Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/6aae0e7f-6a00-360d-ad54-a2b5d1df456a.roa
File:                     6aae0e7f-6a00-360d-ad54-a2b5d1df456a.roa (raw, json)
Hash identifier:          0zewRUDqqY7vQ4zKsKBCh9CMPWyExgI+/L9DGgip8EQ=
Subject key identifier:   B6:6C:CE:3F:A3:E7:28:CD:7B:9A:46:90:52:72:AD:10:AA:52:32:17
Certificate issuer:       /CN=5fb6f799-d584-48a1-9c74-50e91497918a
Certificate serial:       010D0C9F4328583CBC39BBD6075347E550D1CCC0
Authority key identifier: B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/6aae0e7f-6a00-360d-ad54-a2b5d1df456a.roa
Signing time:             Thu 27 Jan 2022 05:00:00 +0000
ROA not before:           Thu 27 Jan 2022 05:00:00 +0000
ROA not after:            Thu 23 Mar 2023 04:00:00 +0000
asID:                     7018
IP address blocks:        104.176.0.0/12 maxlen: 12
                          162.192.0.0/12 maxlen: 12

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bc:39:bb:d6:07:53:47:e5:50:d1:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fb6f799-d584-48a1-9c74-50e91497918a
        Validity
            Not Before: Jan 27 05:00:00 2022 GMT
            Not After : Mar 23 04:00:00 2023 GMT
        Subject: CN=f3d4b8ca-f6da-4e93-947a-f018a47936e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f2:84:84:41:08:87:33:99:f7:52:fc:20:ae:
                    2f:38:56:62:3a:e6:7b:34:51:49:81:42:0e:4d:5b:
                    f0:0f:cf:01:75:86:40:b3:76:c1:9e:05:58:84:7b:
                    d8:ff:ba:e7:bd:00:90:a5:1f:98:9c:b8:cd:a3:e8:
                    60:e8:bc:2c:cd:90:45:20:53:9a:03:18:35:7c:23:
                    4f:16:38:66:9a:11:48:f1:a4:13:d4:5e:d2:f4:57:
                    ce:5d:27:45:c7:85:de:5d:53:bf:be:d5:19:c9:e1:
                    75:6d:80:a0:35:80:d8:a7:32:79:e8:f4:3b:26:23:
                    fb:49:be:42:90:25:09:a0:be:26:21:cb:e6:b1:25:
                    e7:53:f7:24:76:c9:89:8a:2c:42:48:fe:45:ba:9b:
                    c5:80:e0:f2:11:fb:56:86:29:d6:10:a2:5d:1a:f3:
                    32:52:a4:d1:8d:fb:29:92:95:a4:b0:b0:40:ab:60:
                    ad:c4:c4:e1:44:62:df:65:5e:51:41:79:ee:b8:79:
                    20:35:60:b2:8a:ee:0b:b2:83:99:11:2e:1f:d3:1a:
                    2f:d7:30:4f:af:ad:5a:f3:b8:ec:58:5e:ba:6d:39:
                    c2:bc:94:14:a5:0d:22:c6:b6:dc:d3:3c:76:9a:b0:
                    e7:46:af:03:98:5c:00:9d:50:7a:0b:aa:3d:03:f1:
                    1d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6C:CE:3F:A3:E7:28:CD:7B:9A:46:90:52:72:AD:10:AA:52:32:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/6aae0e7f-6a00-360d-ad54-a2b5d1df456a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.crl

            X509v3 Authority Key Identifier:
