Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c370b03b-670f-3392-ac29-a0232fd7da5f.roa
File:                     c370b03b-670f-3392-ac29-a0232fd7da5f.roa (raw, json)
Hash identifier:          NXBZHLLt8I5/tHRuqbCxOZuE1+hwIRPsDWiA/EsRK+Y=
Subject key identifier:   BF:BF:C5:53:4F:A3:A8:74:E4:C6:6F:4B:6B:8B:B1:EA:88:51:F4:11
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7BA6655531E37145BB86180
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c370b03b-670f-3392-ac29-a0232fd7da5f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        74.125.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ba:66:55:53:1e:37:14:5b:b8:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=98123023-1008-4ffb-9e00-ca4a5bc4badb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:f3:ae:29:d1:2f:c0:b5:7c:06:17:1d:32:
                    80:e0:32:bf:2a:14:2b:24:36:9f:91:0e:74:d8:a7:
                    70:ec:75:c7:d1:3a:62:4b:cd:d5:84:e7:23:50:1c:
                    b2:46:ce:9f:a9:b4:f6:3b:a1:0d:06:38:bf:5e:cc:
                    63:db:fb:ea:05:cf:07:31:1e:51:8a:3f:19:b9:1f:
                    ab:ba:88:f3:df:30:66:39:8b:99:4c:dd:ec:a2:b9:
                    07:78:76:11:ca:77:0d:13:d0:75:45:60:49:85:4d:
                    73:da:52:67:44:98:13:b2:a0:a6:04:6b:1e:26:98:
                    35:aa:2c:89:eb:15:1b:53:2a:97:22:63:7f:80:95:
                    d2:1d:72:b5:8d:73:09:f5:cf:26:e4:c5:19:e4:65:
                    09:79:98:d5:8b:03:09:d7:8e:58:d9:27:c1:b1:b9:
                    d4:13:7f:7b:e0:26:73:91:1a:eb:a8:83:1b:1e:89:
                    61:ce:96:08:74:f1:ea:df:95:28:60:3a:d4:52:ec:
                    dd:13:a0:2c:47:73:79:b6:54:3c:d1:48:9a:e8:33:
                    ee:10:98:a9:a8:e2:9c:c6:a3:17:ad:3a:b4:e3:0d:
                    98:4f:4b:80:3c:1a:50:ec:da:8c:0b:a4:ce:b3:f5:
                    8a:fe:39:b2:c7:83:9d:6a:9a:55:66:13:3f:af:e3:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BF:C5:53:4F:A3:A8:74:E4:C6:6F:4B:6B:8B:B1:EA:88:51:F4:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c370b03b-670f-3392-ac29-a0232fd7da5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:02:7f:1e:a4:fa:20:a5:b2:49:c3:23:4e:77:cd:5b:30:93:
         95:29:b6:32:d3:06:5b:73:03:7b:28:57:0a:6d:25:1d:6f:a6:
         79:03:b3:56:c8:a5:44:76:17:99:ff:ea:03:a4:b8:92:5d:91:
         10:78:b6:d7:7f:ab:7e:38:be:39:07:c0:bc:59:8a:a6:c0:aa:
         53:13:37:35:62:e8:a2:06:5f:f5:bc:86:a1:77:d1:1d:08:3c:
         92:46:93:c6:11:24:89:a4:0c:8a:4b:40:4a:04:dd:88:29:62:
         6e:2b:3e:8c:a7:66:13:0c:51:78:38:c9:03:c3:9f:fc:f0:5e:
         d9:13:6f:fe:c5:cb:39:77:8a:2a:b7:eb:1e:13:b3:86:d0:cf:
         75:d8:b7:09:ab:2e:3d:68:6c:32:3e:60:50:9b:99:ed:52:da:
         fd:b2:76:f5:e3:6d:8f:cf:2e:b1:27:01:14:3f:5c:c6:24:3c:
         d9:b5:af:01:d6:00:6c:fd:9c:11:8c:15:d0:c1:dd:8e:3a:b7:
         d7:87:0c:9f:5f:44:aa:88:0c:98:94:95:1b:bd:c8:c9:56:39:
         74:af:39:e6:58:ba:b5:7f:a2:e8:53:19:12:7f:e7:c1:69:ee:
         db:bd:fa:c6:76:70:d4:a7:52:4b:e6:87:95:33:65:5e:e2:ca:
         48:fe:ea:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnumZVUx43FFu4YYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
OTgxMjMwMjMtMTAwOC00ZmZiLTllMDAtY2E0YTViYzRiYWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBjzrinRL8C1fAYXHTKA4DK/KhQrJDafkQ50
2Kdw7HXH0TpiS83VhOcjUByyRs6fqbT2O6ENBji/Xsxj2/vqBc8HMR5Rij8ZuR+r
uojz3zBmOYuZTN3sorkHeHYRyncNE9B1RWBJhU1z2lJnRJgTsqCmBGseJpg1qiyJ
6xUbUyqXImN/gJXSHXK1jXMJ9c8m5MUZ5GUJeZjViwMJ145Y2SfBsbnUE3974CZz
kRrrqIMbHolhzpYIdPHq35UoYDrUUuzdE6AsR3N5tlQ80Uia6DPuEJipqOKcxqMX
rTq04w2YT0uAPBpQ7NqMC6TOs/WK/jmyx4OdappVZhM/r+NE5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+/xVNPo6h05MZvS2uLseqIUfQRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzM3MGIwM2ItNjcwZi0z
MzkyLWFjMjktYTAyMzJmZDdkYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHoCfx6k+iClsknDI053zVswk5UptjLTBltzA3soVwptJR1vpnkDs1bI
pUR2F5n/6gOkuJJdkRB4ttd/q344vjkHwLxZiqbAqlMTNzVi6KIGX/W8hqF30R0I
PJJGk8YRJImkDIpLQEoE3YgpYm4rPoynZhMMUXg4yQPDn/zwXtkTb/7Fyzl3iiq3
6x4Ts4bQz3XYtwmrLj1obDI+YFCbme1S2v2ydvXjbY/PLrEnARQ/XMYkPNm1rwHW
AGz9nBGMFdDB3Y46t9eHDJ9fRKqIDJiUlRu9yMlWOXSvOeZYurV/ouhTGRJ/58Fp
7tu9+sZ2cNSnUkvmh5UzZV7iykj+6lI=
-----END CERTIFICATE-----