Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ef781aa6-297a-37cd-a92d-5ceab5606429.roa
File:                     ef781aa6-297a-37cd-a92d-5ceab5606429.roa (raw, json)
Hash identifier:          46cSVJO6PkZbRcRHK8FZL6LAH7ysw8CmQ91zXHlOW68=
Subject key identifier:   86:F5:50:D7:4C:76:35:E6:15:49:DE:2B:0A:36:CD:F4:61:04:B5:41
Certificate issuer:       /CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732F8F8775
Authority key identifier: A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ef781aa6-297a-37cd-a92d-5ceab5606429.roa
Signing time:             Wed 08 Jul 2020 17:53:22 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     398292
IP address blocks:        23.158.48.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:8f:87:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=82ac7757-19e2-4d12-a953-981920fc123d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7a:2b:11:3b:4f:0d:97:7f:04:b0:c4:fd:0c:
                    0c:0c:4b:10:8d:2d:e6:c9:1c:9a:65:3c:d2:27:a6:
                    a5:98:46:bd:0f:3e:b6:30:bc:57:3f:b7:3d:64:ae:
                    a4:8c:6a:59:7c:db:b7:b7:e6:fc:e7:c9:59:7c:bc:
                    dd:ea:7b:1d:99:7c:bf:81:59:61:87:9f:78:50:41:
                    bd:04:13:33:a7:04:ac:d6:b8:21:43:9d:a4:98:e3:
                    8b:65:61:72:b9:a6:d7:8b:1d:8f:d2:fc:b7:4d:fb:
                    b1:f2:1f:da:b8:17:62:03:4d:b8:34:14:2b:19:5a:
                    53:19:ea:94:4e:c2:43:c1:7d:5a:fe:22:89:82:f0:
                    65:a8:06:37:16:ff:16:0b:0e:47:1b:74:1a:64:6d:
                    91:b9:19:9d:f7:ba:f0:45:d2:09:04:4b:d9:4b:a0:
                    9e:57:af:37:a2:12:61:9f:a4:3d:2b:dc:76:c8:06:
                    ab:71:39:86:52:12:7f:20:46:7d:d5:45:94:45:6e:
                    69:27:08:f8:26:86:93:d8:d4:4b:ab:f6:ac:1c:cc:
                    70:3e:0a:a4:26:53:63:6f:4e:6a:6b:01:60:8f:48:
                    3e:c5:6b:4f:c5:c4:fc:8a:94:30:97:6f:0a:df:bd:
                    14:82:90:7c:05:1a:01:a1:e4:7a:2d:cc:98:ce:0a:
                    98:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F5:50:D7:4C:76:35:E6:15:49:DE:2B:0A:36:CD:F4:61:04:B5:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ef781aa6-297a-37cd-a92d-5ceab5606429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl

            X509v3 Authority Key Identifier:
                keyid:A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:16:7b:8f:5c:63:7b:8d:c1:de:2b:e6:3e:54:d4:3f:64:f6:
         c8:08:b0:82:96:4b:dc:7d:e8:7d:b2:5c:c1:ec:84:b1:93:a0:
         4c:63:ce:ef:98:e1:91:ff:a6:60:47:9f:29:e3:95:9b:bf:83:
         d4:25:46:44:10:53:1f:b6:37:73:47:3d:36:b3:11:e4:30:c5:
         b0:9d:80:97:e7:86:d3:d1:86:0a:b4:a5:fe:09:53:c7:ed:82:
         ef:94:ca:78:bd:08:35:9e:eb:0b:27:ce:37:98:55:80:97:4f:
         d2:27:65:01:6b:d9:ed:35:89:1f:df:19:01:e4:1a:08:f1:52:
         bc:3c:a2:63:ef:6a:c3:4c:2c:7a:bd:04:5c:f5:94:4b:05:65:
         24:01:14:57:24:ff:0d:fd:90:0d:82:c3:0c:b3:bc:e6:5d:f4:
         f5:06:9d:f1:47:ad:f1:7d:d2:31:1f:93:37:58:5e:c8:32:2f:
         8a:fc:5f:81:c1:47:c0:ca:73:7c:3b:66:67:a6:0e:ba:f2:1b:
         29:ee:9f:11:7d:09:f6:7a:ad:9e:71:b5:21:02:01:95:da:d5:
         ee:81:77:d1:4f:08:21:0f:7e:66:da:46:62:8e:7e:5b:68:26:
         fc:3f:dc:c4:02:64:a2:a2:d2:f8:91:bd:a7:0b:14:14:76:e0:
         47:37:6d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----