Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a8233d0-13d9-355d-b230-27ff09be11da.roa
File:                     5a8233d0-13d9-355d-b230-27ff09be11da.roa (raw, json)
Hash identifier:          VzFdkKVWyAM8mdgkxuj2CjZaNgQqLHVJKe9vqVvvdUo=
Subject key identifier:   9F:F2:8B:A8:95:D1:5B:8D:C7:C0:60:B4:B8:11:53:C9:CD:B9:FA:5D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA65DBBB95539BE17E4F080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a8233d0-13d9-355d-b230-27ff09be11da.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     57
IP address blocks:        64.62.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:5d:bb:b9:55:39:be:17:e4:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=b261631f-d5d4-4055-b08e-3b1541d9774a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:36:6e:d6:5d:2d:e8:bf:6e:73:61:0a:5a:
                    28:8f:d9:d2:56:88:bb:99:f6:2b:62:8a:09:c6:39:
                    45:3c:9e:73:c3:95:aa:f8:8f:d9:fb:c0:a8:42:7a:
                    ab:16:bc:82:8b:b8:01:5a:68:19:df:34:b1:c4:52:
                    23:a6:f0:d5:e6:1a:22:aa:7f:f6:98:c3:ea:4d:be:
                    8d:60:50:93:0e:2b:05:d8:46:b3:60:c8:06:50:72:
                    10:47:a6:27:62:60:dd:17:e7:49:ce:43:65:16:c7:
                    f8:d3:0c:c7:31:59:f5:34:16:cc:1f:02:67:4a:9b:
                    d6:90:cc:ef:15:40:57:e0:2b:bb:ce:36:a6:ea:3e:
                    1a:b7:2b:ba:56:77:01:85:c2:1e:f3:28:8e:06:9c:
                    4b:f2:31:17:2c:90:b4:2c:4b:36:12:45:08:1f:e2:
                    3b:9f:a1:e5:87:01:c4:3f:c3:79:de:05:52:bd:a2:
                    0c:86:b2:43:b3:9c:fc:f8:77:69:3c:09:e0:56:d5:
                    c0:80:88:c1:e5:ff:fb:2d:69:35:d3:4f:2a:7c:e6:
                    c3:30:2b:50:c5:a1:dd:cb:ee:27:8c:0f:21:17:f6:
                    d6:b4:60:9c:cb:eb:77:e3:af:b2:c8:9d:0d:14:62:
                    ce:66:28:e4:d1:d4:59:3c:e9:04:45:e5:74:ef:a4:
                    e6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F2:8B:A8:95:D1:5B:8D:C7:C0:60:B4:B8:11:53:C9:CD:B9:FA:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a8233d0-13d9-355d-b230-27ff09be11da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:77:99:80:56:26:dd:83:52:73:cd:be:02:45:46:2d:22:d0:
         90:a8:c8:83:bc:54:e3:ac:bf:07:35:2e:41:fc:cb:2d:be:1e:
         c8:a1:ff:32:2c:8a:5a:96:c8:81:6c:c6:16:46:c8:a4:56:fa:
         0e:db:ab:67:17:77:9c:1a:60:0a:3b:d4:ec:ea:82:6a:c0:ac:
         74:d8:c0:fe:9a:66:86:56:e3:c7:c2:cd:b8:c8:b0:2c:f1:73:
         0e:c9:10:b2:81:21:2d:91:ff:01:0c:d3:4e:c1:a6:a9:f1:aa:
         4e:4c:ad:01:98:9c:c5:a9:7a:1a:cb:5f:a3:9c:a8:a0:a4:56:
         92:b0:ac:86:d2:6d:9f:4c:db:25:7c:84:6a:84:88:86:68:86:
         1d:35:23:8a:13:f7:a4:d8:19:5b:8b:52:34:74:27:81:87:80:
         42:18:3c:65:93:93:9b:07:d8:11:24:dc:e8:46:5f:d3:81:28:
         ce:e4:73:fd:1c:cf:c0:27:18:7c:7d:3b:4c:88:f8:3c:06:b0:
         9b:d0:99:e7:5f:47:f8:48:2a:6e:b9:4f:df:4a:25:81:75:4a:
         51:3a:16:3a:18:30:66:50:eb:23:33:4f:4a:56:ba:aa:85:5d:
         35:9f:c9:78:f2:df:1c:52:6e:a8:ff:c9:3e:27:1f:46:92:78:
         a2:6d:50:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----