Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/53860471-7618-36ba-83e8-3eec9195c8c3.roa
File:                     53860471-7618-36ba-83e8-3eec9195c8c3.roa (raw, json)
Hash identifier:          PLQ1oAwCt6sFasFTGyzFzxR44UTKX1gPsBf5nNOurvU=
Subject key identifier:   2E:69:A8:3E:FD:33:4B:DB:AE:9A:70:6B:81:DE:74:84:C4:8A:56:D0
Certificate issuer:       /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial:       010D0C9F4328576D51CC73C042CFC173A56F8DEB
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/53860471-7618-36ba-83e8-3eec9195c8c3.roa
Signing time:             Fri 31 Jul 2020 15:13:38 +0000
ROA not before:           Wed 08 Jul 2020 04:00:00 +0000
ROA not after:            Thu 03 Nov 2022 04:00:00 +0000
asID:                     26057
IP address blocks:        168.238.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:a5:6f:8d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
        Validity
            Not Before: Jul  8 04:00:00 2020 GMT
            Not After : Nov  3 04:00:00 2022 GMT
        Subject: CN=6fe037ad-6137-4afc-895f-399ba96f2aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3c:4e:b9:1d:00:97:31:03:4f:ed:83:7e:25:
                    b2:20:c2:95:60:e0:59:05:7e:64:a8:24:97:65:a9:
                    13:ac:4c:47:e2:a0:9c:06:e3:15:25:9b:53:3f:55:
                    2b:75:98:8e:9f:a6:4a:94:1b:34:6e:aa:ff:4d:a7:
                    88:5b:71:8a:bb:4d:c1:b5:a3:e1:6a:bc:38:9f:3f:
                    ad:45:8d:f4:82:39:01:99:3b:07:f2:94:74:01:85:
                    cf:13:4d:f2:c2:b6:a3:c7:2d:81:74:55:b6:6a:b4:
                    50:2f:f7:8a:12:ff:17:8b:3a:3a:28:ee:cc:a2:08:
                    92:a2:de:79:4f:ee:c6:b4:53:27:10:20:75:c3:a0:
                    e5:9c:a6:24:99:86:20:e1:64:ba:25:b5:73:95:cf:
                    33:72:c8:78:8f:3c:ad:52:9d:52:79:b1:8f:03:b6:
                    6c:b6:ba:c7:28:b2:c8:63:30:7b:c3:82:5d:f0:3c:
                    cd:7c:ce:8a:56:c9:a4:69:b6:4f:cd:1f:63:48:82:
                    39:f0:15:cd:fb:d8:fd:51:93:e6:13:4d:45:b4:91:
                    96:fa:38:1a:6a:57:cb:31:a7:e4:d5:1b:79:b2:d3:
                    63:74:ae:c1:5c:02:06:5a:36:9a:17:f2:82:6b:18:
                    e7:38:ec:69:07:85:7c:45:4e:b7:54:67:b8:6c:bf:
                    f7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:69:A8:3E:FD:33:4B:DB:AE:9A:70:6B:81:DE:74:84:C4:8A:56:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/53860471-7618-36ba-83e8-3eec9195c8c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl

            X509v3 Authority Key Identifier:
                keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.238.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:75:92:8b:b2:76:aa:67:20:b9:f6:f0:29:34:07:5d:26:33:
         ca:23:24:9f:bf:0e:90:95:cc:77:a1:40:73:28:c8:4a:f7:d9:
         f0:ac:a8:d1:d9:41:f2:b0:89:08:81:35:b8:63:08:eb:d1:a5:
         15:7e:42:61:5a:0e:44:ce:9c:32:e9:ef:16:7b:c8:95:82:88:
         6d:b3:6d:ac:f5:ee:40:b9:a2:06:c1:30:1b:ef:1d:90:22:4f:
         0f:74:98:b7:7e:6f:3d:29:c4:49:9d:6c:56:d9:71:87:a0:29:
         e0:df:38:90:30:a4:90:fb:bd:a7:c8:d3:dc:14:8e:0b:8b:0a:
         26:6a:b5:bb:90:34:44:69:98:a8:ff:cb:15:e2:ae:4a:c2:19:
         3c:cc:7b:90:29:df:fb:9f:5d:ac:e9:b1:35:7e:84:2d:c3:0e:
         4a:4d:c0:53:ad:c2:f0:28:10:01:78:65:0c:21:37:61:bc:da:
         9b:8f:56:c4:50:34:cd:c1:91:4d:b9:82:73:58:48:5c:e5:cb:
         fc:56:11:63:87:b8:e3:2b:21:6b:7b:d6:2a:66:99:30:4a:fc:
         9a:a8:7a:33:86:ce:b2:c0:f2:8a:5a:4d:cf:c6:94:fe:7a:e3:
         64:3d:42:86:45:2c:17:cc:57:41:41:d4:00:be:19:88:30:e8:
         f6:fe:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----