Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/3f038875-4209-3cfc-8c3f-4015ea9a4e74.roa
File:                     3f038875-4209-3cfc-8c3f-4015ea9a4e74.roa (raw, json)
Hash identifier:          m4wawdqqQ0qLO0K2oxF3OfHFU+lWwk4WX6HxxHJmpJc=
Subject key identifier:   35:70:C1:DE:62:8C:55:85:51:30:62:7B:AA:18:2E:98:F5:AF:EC:67
Certificate issuer:       /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial:       010D0C9F4328583C51C2C47B1A4D489704651800
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/3f038875-4209-3cfc-8c3f-4015ea9a4e74.roa
Signing time:             Mon 13 Dec 2021 05:00:00 +0000
ROA not before:           Mon 13 Dec 2021 05:00:00 +0000
ROA not after:            Fri 24 Mar 2023 04:00:00 +0000
asID:                     60721
IP address blocks:        147.124.195.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:51:c2:c4:7b:1a:4d:48:97:04:65:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
        Validity
            Not Before: Dec 13 05:00:00 2021 GMT
            Not After : Mar 24 04:00:00 2023 GMT
        Subject: CN=3e964f81-21a9-4c26-8ddd-89e792bcc715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:03:ec:88:26:95:21:5a:13:46:b0:58:9b:
                    5c:e9:b3:18:4b:90:92:ba:63:1d:82:33:8a:2f:0b:
                    6f:14:13:f7:59:8c:f5:58:c7:7a:12:97:c7:67:fe:
                    10:a5:ce:0f:10:cd:77:dc:15:7c:40:a5:81:de:df:
                    ac:94:a9:e3:30:f0:64:4a:62:25:16:d6:03:7b:76:
                    cc:76:7a:df:88:a3:d2:a9:0a:aa:20:59:50:a4:65:
                    36:77:6e:d0:96:97:c7:3d:eb:1c:02:7f:7e:eb:af:
                    45:96:29:99:a7:d8:aa:58:92:61:1f:6f:99:eb:99:
                    7c:52:3f:63:db:66:13:9b:ec:20:97:8f:29:8b:b2:
                    e3:92:61:72:d6:1d:65:1b:ef:04:39:5b:64:45:47:
                    d5:df:5d:f6:9f:b4:3a:57:1a:49:37:fa:49:16:27:
                    cb:c3:a6:dd:2b:e5:96:ab:0f:37:cb:09:39:a8:7d:
                    cd:4f:57:1d:da:59:c8:7f:69:81:12:c1:b3:6f:d1:
                    08:0f:b5:c5:26:83:94:21:f6:4f:0f:2b:bb:fe:b4:
                    a9:e5:10:3f:24:c8:7c:e7:7a:df:25:e8:e4:5b:c6:
                    c7:18:3d:0b:26:dd:2f:6a:f3:18:b3:a9:94:79:44:
                    ee:02:d5:9e:89:34:07:63:95:38:62:19:77:3f:f1:
                    56:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:70:C1:DE:62:8C:55:85:51:30:62:7B:AA:18:2E:98:F5:AF:EC:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/3f038875-4209-3cfc-8c3f-4015ea9a4e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl

            X509v3 Authority Key Identifier:
                keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:86:b7:d0:b7:df:10:a6:7a:0a:54:bf:57:77:bf:fe:cd:0b:
         27:72:92:96:0b:1a:fa:32:14:7d:9b:1a:d9:9b:16:d0:d8:4f:
         d6:88:02:01:98:97:c9:a5:26:82:e7:62:43:37:c3:08:d0:79:
         42:6a:e2:be:1f:c5:52:47:84:d3:0b:27:e7:10:86:65:72:dd:
         34:b0:6e:6c:e5:e0:82:e8:b0:f6:96:85:f1:df:f6:1f:00:12:
         a5:33:6f:33:6e:2f:ee:b9:64:d8:e7:e5:4f:4f:db:f4:55:d0:
         2d:91:01:05:7d:43:eb:17:06:a4:f4:5b:09:e6:9e:84:10:81:
         d6:a5:44:f6:90:d3:ac:00:4e:f0:a1:ad:d3:a3:2c:45:b1:36:
         69:92:14:43:e6:7a:dd:60:f8:a4:50:5b:a9:78:6f:47:43:57:
         d2:44:1e:93:04:d4:f3:8b:aa:79:04:db:b5:b9:ec:1b:f0:09:
         88:94:57:23:a5:1b:62:74:5a:dc:80:b2:33:ef:5d:32:1c:bb:
         86:eb:60:d6:86:d5:35:2f:db:e8:32:68:02:0c:75:27:7a:b1:
         04:e2:bc:8f:b7:89:4d:85:7c:82:f9:05:d6:62:86:e6:5e:08:
         6e:d0:f0:b4:5f:bb:1e:ee:31:1b:2c:56:a1:af:65:18:86:26:
         f7:b4:c3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----