Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/71413914-c469-3d09-9151-079d5cb4a9f0.roa
File:                     71413914-c469-3d09-9151-079d5cb4a9f0.roa (raw, json)
Hash identifier:          SW/3FHukJ0Yc4+ejBpfg5A2DEY4YLLObfsImrx3Ld5I=
Subject key identifier:   D1:67:E7:2D:53:7C:51:0F:4A:B3:AC:33:66:55:89:6C:6C:71:C5:CF
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F4328583BE7563847A1745EDF8864C620
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/71413914-c469-3d09-9151-079d5cb4a9f0.roa
Signing time:             Mon 21 Dec 2020 05:00:00 +0000
ROA not before:           Mon 21 Dec 2020 05:00:00 +0000
ROA not after:            Sat 31 Dec 2022 05:00:00 +0000
asID:                     396073
IP address blocks:        144.168.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:e7:56:38:47:a1:74:5e:df:88:64:c6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: Dec 21 05:00:00 2020 GMT
            Not After : Dec 31 05:00:00 2022 GMT
        Subject: CN=6df37e1a-c164-47d8-8166-7565206203d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6f:fe:5b:9f:65:88:d4:71:38:ef:95:7b:40:
                    4f:f9:38:33:b0:58:6e:d2:ff:03:e9:ae:a0:33:82:
                    db:96:8a:a8:6d:60:89:1e:79:0d:ef:45:47:5f:60:
                    49:a7:8d:2e:10:e9:93:c8:26:da:db:b9:d7:19:d7:
                    fd:fa:ad:c4:a1:a4:df:22:78:aa:58:18:54:f4:14:
                    04:dd:ad:1c:89:6d:97:b4:f0:ef:dc:41:be:4b:7a:
                    53:2b:03:1a:65:29:58:87:73:93:d3:45:7b:e4:eb:
                    45:9e:50:f8:de:20:39:a0:e7:26:11:2f:b5:83:42:
                    68:7f:57:42:4b:75:41:bc:11:a4:ef:ec:28:f7:54:
                    2e:56:5b:6c:68:19:5c:e9:d1:04:43:f1:26:d4:d7:
                    f3:1b:2a:b8:fd:56:6e:8d:a9:58:72:ce:58:22:bc:
                    8c:67:ff:e0:35:9f:8d:f7:86:9b:17:c2:de:79:e8:
                    ff:cf:97:45:e0:af:24:08:18:bb:f0:5c:49:a7:a0:
                    bc:30:d6:a4:37:30:37:ab:52:ad:ef:4c:8b:4a:1a:
                    f8:7c:02:4c:1b:b9:91:c2:c3:99:8a:64:55:8b:2d:
                    fa:2b:2f:ad:2a:a9:0d:36:49:3c:dc:8e:f7:43:24:
                    20:c1:34:ee:84:6d:6c:85:71:5d:16:a8:b5:59:11:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:67:E7:2D:53:7C:51:0F:4A:B3:AC:33:66:55:89:6C:6C:71:C5:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/71413914-c469-3d09-9151-079d5cb4a9f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c4:ba:93:79:49:a7:05:af:98:09:38:eb:2a:d9:df:5f:c0:
         2d:96:4b:b0:d1:24:e2:8a:df:87:d7:fc:6f:d8:74:c1:28:6e:
         ea:af:ca:32:f2:86:7d:12:2e:84:b5:8b:34:6f:ce:6f:03:3e:
         a2:f0:51:87:83:b7:ec:49:1e:28:25:2a:0d:a1:60:3c:be:fb:
         01:a0:90:75:e4:6b:2e:a2:c8:d2:cc:a1:40:ff:31:a8:77:16:
         b8:04:d0:0d:f1:36:08:e6:79:05:7d:01:bb:8e:b5:a2:ad:28:
         f8:01:f5:18:63:3b:f5:87:c0:dc:5d:17:e5:34:03:68:97:27:
         a8:85:5d:4d:b5:8e:c3:7a:5e:1b:e1:fe:ee:01:04:dc:89:b2:
         c0:53:e5:1a:9c:e4:44:84:37:84:41:8a:be:68:a8:a5:5d:36:
         70:6c:a6:ee:27:c5:63:bd:aa:fe:fb:84:43:f8:aa:f1:a2:46:
         01:56:a3:2e:f7:1d:a4:85:23:23:79:29:94:c4:e3:40:3d:87:
         39:b3:22:b9:71:41:6f:3f:27:5e:c4:aa:4d:77:67:06:39:50:
         a9:db:79:bb:69:f2:67:a7:9b:b1:e0:23:32:0c:0a:d1:8b:95:
         12:df:fb:0f:0e:ea:68:ae:f7:03:90:de:13:47:f1:69:50:4c:
         2f:0c:ef:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----