Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b2a66d23-f174-3afd-a3b9-4529eb6cc4f9.roa
File:                     b2a66d23-f174-3afd-a3b9-4529eb6cc4f9.roa (raw, json)
Hash identifier:          RR8Zhgo1zpNMtr/L3822w9Z6bRz8LYLT6ObrXkbjk/Y=
Subject key identifier:   24:1C:C7:9F:39:96:2E:7F:5E:2E:D5:B6:EC:32:D0:7D:99:51:F4:FF
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328583C099130191C3D543E955D9000
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b2a66d23-f174-3afd-a3b9-4529eb6cc4f9.roa
Signing time:             Wed 24 Nov 2021 05:00:00 +0000
ROA not before:           Wed 24 Nov 2021 05:00:00 +0000
ROA not after:            Mon 26 Feb 2024 05:00:00 +0000
asID:                     15169
IP address blocks:        207.126.154.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:09:91:30:19:1c:3d:54:3e:95:5d:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 24 05:00:00 2021 GMT
            Not After : Feb 26 05:00:00 2024 GMT
        Subject: CN=0ad3e4cb-f8bd-4c3d-861f-3e2fabff99a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:02:aa:82:6a:13:96:ee:99:9f:38:7e:26:
                    dd:a9:45:80:51:6a:92:cd:01:59:20:90:49:2c:d4:
                    77:7a:e4:16:45:f6:de:e9:5b:dc:bb:e1:92:f3:e7:
                    6d:6e:c4:e4:44:31:72:33:54:f0:52:32:91:fb:d9:
                    85:22:4c:36:a2:3e:79:1f:6c:7f:18:0f:41:d8:25:
                    10:a5:e1:e8:04:18:c5:0c:f4:28:71:c9:8a:4b:88:
                    59:d4:6e:5e:29:3a:d9:0e:b1:c8:86:7e:b5:44:2a:
                    60:6c:62:b1:0e:87:35:08:34:3c:a7:a5:92:d0:19:
                    84:fd:bd:93:c2:15:b6:69:36:2b:3f:5c:c9:41:9e:
                    3a:50:5d:88:b9:ee:35:91:ac:92:12:69:0a:59:e4:
                    00:df:a7:74:d0:d9:17:fb:9f:ed:39:2a:45:c1:20:
                    81:20:bd:3c:8b:9a:fd:3b:60:ac:ff:92:95:b8:33:
                    71:4d:f2:5a:27:f1:d9:5a:1f:04:50:52:af:c5:40:
                    f8:2a:9d:b7:5d:c6:7d:b9:1b:bd:2b:d3:bf:85:25:
                    31:9f:10:05:bd:de:34:1e:ee:73:15:43:bc:44:e1:
                    33:17:28:c5:8b:a9:88:7a:ce:1a:b6:2f:c6:76:22:
                    cb:84:77:35:1e:f2:a1:80:eb:50:77:1b:32:b5:36:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1C:C7:9F:39:96:2E:7F:5E:2E:D5:B6:EC:32:D0:7D:99:51:F4:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b2a66d23-f174-3afd-a3b9-4529eb6cc4f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:15:83:cd:fc:64:3d:6a:a2:af:86:09:c8:79:15:57:59:cb:
         aa:2e:89:26:43:dd:af:36:60:ca:b5:ba:95:d9:ef:77:53:b0:
         4b:98:bf:a5:74:9d:05:05:14:d7:3d:13:35:60:0b:3c:8c:63:
         5c:e2:03:74:87:95:3a:ad:a9:70:46:d0:69:20:7b:d9:28:08:
         91:db:99:16:30:f0:72:db:ff:c4:a1:e5:5f:69:79:e2:a2:1c:
         d3:63:aa:ba:0f:26:0d:9e:26:ee:e3:55:fd:7a:4c:9d:f6:69:
         a0:09:a3:05:ac:f5:05:9f:d6:aa:08:4e:02:d6:98:1d:e1:ce:
         e6:2c:92:6d:38:22:23:26:3c:84:59:2b:d9:56:0c:d0:61:20:
         1e:5b:05:35:24:93:a8:8e:3f:4d:61:f2:54:ad:d3:c3:8a:6e:
         d4:b3:7e:da:51:ba:e2:05:d6:b9:7a:78:dc:60:d0:5d:52:40:
         d0:46:cd:af:d0:f1:b9:78:3d:b0:64:10:95:47:c5:c9:a0:c8:
         d5:5c:7a:72:35:ca:a2:47:5f:86:31:33:8f:cc:d2:52:e7:6b:
         42:00:30:53:1b:53:b6:86:20:07:0f:5d:24:8d:8c:06:06:a6:
         09:d9:79:bd:7b:f4:19:6f:c3:c6:b2:c4:09:8c:e0:2f:d8:5b:
         1b:b7:31:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----