Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/387c7710-021a-39f0-ad43-cdf92ad4c49f.roa
File:                     387c7710-021a-39f0-ad43-cdf92ad4c49f.roa (raw, json)
Hash identifier:          zOkAtOw13kZQEPlsWaBVvQYqNim55d7hCKmrpN93vmo=
Subject key identifier:   C4:5F:54:7E:4D:5C:4C:EB:A8:45:6E:72:5C:D1:96:14:CB:9D:B5:5B
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F432858384A59262D9E5659C9EF957A80
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/387c7710-021a-39f0-ad43-cdf92ad4c49f.roa
Signing time:             Thu 27 Aug 2020 04:00:00 +0000
ROA not before:           Thu 27 Aug 2020 04:00:00 +0000
ROA not after:            Mon 20 Mar 2023 04:00:00 +0000
asID:                     61317
IP address blocks:        74.115.0.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4a:59:26:2d:9e:56:59:c9:ef:95:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Aug 27 04:00:00 2020 GMT
            Not After : Mar 20 04:00:00 2023 GMT
        Subject: CN=84162fb9-ce00-4fc0-b305-435187be5278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:21:df:09:2f:09:2e:33:b7:28:e5:11:f2:57:
                    ca:44:15:62:d5:59:d2:51:cb:24:45:d2:be:71:ab:
                    8b:bd:b9:fe:83:95:63:1a:29:09:17:d0:d8:04:6e:
                    b0:8a:90:9f:e5:cd:b3:61:2d:51:81:38:6d:9b:27:
                    78:9c:b8:d0:80:1b:ee:33:78:f5:46:05:6f:46:9c:
                    a0:06:b5:9f:b4:4f:d8:c2:77:37:c7:31:50:08:f2:
                    85:31:82:01:d3:06:7a:f2:2c:1e:a5:4f:30:0d:99:
                    cd:34:3c:89:11:71:43:26:ed:0a:cc:cd:47:a0:cd:
                    82:8d:07:5f:8a:cf:c4:92:11:60:f8:e3:7f:57:70:
                    99:49:ca:fe:6f:a8:53:be:96:ae:bd:ed:98:1b:07:
                    30:69:ad:ce:e4:2c:5f:ed:c9:c3:61:d6:ef:93:96:
                    ba:16:6e:4b:43:f3:8a:b9:12:90:6d:92:e9:5e:08:
                    9a:fe:02:f6:ef:b8:17:57:0a:a2:da:f8:27:5f:ac:
                    d8:bd:2f:02:75:bb:44:0e:b5:f8:2b:d0:df:fe:d6:
                    12:fe:29:43:f3:34:c5:dd:4c:2a:9f:75:1d:8a:f9:
                    09:8c:a6:dc:ce:d0:2f:ee:01:89:d5:e8:09:cc:c1:
                    c4:28:e9:05:d7:ac:78:2f:39:3f:2b:ff:ea:33:19:
                    af:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5F:54:7E:4D:5C:4C:EB:A8:45:6E:72:5C:D1:96:14:CB:9D:B5:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/387c7710-021a-39f0-ad43-cdf92ad4c49f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:79:35:1d:32:aa:0a:b9:11:b6:61:86:2c:1f:8d:f4:b2:a5:
         f3:18:74:8f:83:e2:97:4a:5e:1a:16:52:48:f9:f2:cf:20:a7:
         be:65:f9:46:65:0f:5d:4d:ba:42:66:5c:1e:9b:82:0e:c9:7a:
         7e:cb:f3:b8:48:33:13:a5:4d:26:c9:a0:05:e3:6d:14:2d:5f:
         8b:1d:51:ae:bb:fc:45:c1:34:17:1c:ab:f6:99:a3:85:60:6d:
         89:1c:78:f2:fc:32:8b:89:3b:46:4d:c5:f0:61:7a:89:79:e6:
         ec:f2:8a:a8:39:27:4b:15:55:e4:53:d0:26:50:e9:9f:9c:8d:
         0d:4a:70:d5:e5:1d:17:5d:40:fa:74:74:e1:15:bd:36:30:a3:
         fd:6f:a5:48:93:45:45:ea:fd:d8:e9:58:a7:3d:c9:26:f9:7c:
         fd:79:9d:43:5a:74:53:82:b0:0b:e9:7f:f0:ea:90:06:c6:66:
         15:64:79:07:7d:69:e8:70:6f:cf:7e:91:ab:79:e3:15:33:ca:
         7a:96:f1:62:fe:18:7c:e8:41:37:b9:10:c3:36:ee:85:a6:1c:
         5d:27:70:63:36:6a:bd:ca:8e:c8:00:89:d4:62:f0:a3:f3:39:
         a3:26:de:8b:ba:4e:66:19:31:e3:f4:ba:d4:7f:e2:a9:eb:f9:
         10:c9:fe:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----