Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ec9b7f29-77e2-3cb8-b19b-dff7df68b714.roa
File:                     ec9b7f29-77e2-3cb8-b19b-dff7df68b714.roa (raw, json)
Hash identifier:          y3V3RUo4YqdM21z+Oz28c2E3DbANn0j8dEk5jF2dxng=
Subject key identifier:   42:32:EE:8F:D3:E5:20:93:68:BC:53:93:9E:A1:31:28:25:DF:6D:C1
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7C0B07667956AE0E626AB80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ec9b7f29-77e2-3cb8-b19b-dff7df68b714.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        70.32.144.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c0:b0:76:67:95:6a:e0:e6:26:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=fc8f6109-261f-42a9-a3f3-b00cac6a5883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:62:f6:ec:15:7f:f8:8d:2e:04:fe:dd:d3:cc:
                    75:2f:b1:8e:70:3b:97:d0:06:52:d4:4b:c6:56:42:
                    29:0c:eb:24:53:31:89:02:bf:ad:89:b8:7e:1d:82:
                    7e:30:d9:09:eb:30:43:92:d2:04:20:10:82:52:d6:
                    28:87:25:a4:34:df:ad:4d:ef:68:3d:62:4a:9b:06:
                    ca:50:5b:86:87:1b:90:b4:88:e4:e4:bc:d2:28:08:
                    43:f1:f6:a1:7b:11:bc:6b:f7:0c:8a:6b:31:ae:71:
                    7c:ba:33:74:e6:05:5c:ea:e2:df:07:3c:4e:56:e7:
                    11:3d:0d:4f:0c:c7:36:6a:11:7b:a5:9f:3d:ac:e3:
                    f4:23:83:4f:01:d0:f8:45:bf:6c:d0:f6:ae:ad:cb:
                    29:5f:51:74:63:c4:52:8c:92:67:9d:a0:4a:be:66:
                    cd:76:a3:70:13:da:2f:05:91:2d:83:2e:e7:b6:dc:
                    e7:d4:e1:9b:99:26:8c:33:76:5d:f1:51:00:91:0d:
                    6e:8b:af:97:8f:99:1c:33:cc:f7:6b:69:c1:d2:e4:
                    bb:0e:09:84:55:50:fa:f6:1f:cd:18:6f:57:c4:47:
                    66:71:41:0b:22:3e:dd:d8:70:d9:f8:31:31:2d:7e:
                    6b:ff:4e:51:76:8c:fc:59:bc:74:13:4a:a6:7b:32:
                    59:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:32:EE:8F:D3:E5:20:93:68:BC:53:93:9E:A1:31:28:25:DF:6D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ec9b7f29-77e2-3cb8-b19b-dff7df68b714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:03:37:63:2f:7d:f0:e9:4e:84:58:4e:09:20:2a:58:ad:98:
         ef:a4:04:73:7a:7d:ff:bc:9c:3d:2a:5f:8a:73:45:b7:7c:42:
         c7:2c:ec:ec:d9:10:14:0a:f2:e8:5b:77:98:7a:68:36:a3:14:
         15:cc:3c:4d:7c:97:a9:49:56:84:97:ba:80:07:9a:7b:74:ef:
         a9:1d:52:17:91:71:29:ff:8e:62:ef:49:29:84:3f:b5:85:0f:
         be:1d:38:28:ee:75:1e:f5:ee:a6:b9:1b:ab:f7:7d:62:74:b5:
         bc:4b:2d:49:c1:85:c5:d3:cd:fa:43:45:ad:46:d0:eb:25:bf:
         27:5b:17:54:f0:18:c2:4e:ac:2a:49:f8:7a:68:f2:db:ac:5c:
         1d:0e:78:17:e8:e4:6a:e7:b7:0e:84:ce:38:a0:19:02:b9:7f:
         b6:af:8e:a2:4e:28:bf:97:af:b5:f1:e9:58:a0:25:9a:4d:13:
         a4:02:0c:16:30:d3:ce:a6:24:18:7d:ca:42:89:eb:73:4e:1b:
         c3:65:b9:bd:a0:73:bc:65:39:72:b3:f0:5c:19:f6:9f:0c:ca:
         4d:b8:0d:50:03:db:6b:04:d3:85:b1:22:54:49:a9:a1:71:dd:
         2d:cf:aa:95:1b:24:39:dd:ef:56:60:8d:42:91:15:a0:64:de:
         13:17:1a:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnwLB2Z5Vq4OYmq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZmM4ZjYxMDktMjYxZi00MmE5LWEzZjMtYjAwY2FjNmE1ODgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWL27BV/+I0uBP7d08x1L7GOcDuX0AZS1EvG
VkIpDOskUzGJAr+tibh+HYJ+MNkJ6zBDktIEIBCCUtYohyWkNN+tTe9oPWJKmwbK
UFuGhxuQtIjk5LzSKAhD8fahexG8a/cMimsxrnF8ujN05gVc6uLfBzxOVucRPQ1P
DMc2ahF7pZ89rOP0I4NPAdD4Rb9s0PaurcspX1F0Y8RSjJJnnaBKvmbNdqNwE9ov
BZEtgy7nttzn1OGbmSaMM3Zd8VEAkQ1ui6+Xj5kcM8z3a2nB0uS7DgmEVVD69h/N
GG9XxEdmcUELIj7d2HDZ+DExLX5r/05Rdoz8Wbx0E0qmezJZowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEIy7o/T5SCTaLxTk56hMSgl323BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWM5YjdmMjktNzdlMi0z
Y2I4LWIxOWItZGZmN2RmNjhiNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHsDN2MvffDpToRYTgkgKlitmO+kBHN6ff+8nD0qX4pzRbd8Qscs7OzZ
EBQK8uhbd5h6aDajFBXMPE18l6lJVoSXuoAHmnt076kdUheRcSn/jmLvSSmEP7WF
D74dOCjudR717qa5G6v3fWJ0tbxLLUnBhcXTzfpDRa1G0OslvydbF1TwGMJOrCpJ
+Hpo8tusXB0OeBfo5Grntw6EzjigGQK5f7avjqJOKL+Xr7Xx6VigJZpNE6QCDBYw
086mJBh9ykKJ63NOG8Nlub2gc7xlOXKz8FwZ9p8Myk24DVAD22sE04WxIlRJqaFx
3S3PqpUbJDnd71ZgjUKRFaBk3hMXGkA=
-----END CERTIFICATE-----