Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6de3982-24c9-33f8-be78-92d7b7819b35.roa
File:                     d6de3982-24c9-33f8-be78-92d7b7819b35.roa (raw, json)
Hash identifier:          9g67vleRB/h4pDtCcyT5kxEKvQqon+7FXRUI2tWSE8E=
Subject key identifier:   71:E1:B7:10:4C:49:38:6E:9F:34:3E:9C:87:CA:5B:A0:27:5E:95:21
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA64E8A2332880559B05F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6de3982-24c9-33f8-be78-92d7b7819b35.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     23250
IP address blocks:        184.105.254.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:4e:8a:23:32:88:05:59:b0:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=d7e58f02-5084-448d-be45-54db940b5c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:2f:d5:a5:25:eb:67:38:10:ba:49:da:54:
                    ba:ba:73:a6:0c:bc:53:c6:4e:fe:2c:f5:f9:b1:5b:
                    0b:12:3a:c8:c3:07:a8:71:c8:13:93:fb:43:3c:00:
                    94:c1:e9:ce:08:fb:45:1c:54:4f:cf:14:c9:3b:62:
                    ed:1d:0b:57:2d:ab:f4:31:61:b0:9e:88:af:67:5a:
                    d0:ae:aa:89:3d:da:bc:64:1f:03:60:90:08:cd:b2:
                    5f:8e:ed:af:11:b6:97:cc:57:a9:f3:87:d9:58:3f:
                    83:6b:a3:0a:c9:ed:73:e0:49:fc:61:1a:2b:ee:45:
                    16:85:4c:68:d1:c4:e3:20:e1:4d:e4:7c:0b:ed:f2:
                    bf:30:6e:49:90:44:d0:0c:54:0d:64:7b:0a:a7:da:
                    ec:b0:3a:a6:bc:64:cf:ed:ea:0c:e9:f8:63:72:25:
                    f8:6a:c0:b9:60:70:87:1b:dc:d7:8a:c8:58:44:4e:
                    ab:3f:6d:3e:ac:e0:a4:e7:b0:77:04:ec:73:aa:e2:
                    40:9f:c8:ad:8a:93:de:5f:43:51:9a:f0:54:57:d9:
                    8f:dc:47:2e:63:8d:9a:f6:ea:46:4b:74:61:49:70:
                    63:e5:69:81:33:dc:28:96:e8:23:e9:ba:49:7f:90:
                    49:8c:d0:ec:3a:79:fd:22:8f:de:cd:fa:19:18:76:
                    88:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E1:B7:10:4C:49:38:6E:9F:34:3E:9C:87:CA:5B:A0:27:5E:95:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6de3982-24c9-33f8-be78-92d7b7819b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c9:4e:c8:67:bc:d6:65:a9:82:43:2c:23:3f:34:bd:8a:df:
         f2:75:1f:19:4b:70:d0:2b:e5:57:0f:b7:26:8a:28:07:69:8a:
         4c:a9:4b:50:56:17:70:b7:88:31:56:a0:fd:dd:db:3c:f5:60:
         18:4f:67:ff:5f:6a:e6:e5:cb:ab:57:63:8d:79:f4:1a:4b:d3:
         54:a4:7f:ea:0b:56:30:89:81:0a:38:d3:30:3b:1c:4f:06:18:
         c0:38:73:e5:38:d3:03:9b:e1:77:e8:c9:14:26:d0:0d:be:d9:
         9c:a5:28:af:0c:ea:e7:20:c1:6c:bb:9d:79:ef:f9:95:4a:e4:
         58:3f:89:6f:d6:26:58:c8:78:74:f0:bd:52:3f:f2:fc:fc:8a:
         68:61:ac:35:0b:75:dd:4a:27:52:b5:0b:78:91:9c:e3:83:b7:
         69:da:e1:51:06:97:a5:ad:71:bf:dd:8a:02:cb:48:1a:b7:d1:
         d0:98:70:dd:f3:c6:50:cc:b1:f6:3f:50:6a:68:c6:b9:6c:20:
         64:f4:7b:6a:8a:10:4a:5f:f0:88:9e:31:89:f8:86:8c:fe:e7:
         00:d5:b1:f6:81:ea:02:41:e2:6a:0c:a8:7d:a1:3f:47:69:46:
         08:92:48:3c:af:e1:18:23:5a:c3:cc:1d:b7:51:2f:59:1d:1e:
         1b:cd:29:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDv9pk6KIzKIBVmwXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZDdlNThmMDItNTA4NC00NDhkLWJlNDUtNTRkYjk0MGI1YzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVUv1aUl62c4ELpJ2lS6unOmDLxTxk7+LPX5
sVsLEjrIwweoccgTk/tDPACUwenOCPtFHFRPzxTJO2LtHQtXLav0MWGwnoivZ1rQ
rqqJPdq8ZB8DYJAIzbJfju2vEbaXzFep84fZWD+Da6MKye1z4En8YRor7kUWhUxo
0cTjIOFN5HwL7fK/MG5JkETQDFQNZHsKp9rssDqmvGTP7eoM6fhjciX4asC5YHCH
G9zXishYRE6rP20+rOCk57B3BOxzquJAn8itipPeX0NRmvBUV9mP3EcuY42a9upG
S3RhSXBj5WmBM9wolugj6bpJf5BJjNDsOnn9Io/ezfoZGHaI9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHHhtxBMSThunzQ+nIfKW6AnXpUhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDZkZTM5ODItMjRjOS0z
M2Y4LWJlNzgtOTJkN2I3ODE5YjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGn+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLJTshnvNZlqYJDLCM/NL2K3/J1HxlLcNAr5VcPtyaKKAdpikypS1BW
F3C3iDFWoP3d2zz1YBhPZ/9faubly6tXY4159BpL01Skf+oLVjCJgQo40zA7HE8G
GMA4c+U40wOb4XfoyRQm0A2+2ZylKK8M6ucgwWy7nXnv+ZVK5Fg/iW/WJljIeHTw
vVI/8vz8imhhrDULdd1KJ1K1C3iRnOODt2na4VEGl6Wtcb/digLLSBq30dCYcN3z
xlDMsfY/UGpoxrlsIGT0e2qKEEpf8IieMYn4hoz+5wDVsfaB6gJB4moMqH2hP0dp
RgiSSDyv4RgjWsPMHbdRL1kdHhvNKXs=
-----END CERTIFICATE-----