Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/b8b6a500-77e2-3cd1-8d90-bdd3d7b93f1f.roa
File:                     b8b6a500-77e2-3cd1-8d90-bdd3d7b93f1f.roa (raw, json)
Hash identifier:          jHjfgxrdIAtJtLeyMBCkuwQHauJ/inJxTtQvoNVoA/k=
Subject key identifier:   4F:6C:DF:81:9F:62:1F:C6:B7:B0:AA:89:7D:F4:59:A7:AD:D9:7F:67
Certificate issuer:       /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial:       010D0C9F4328583C3EA3B18724F8DDC6B4374480
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/b8b6a500-77e2-3cd1-8d90-bdd3d7b93f1f.roa
Signing time:             Mon 13 Dec 2021 05:00:00 +0000
ROA not before:           Mon 13 Dec 2021 05:00:00 +0000
ROA not after:            Fri 17 Jun 2022 04:00:00 +0000
asID:                     1249
IP address blocks:        147.124.198.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:3e:a3:b1:87:24:f8:dd:c6:b4:37:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
        Validity
            Not Before: Dec 13 05:00:00 2021 GMT
            Not After : Jun 17 04:00:00 2022 GMT
        Subject: CN=94e5f19c-8ea7-4b17-b70e-513c1f5fd7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2b:a7:8c:2b:d4:1f:88:6a:ed:3a:ba:d6:61:
                    34:23:03:69:7a:d0:23:07:cd:05:f6:bf:36:de:7e:
                    24:eb:44:81:0d:81:0a:e2:a3:57:27:64:08:71:7e:
                    b7:de:01:87:d5:49:f8:46:bc:8e:eb:72:b0:d5:45:
                    40:9c:b8:b4:c7:a2:1b:10:bb:e9:7f:e9:5c:a1:cc:
                    07:73:61:84:5d:33:ef:78:27:09:3d:eb:e5:e4:0c:
                    05:81:c8:f1:13:01:55:20:5e:d7:a7:f7:64:3c:50:
                    ae:41:c9:ae:5f:b5:de:bb:1c:51:8f:c0:68:23:45:
                    9e:df:d1:be:97:81:4f:fb:3f:eb:2a:c7:a9:b9:da:
                    13:f9:c0:62:a9:cb:4e:ab:8f:c4:a2:10:44:b5:58:
                    f8:3b:f0:95:6f:3c:26:d7:cf:6c:c4:17:15:48:31:
                    2c:3f:f6:3a:c1:6b:fd:51:60:87:7d:44:40:38:bf:
                    82:f9:31:59:15:a1:e8:85:e7:c4:e7:b9:40:ff:66:
                    11:13:c4:f9:37:b3:2f:34:b2:6b:f1:04:4a:3a:a5:
                    ba:18:79:84:44:e1:6a:03:d1:9a:c5:76:54:6c:3b:
                    7a:4e:01:d2:0d:a0:2a:7c:68:72:49:5f:dc:2a:7a:
                    6a:93:23:b9:c9:ba:20:ef:6a:8a:4e:74:ed:d5:7d:
                    6e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6C:DF:81:9F:62:1F:C6:B7:B0:AA:89:7D:F4:59:A7:AD:D9:7F:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/b8b6a500-77e2-3cd1-8d90-bdd3d7b93f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl

            X509v3 Authority Key Identifier:
                keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b5:8e:eb:81:3f:37:1f:d8:f6:04:8a:85:22:c4:22:53:a5:
         1d:f5:c9:54:02:81:4b:ab:09:95:14:a6:b9:2a:12:ea:19:f1:
         d7:ca:0e:05:bb:29:b5:12:71:ff:27:aa:0a:1c:bd:d9:8e:cb:
         49:a6:15:b0:fd:a5:ea:0d:5c:d2:08:48:95:24:b5:03:ce:72:
         2a:85:ef:b9:af:1e:8f:f8:e4:08:7e:66:c8:bd:39:6a:86:67:
         75:52:e7:b1:c4:26:36:c0:83:92:a5:b1:24:de:6b:9d:0a:99:
         e3:d6:3b:85:63:05:3c:09:dd:54:92:12:19:81:0a:4e:57:fb:
         8e:69:58:f2:cf:a5:c1:e2:da:0e:54:09:14:b4:be:74:1a:7c:
         3b:e1:1d:ff:04:8c:3e:f8:ee:47:de:00:30:31:eb:6a:32:af:
         39:7b:85:d7:b5:51:a2:13:62:d1:3b:63:2a:80:41:0b:91:53:
         fa:9b:e0:a6:5f:a9:25:5c:b5:c3:ea:da:5f:3f:b3:26:9d:36:
         25:5f:bd:4b:68:87:11:46:a5:7f:b6:9b:d9:76:8d:34:7b:f3:
         62:cf:37:01:b3:9c:0f:55:5f:b1:66:25:51:27:57:ae:73:c1:
         6b:59:6f:08:53:19:84:a7:9e:dd:67:5d:ea:e0:a9:7d:3f:63:
         a7:b5:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----