:87:5e:da:5f:d1:33:ae:46:ca:eb:11:73:c7:64:
         96:26:95:6f:b4:3e:72:92:7e:53:cb:4a:b2:75:5d:8b:8d:95:
         33:34:59:02:60:6c:52:a2:0b:53:64:e3:dc:47:e1:02:ce:84:
         85:7e:ba:e0:d9:af:9a:6e:40:42:74:53:bb:16:55:fd:ba:c9:
         16:f3:c4:4a:8c:d6:cf:8b:02:ed:77:b8:6e:b8:87:fa:70:27:
         93:da:3f:21:94:65:29:57:c9:45:c5:ea:80:b5:2f:70:be:9d:
         3c:c2:99:0d:0f:a5:2a:64:54:f7:34:ce:3e:03:21:dd:7e:79:
         64:23:10:60:2d:c3:03:d8:c1:67:4c:23:1a:44:40:2e:c0:d5:
         da:de:93:f1:82:93:61:01:2b:4f:c9:61:48:cc:10:e2:f1:76:
         e1:e9:86:ac:ef:33:98:d7:df:9b:46:db:e9:07:7b:4e:c5:f8:
         19:f5:d1:30:1b:bd:4e:f1:90:12:8f:a5:1e:17:9a:e8:ee:ca:
         6c:da:b0:82:e4:87:2e:2c:2d:71:dd:8f:8d:f7:c7:fb:1d:e8:
         c6:a5:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----