Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3eadc408-45aa-386c-b795-635534008dfc.roa
File:                     3eadc408-45aa-386c-b795-635534008dfc.roa (raw, json)
Hash identifier:          gjpGEPM8pEgsrNO3N+e1ppAoHX0OhAbx/n6w6v+GSYI=
Subject key identifier:   EB:84:AF:B4:E2:C2:EE:4E:09:8F:10:19:C6:8F:11:E2:FD:63:64:BE
Certificate issuer:       /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
Certificate serial:       010D0C9F4328583AA7BEACB91AD5592B7B510C40
Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3eadc408-45aa-386c-b795-635534008dfc.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     6762
IP address blocks:        162.213.96.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:be:ac:b9:1a:d5:59:2b:7b:51:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=7ae98222-6b8e-4a9b-8688-b72a99384a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:df:fa:1e:1f:d1:b0:b7:79:55:a8:6a:8a:
                    2b:0e:40:e4:b6:01:54:7d:1e:e3:0b:da:e9:ad:c5:
                    4d:b8:26:0e:e3:25:48:23:21:72:44:3e:34:d1:dd:
                    d9:a5:71:24:84:2b:5e:b2:34:06:8e:c2:84:a9:c5:
                    46:e0:4e:27:70:9a:89:27:e0:54:1d:46:cd:35:d7:
                    04:af:7f:dd:5d:c3:73:01:02:59:77:9b:1d:28:66:
                    5b:48:5c:9c:c0:4a:22:5e:b5:0d:6f:2a:b6:ad:e8:
                    e6:a5:52:50:52:1b:ce:b9:e1:23:db:50:b3:85:d6:
                    58:e1:ab:84:21:1c:ed:3f:f2:69:23:b6:ec:84:68:
                    9e:44:d3:6c:cf:76:f5:c6:97:0f:e5:e9:ab:ab:88:
                    c7:ac:e2:e6:63:3a:d7:27:17:52:9e:c3:e2:ed:bf:
                    7a:52:ba:e3:23:f3:1e:94:0d:d0:92:a0:20:63:83:
                    0b:78:b5:3d:d0:5e:6b:7a:25:11:aa:15:3e:e1:ef:
                    63:9f:ef:1e:aa:d6:85:e3:39:2a:fa:c2:5e:59:f7:
                    73:55:94:4f:b5:fd:4e:f1:5a:6c:8e:42:1c:ac:dc:
                    f0:bb:b0:e3:72:27:cc:e9:e1:70:5b:89:ef:61:3d:
                    4c:9f:77:f4:ad:d9:c4:57:07:b5:6a:d7:6e:0f:26:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:84:AF:B4:E2:C2:EE:4E:09:8F:10:19:C6:8F:11:E2:FD:63:64:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3eadc408-45aa-386c-b795-635534008dfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e2:c7:6c:4a:9e:21:c5:4c:2d:3b:19:3c:44:db:cc:53:5a:
         e0:82:02:18:38:14:59:0a:90:a2:f3:86:02:35:19:b8:cd:7b:
         87:37:dc:28:6b:75:b4:ed:01:3b:11:69:4d:5d:9a:cc:13:55:
         92:7f:af:32:63:6a:87:3c:ea:7b:70:d6:89:bd:a3:4d:7d:93:
         45:f5:72:1a:62:db:a9:db:e2:4f:4f:d6:0c:38:82:a7:13:af:
         4d:1e:33:8e:3b:ab:64:97:ee:89:17:c5:25:88:8e:65:0d:8e:
         8b:0d:7e:99:26:18:39:ee:d7:bd:44:3c:c4:d4:2a:e0:6c:9a:
         12:e9:2f:45:b7:e1:67:54:bd:25:04:c8:20:ca:dd:43:c7:ba:
         f1:d7:93:f3:b0:6d:7a:0f:95:da:78:b4:a9:d0:e4:d5:9b:95:
         8e:c3:65:8f:12:41:fb:54:cf:01:d1:00:8c:5e:a6:60:2e:4f:
         ef:84:06:71:95:d4:ac:59:14:0c:ef:34:a7:1e:53:99:28:49:
         07:d6:89:e4:4b:82:8e:8a:ea:f8:4f:0a:52:59:2b:9f:d9:81:
         16:13:f7:4b:76:82:b1:9c:38:c7:4b:90:2d:71:aa:11:26:ec:
         b0:4a:93:b2:16:e1:14:99:23:a4:60:2a:c2:a4:94:0b:2b:c7:
         fa:da:b4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----