Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e1756ab2-7367-36ce-b1b5-9aa99906979d.roa
File:                     e1756ab2-7367-36ce-b1b5-9aa99906979d.roa (raw, json)
Hash identifier:          /gVmBRZft8dsXdZFnHVJFRPGK7R/fwv+98uk+yFMblM=
Subject key identifier:   4D:01:06:EA:5F:88:D2:D8:00:16:33:0B:3A:9A:B0:A9:14:3A:37:38
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328576D51CC73C042CFC17218FA125C
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e1756ab2-7367-36ce-b1b5-9aa99906979d.roa
Signing time:             Fri 15 May 2020 15:35:41 +0000
ROA not before:           Fri 15 May 2020 04:00:00 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     394437
IP address blocks:        64.190.156.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:18:fa:12:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: May 15 04:00:00 2020 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=70aba890-3ace-4c18-91b3-50ab49bf01f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7b:b3:c6:9a:ab:2b:91:68:52:b3:04:40:ed:
                    a3:8b:76:2f:3e:66:55:cb:c2:fc:3f:fb:41:6f:74:
                    d9:16:ec:0f:4b:ed:5f:b9:bf:6c:c3:70:a7:b9:29:
                    d1:54:1f:f4:a6:14:8e:46:cc:3a:2d:ac:03:26:7c:
                    67:25:37:e9:87:c8:25:bc:d3:bc:81:0a:84:04:8c:
                    66:42:c1:16:f4:de:07:8d:af:9d:4d:3c:92:33:c7:
                    c7:65:36:75:63:61:5b:f1:fe:2e:67:ae:49:df:8a:
                    5d:40:41:76:5b:3e:31:a1:a2:97:65:f3:3a:ec:cd:
                    b5:9a:ed:8b:f4:0a:0d:9d:18:54:60:1e:bb:e2:70:
                    5f:af:3a:2f:a2:d4:5e:86:c2:d7:e5:d4:79:ae:b4:
                    05:d8:58:a3:a6:c1:e1:0c:80:c9:50:1a:fa:cc:77:
                    ed:c1:ad:3a:93:82:cf:c4:00:d2:68:a8:21:c6:14:
                    19:ad:29:d3:ee:1f:e1:95:9a:dd:5a:4c:1b:dd:2f:
                    5a:86:5c:73:a6:60:1e:a6:a9:3a:49:8d:b3:48:83:
                    6f:b2:41:04:e9:46:0c:e9:05:c2:89:30:1a:e4:61:
                    ae:a2:8f:2b:9b:c9:41:d3:d3:51:c8:c2:c6:42:83:
                    dc:db:e1:f6:00:72:47:08:4e:aa:86:b6:14:dc:ab:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:01:06:EA:5F:88:D2:D8:00:16:33:0B:3A:9A:B0:A9:14:3A:37:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e1756ab2-7367-36ce-b1b5-9aa99906979d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:84:3b:3a:26:a4:57:59:5f:e3:d1:e8:dc:28:16:64:9c:4c:
         1a:4f:68:02:12:c3:92:08:c8:91:17:ee:8f:b6:b3:93:b0:bb:
         e2:b0:a7:22:04:62:13:80:c1:c5:17:13:23:1c:53:4a:83:5d:
         b5:af:eb:a8:3e:3f:64:a8:3e:99:d3:aa:7c:20:e0:d8:25:9e:
         95:28:61:17:17:dd:42:0a:05:bf:bd:66:95:54:f7:70:f2:5e:
         ec:61:0f:d3:95:5e:fc:ab:e1:5e:94:64:a5:27:28:8e:c3:b0:
         a9:a0:6d:f9:16:dc:e7:b5:7b:69:38:2b:57:cd:12:f4:d6:98:
         ed:04:a0:32:95:f1:e4:df:93:3c:37:91:da:57:db:ad:ad:56:
         4e:da:19:45:25:0e:99:bd:26:aa:88:8c:94:71:da:c9:42:25:
         f4:55:d9:df:0e:ce:af:d7:17:64:92:36:2a:15:ce:d2:0d:fb:
         85:8e:ca:6f:84:25:0c:e8:75:5a:21:25:b0:c2:a1:23:b5:43:
         6c:46:48:0e:45:68:7e:e7:16:18:83:ed:aa:97:26:0e:f1:40:
         76:49:eb:f6:63:58:64:23:f2:9f:67:d9:26:a7:62:22:67:77:
         a9:12:e3:45:c3:22:27:86:64:aa:0a:5b:01:55:82:ab:54:dc:
         a2:1c:c0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----