Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/24373f3c-5ad0-3271-b115-88303940a3fb.roa
File:                     24373f3c-5ad0-3271-b115-88303940a3fb.roa (raw, json)
Hash identifier:          xFy82erjpVgKt3vLbas1Q0mpCoaLdVh0wGk7jEOW6Sg=
Subject key identifier:   07:95:77:D0:A5:E7:66:FF:19:74:2C:78:D5:91:2F:C8:46:00:DD:66
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328583B67F004F329D66E65FE225AC0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/24373f3c-5ad0-3271-b115-88303940a3fb.roa
Signing time:             Wed 30 Sep 2020 04:00:00 +0000
ROA not before:           Wed 30 Sep 2020 04:00:00 +0000
ROA not after:            Sat 31 Dec 2022 05:00:00 +0000
asID:                     40065
IP address blocks:        107.148.160.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:67:f0:04:f3:29:d6:6e:65:fe:22:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 30 04:00:00 2020 GMT
            Not After : Dec 31 05:00:00 2022 GMT
        Subject: CN=8c3c2bc2-af56-4015-a6ad-a021594d69f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:aa:64:53:0c:f3:be:b6:c9:8e:21:b9:78:
                    12:f3:df:70:dc:51:50:19:80:98:d5:de:2a:51:79:
                    e0:83:b2:89:86:9f:8c:19:50:c5:f7:4b:39:4a:20:
                    5b:d9:74:c5:d2:b9:7a:07:68:ac:ba:a0:9b:f2:b8:
                    ce:cc:12:76:d9:19:55:48:ca:d6:28:28:ce:49:ce:
                    c3:fb:d3:d3:3d:72:2b:5d:a0:3e:41:60:b7:79:b8:
                    94:2e:bd:63:0c:76:b3:fd:a6:95:c3:00:04:21:b6:
                    b6:06:6b:3a:55:64:ff:52:3b:a1:c8:f1:32:c7:bf:
                    db:27:4a:57:3d:8e:34:9a:9a:d1:c9:28:ff:2d:6d:
                    ed:e3:86:83:e2:4a:a8:98:f4:46:52:91:66:bb:27:
                    d5:3a:bc:1b:ee:58:e0:02:4a:e3:94:c3:78:ea:4f:
                    d1:11:27:dc:6b:e3:0d:ca:6d:42:a0:9a:5c:9f:7d:
                    e4:cc:5d:a5:3f:0d:e6:01:58:f4:4e:09:a6:89:80:
                    d8:6b:e0:a6:a8:a4:3c:40:6e:8e:bf:71:a5:7d:25:
                    c4:db:38:21:24:c5:e1:ff:fa:9e:fa:7e:0b:31:c9:
                    c1:e9:b6:82:c8:fd:4e:4f:17:23:75:ef:9a:19:60:
                    77:0f:ff:91:e2:18:c4:ab:bd:37:9b:98:8a:71:09:
                    5b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:95:77:D0:A5:E7:66:FF:19:74:2C:78:D5:91:2F:C8:46:00:DD:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/24373f3c-5ad0-3271-b115-88303940a3fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3c:25:70:77:2f:32:6e:d2:e0:8a:ad:21:be:13:e0:db:cf:
         13:c9:60:7b:45:ae:62:4d:fa:9b:fb:7d:35:f9:f8:b7:ff:ca:
         8a:33:c2:49:b2:e3:37:97:a1:20:6a:a9:32:78:22:3d:28:6f:
         26:c3:f5:29:25:31:9e:7b:2d:75:8c:58:b8:8c:7d:54:09:df:
         25:39:5b:da:ad:fb:a7:31:40:c2:a1:a6:b5:5c:4d:33:0b:65:
         38:65:0e:28:04:7d:61:37:a3:9f:c4:9b:d5:ee:1e:40:e3:eb:
         29:9f:c4:55:44:48:04:20:4b:e5:32:78:fb:51:cd:ef:10:d7:
         09:7d:96:90:6d:3a:bf:a5:41:e7:b2:e9:70:3c:7c:94:62:11:
         b6:e4:bd:52:cc:a4:22:ed:db:01:59:27:9b:cb:b0:f4:4f:a0:
         3e:22:f0:fc:f1:09:9c:3a:4c:a9:72:c3:3d:b9:49:d1:2f:bc:
         02:48:8a:bc:d3:22:0e:48:e7:cb:a9:98:d0:f6:36:2f:75:85:
         d9:10:47:05:f4:5d:17:77:db:88:4f:8c:fb:a7:4c:1a:69:0d:
         27:00:97:41:2b:f2:75:a2:64:2f:eb:f6:d3:80:88:fc:a2:c4:
         09:34:4d:d8:5b:6e:b6:be:78:86:8d:7a:d8:a0:07:21:27:1c:
         3e:5d:71:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----