Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/51776734-21ea-379e-a12a-8a4ead374f98.roa
File:                     51776734-21ea-379e-a12a-8a4ead374f98.roa (raw, json)
Hash identifier:          +/27ieeJvcEgHXZe+dVgVP+82NGAEPFQw0Uusk8YI3k=
Subject key identifier:   C7:50:BD:E5:03:84:4C:85:4C:C2:D6:94:F2:5B:1E:A4:FF:C4:F9:DA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7A57EC0F08F1D1867830200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/51776734-21ea-379e-a12a-8a4ead374f98.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        172.217.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a5:7e:c0:f0:8f:1d:18:67:83:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=cd0d057b-e4ca-4fcf-8a94-dc8de0cbcd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:59:58:02:12:04:59:de:28:9e:34:df:fc:80:
                    d3:5a:51:54:3e:58:a0:a1:ac:f0:26:6a:ed:9c:93:
                    82:5e:a8:0d:95:8e:e9:70:f9:47:c8:f3:5e:30:51:
                    a9:4f:8a:14:56:bc:b7:34:24:75:eb:27:72:c4:f2:
                    a8:72:6f:0c:01:de:3a:5a:39:b6:8c:ea:5c:17:2e:
                    f5:ae:00:7f:7f:6f:43:ab:68:e6:63:5c:a9:e8:30:
                    10:50:1f:f7:37:ee:fd:17:bc:bc:a9:c5:e2:cd:a6:
                    dd:56:e6:54:6a:f7:3c:c0:f5:8a:7f:66:17:bf:49:
                    d4:ac:9d:62:f6:ec:1b:c9:51:7b:3c:4c:b1:53:a7:
                    61:4a:36:79:02:2d:63:7e:d9:e4:50:16:bc:82:19:
                    d5:46:fe:47:b1:e0:82:6f:ad:e0:b4:e2:d2:74:0d:
                    bf:d1:a1:74:1b:a0:6c:e4:cc:2b:e7:68:21:66:02:
                    6f:32:6a:20:8e:c3:91:35:bc:3a:f9:1d:ec:b5:01:
                    8c:af:90:0f:00:83:58:a1:db:d7:e7:e2:ed:f3:bc:
                    56:dd:8e:a2:20:79:db:a8:7a:e0:d1:03:88:2c:3c:
                    41:bf:7d:33:db:c5:fd:5e:5a:c2:a9:a6:d6:0a:05:
                    7b:7e:9a:98:3a:f7:fb:ef:f3:5a:6a:92:cb:04:af:
                    8a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:50:BD:E5:03:84:4C:85:4C:C2:D6:94:F2:5B:1E:A4:FF:C4:F9:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/51776734-21ea-379e-a12a-8a4ead374f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:0a:be:ea:70:c1:50:ea:1b:10:09:f7:9c:17:ae:f5:df:50:
         25:39:90:83:4b:62:20:38:c3:62:e8:0c:88:c4:f3:d3:28:af:
         cc:ff:d4:31:68:ac:e5:30:bd:5e:ae:16:99:28:b0:a8:94:a2:
         c5:dc:8f:9b:f7:1e:39:41:8e:2a:65:7a:a3:e8:c5:f1:0d:64:
         b9:31:62:13:ce:fb:e9:97:47:da:61:ae:de:40:7b:c0:d3:40:
         98:fb:78:d0:d2:c7:05:30:19:02:ae:8c:b1:8c:b3:05:86:50:
         63:07:08:00:12:06:e1:1c:1e:b0:70:bb:87:a9:a5:d0:eb:0e:
         4c:1d:5b:01:3c:4a:7f:b9:df:4c:da:63:92:c6:27:0c:c8:55:
         25:2f:56:5d:cd:48:da:4c:57:30:36:91:49:96:ad:58:94:3d:
         38:fa:7a:a5:24:3e:67:f0:fb:2d:b3:43:35:bc:64:a3:a2:43:
         b7:82:c1:3f:f7:95:ad:9f:bc:4a:eb:d5:d7:2d:e7:15:6c:74:
         dd:4d:7e:cb:5d:31:aa:b0:19:cb:b4:7d:f8:73:7d:23:64:f6:
         10:4e:53:52:04:27:53:72:2d:2b:72:54:f4:ad:c9:15:c1:1c:
         3a:fe:0a:93:db:e5:14:fa:da:ed:1c:31:33:c9:63:44:a8:de:
         79:16:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----