Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/742eb2fa-b5b8-305d-8a22-c203477ee9bb.roa
File:                     742eb2fa-b5b8-305d-8a22-c203477ee9bb.roa (raw, json)
Hash identifier:          HhgIqQRSbdTKS6e9kBAcxoQ6WhJE8j9JHRLyTfvBchA=
Subject key identifier:   7E:CE:5F:10:47:FB:84:B4:64:38:7F:83:12:76:B0:8B:7C:5B:43:A5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA5CB12D84A910C2B281C58
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/742eb2fa-b5b8-305d-8a22-c203477ee9bb.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     11255
IP address blocks:        64.62.238.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a5:cb:12:d8:4a:91:0c:2b:28:1c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=db132e6e-7521-4cf7-afdb-c798aaf913b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:14:90:f1:65:0e:35:6e:c1:4e:d6:3b:bc:
                    53:24:f5:aa:f3:f5:d8:31:0e:cd:4c:c8:fc:98:b4:
                    f7:15:0c:1a:dd:32:ce:f5:c7:da:a9:70:4f:3b:d0:
                    67:f9:79:c7:cb:f5:44:cd:6e:c3:69:47:4e:5c:b4:
                    de:3b:0c:c3:14:5f:bf:0c:82:77:32:1a:45:da:79:
                    19:fa:89:db:03:3b:f4:34:b2:7b:89:29:f9:50:31:
                    f4:34:56:c3:4b:a9:49:f2:3d:7b:f0:85:88:90:94:
                    23:af:c8:6f:06:b1:ac:33:8d:df:d6:5c:35:b7:0d:
                    1e:ef:0b:6b:70:15:f5:2e:3d:95:52:3c:c5:46:82:
                    e4:d9:f2:23:e3:63:1d:08:bb:fd:07:72:8a:c4:18:
                    ff:3f:54:b1:7a:d4:0a:e3:4e:86:44:f0:8d:ae:42:
                    c5:a8:b7:dc:c4:5d:52:33:dc:21:86:1e:6b:a8:a0:
                    d3:f4:4a:5c:72:d2:6b:64:5e:24:06:d9:bd:55:dd:
                    eb:b5:b5:52:58:fb:42:f6:5e:82:6d:79:6d:c1:aa:
                    6d:28:b5:26:e4:df:ca:63:3c:75:02:24:5f:61:e9:
                    9b:5b:bd:91:a3:dd:77:97:6d:cf:2c:26:da:17:55:
                    b7:70:49:17:d1:13:57:5e:d1:6b:3f:64:0f:0a:8d:
                    a4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CE:5F:10:47:FB:84:B4:64:38:7F:83:12:76:B0:8B:7C:5B:43:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/742eb2fa-b5b8-305d-8a22-c203477ee9bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6d:d6:2e:4b:40:11:09:57:c0:f2:70:8e:4f:db:38:a1:aa:
         21:34:9e:be:e7:de:4b:c3:e8:e2:b0:de:92:9d:59:6f:6e:36:
         81:36:47:f8:26:93:97:fc:1e:f2:f6:2c:63:7b:6d:53:8d:e2:
         3e:db:20:d1:aa:6a:38:c0:3d:6f:de:ed:46:0f:59:a3:b2:69:
         30:69:7a:36:ea:6e:ad:11:a2:50:c3:93:99:39:0a:de:e5:20:
         30:de:19:7e:c0:73:80:9e:e2:71:bb:1d:3a:69:89:20:5f:a5:
         34:0d:ac:4f:5a:71:88:b5:9b:96:dc:fa:98:9c:83:1b:30:1a:
         31:c4:84:f7:f0:fb:76:33:c0:b7:57:65:2b:2c:67:28:3b:ce:
         7d:ef:d4:01:78:a4:9a:45:7d:3d:05:a0:9c:d1:d2:34:56:ea:
         47:26:00:ca:00:be:7c:2d:b2:51:af:33:58:98:d0:c8:bc:f7:
         1c:25:79:a4:e5:74:09:86:1c:03:6a:8b:7d:b3:83:ac:87:82:
         7d:77:7f:4d:16:4d:7f:8c:3d:09:60:80:58:3f:35:72:07:07:
         39:a6:67:03:33:43:f1:e9:ad:5c:9c:60:c2:3e:b4:4b:88:69:
         bd:88:c8:71:d3:a1:18:c3:e9:32:c0:0b:e3:c6:e0:b7:9b:b0:
         ec:29:83:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----