                keyid:B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.176.0.0/12
                  162.192.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:23:37:d3:de:16:4e:0a:a1:10:59:5a:64:b4:a7:08:63:85:
         cd:26:b6:07:d8:c7:f7:7e:5c:c0:b1:bf:86:8c:1e:bf:54:59:
         c9:c6:7e:8e:9e:79:66:31:a7:46:f9:50:b0:2c:94:25:cb:cd:
         8f:fb:5b:7d:cb:cd:78:79:9a:16:37:5c:ae:0b:e5:74:63:cc:
         27:39:4b:0a:1d:4e:bc:cc:d3:3f:36:de:09:d5:91:38:7a:c6:
         20:56:e0:c9:d7:d9:0b:ae:90:f6:ba:1f:5d:3c:bd:67:0b:8e:
         ee:40:62:d6:e4:9b:3f:33:c1:d0:cd:33:a5:ea:63:7d:5c:ab:
         9d:43:35:f9:27:18:76:3a:cb:a2:dd:9c:e9:0f:ed:ae:f5:c7:
         cc:ae:af:14:eb:5b:de:ac:18:7a:99:cf:2e:62:c0:be:a4:dc:
         71:61:eb:7c:b0:77:e4:93:f9:38:cf:ee:84:5e:c6:7e:eb:52:
         c8:05:e5:7f:b7:78:a9:a0:85:84:59:83:d4:a3:f0:fe:dd:f2:
         be:09:8b:51:ee:97:d8:22:de:4e:ce:23:49:9e:8f:62:d7:d9:
         70:1f:e8:72:07:c1:68:63:88:27:44:c4:0b:75:10:ca:7d:86:
         7d:dc:5e:c2:15:ef:2f:09:fd:95:d5:50:75:d8:d2:a2:c5:18:
         03:51:55:b3
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWDy8ObvWB1NH5VDRzMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWZiNmY3OTktZDU4NC00OGExLTljNzQtNTBlOTE0OTc5
MThhMB4XDTIyMDEyNzA1MDAwMFoXDTIzMDMyMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZjNkNGI4Y2EtZjZkYS00ZTkzLTk0N2EtZjAxOGE0NzkzNmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/KEhEEIhzOZ91L8IK4vOFZiOuZ7NFFJgUIO
TVvwD88BdYZAs3bBngVYhHvY/7rnvQCQpR+YnLjNo+hg6LwszZBFIFOaAxg1fCNP
FjhmmhFI8aQT1F7S9FfOXSdFx4XeXVO/vtUZyeF1bYCgNYDYpzJ56PQ7JiP7Sb5C
kCUJoL4mIcvmsSXnU/ckdsmJiixCSP5FupvFgODyEftWhinWEKJdGvMyUqTRjfsp
kpWksLBAq2CtxMThRGLfZV5RQXnuuHkgNWCyiu4LsoOZES4f0xov1zBPr61a87js
WF66bTnCvJQUpQ0ixrbc0zx2mrDnRq8DmFwAnVB6C6o9A/EdEQIDAQABo4IDWTCC
A1UwHQYDVR0OBBYEFLZszj+j5yjNe5pGkFJyrRCqUjIXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmI2
Zjc5OS1kNTg0LTQ4YTEtOWM3NC01MGU5MTQ5NzkxOGEvNmFhZTBlN2YtNmEwMC0z
NjBkLWFkNTQtYTJiNWQxZGY0NTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWZiNmY3OTktZDU4NC00OGExLTlj
NzQtNTBlOTE0OTc5MThhLzVmYjZmNzk5LWQ1ODQtNDhhMS05Yzc0LTUwZTkxNDk3
OTE4YS5jcmwwHwYDVR0jBBgwFoAUtGY/zm+cZ0UESsNDkbc3qfziJlowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmI2Zjc5OS1kNTg0LTQ4YTEtOWM3NC01MGU5
MTQ5NzkxOGEuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMEaLADAwSi
wDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQC4IzfT3hZOCqEQWVpktKcIY4XNJrYH2Mf3flzAsb+GjB6/VFnJ
xn6OnnlmMadG+VCwLJQly82P+1t9y814eZoWN1yuC+V0Y8wnOUsKHU68zNM/Nt4J
1ZE4esYgVuDJ19kLrpD2uh9dPL1nC47uQGLW5Js/M8HQzTOl6mN9XKudQzX5Jxh2
Osui3ZzpD+2u9cfMrq8U61verBh6mc8uYsC+pNxxYet8sHfkk/k4z+6EXsZ+61LI
BeV/t3ipoIWEWYPUo/D+3fK+CYtR7pfYIt5OziNJno9i19lwH+hyB8FoY4gnRMQL
dRDKfYZ93F7CFe8vCf2V1VB12NKixRgDUVWz
-----END CERTIFICATE-----