Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/03b85ed5-8fe6-30ac-ba98-f07f134f4579.roa
File:                     03b85ed5-8fe6-30ac-ba98-f07f134f4579.roa (raw, json)
Hash identifier:          2FyP7sRaMyF3hMRtlpTRmUunPu70RrXpNUrVLLEWdUk=
Subject key identifier:   7E:83:7F:8A:C2:E3:20:6A:E7:FC:36:54:2B:29:90:D2:C9:C8:F4:97
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1720B2BD6D7
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/03b85ed5-8fe6-30ac-ba98-f07f134f4579.roa
Signing time:             Tue 12 May 2020 23:15:21 +0000
ROA not before:           Wed 21 Oct 2015 04:00:00 +0000
ROA not after:            Tue 16 Aug 2022 04:00:00 +0000
asID:                     397651
IP address blocks:        103.11.66.0/24 maxlen: 24
                          103.28.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:0b:2b:d6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Oct 21 04:00:00 2015 GMT
            Not After : Aug 16 04:00:00 2022 GMT
        Subject: CN=b044e0d0-baa3-4050-befd-ce2414c9adc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:10:29:35:0f:0c:83:ea:12:2b:24:bf:fd:77:
                    0a:82:da:60:f4:b6:80:d6:73:96:67:a3:c6:6b:bd:
                    24:29:98:aa:72:ed:f7:c5:6b:54:9c:a6:64:d7:da:
                    a6:42:0f:69:b0:05:80:a3:7d:93:ed:14:d3:25:4b:
                    e4:b5:a2:2f:30:3d:10:da:c9:98:35:51:58:44:75:
                    b0:4e:1e:62:75:27:4f:e3:0a:0a:06:81:31:50:13:
                    12:96:7d:01:c7:96:b9:ee:16:59:da:99:c1:ef:4d:
                    55:9b:8f:8e:0f:7c:90:d3:62:b3:85:e4:4a:75:1d:
                    dc:a6:ab:88:ae:43:ad:37:96:df:90:c6:90:7b:51:
                    f8:dc:54:24:99:db:6e:60:8a:6a:5e:f8:47:a9:5b:
                    e1:2b:e2:a9:88:38:05:05:0a:e9:91:0f:a6:8d:bc:
                    a6:2c:d4:63:b8:4a:45:8d:f7:5a:7b:4b:f3:28:e9:
                    bf:a8:d1:b0:e6:18:1f:aa:1f:d9:bd:d4:07:c9:eb:
                    b3:48:94:a1:c3:53:8d:f5:ce:71:b9:67:fa:9a:99:
                    c2:54:0d:d4:d0:5e:66:6b:2a:97:82:b7:cd:bb:6e:
                    47:8b:cb:fd:c7:16:13:0e:ca:c8:80:01:7a:a4:00:
                    39:4a:01:f5:64:90:42:6b:03:bb:3b:84:bf:a0:7c:
                    83:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:83:7F:8A:C2:E3:20:6A:E7:FC:36:54:2B:29:90:D2:C9:C8:F4:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/03b85ed5-8fe6-30ac-ba98-f07f134f4579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.66.0/24
                  103.28.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:41:a6:72:ec:1b:fb:2f:06:19:84:4b:d2:32:ed:9f:2e:96:
         94:9d:d2:b7:3c:3f:dd:08:b5:26:89:ba:43:f3:de:02:27:b4:
         4b:cd:b2:bb:e1:1a:de:46:07:c3:67:52:75:7d:b8:95:d5:cc:
         bf:f0:8d:d1:0c:57:62:77:0f:5c:25:87:3d:84:12:db:90:f5:
         22:7a:29:8d:cd:22:a1:4f:01:f7:55:3e:60:e1:ea:a6:bf:08:
         46:7a:5e:15:19:22:96:cf:90:d7:66:5c:77:b6:f0:12:42:3a:
         81:18:73:a7:ed:4f:e4:55:85:55:7f:a4:d0:7a:22:11:a9:6f:
         fd:3f:99:5e:9d:7a:4e:99:e7:e0:4e:19:ab:1d:c6:5f:bc:07:
         15:bb:92:af:08:a1:6b:80:fc:47:ae:29:bb:66:31:02:da:80:
         33:81:b9:4c:33:df:43:99:b9:5e:d0:81:99:b0:08:ef:44:fa:
         73:63:1e:d5:44:41:01:6a:9a:5a:d7:cb:3f:b2:31:33:63:42:
         45:5d:6b:28:8d:d9:19:e5:97:fc:0f:e9:10:3e:cb:a7:b2:e3:
         5e:88:35:54:e4:cb:46:65:e8:fb:d6:14:72:dd:26:97:2e:7e:
         13:24:95:e2:00:3d:90:83:1d:16:ba:97:58:a2:63:8f:68:81:
         f6:f2:aa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----