Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2be482b6-5ee7-3a11-9aa7-1581eecff742.roa
File:                     2be482b6-5ee7-3a11-9aa7-1581eecff742.roa (raw, json)
Hash identifier:          1pgI1R7qZxWxt5hLq7M3keNQuRn0vBhmB53maz5TzLo=
Subject key identifier:   E2:BA:D9:4B:E5:2E:38:6A:1F:33:B4:E1:6C:35:E9:18:66:F4:C5:15
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837E4835D8F10DAACDD228BDC80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2be482b6-5ee7-3a11-9aa7-1581eecff742.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 12 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        207.34.220.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:e4:83:5d:8f:10:da:ac:dd:22:8b:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 12 05:00:00 2023 GMT
        Subject: CN=fb40cea6-6e78-422f-9383-98616b2bb4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:d1:95:51:6a:11:f3:82:b8:4d:dd:c8:19:
                    61:88:b3:6a:e7:e4:7e:65:e7:03:40:da:0d:43:a9:
                    3a:83:75:43:bb:55:6b:eb:ce:57:3a:bf:d8:02:57:
                    83:9e:d4:e1:38:a9:30:15:a3:f6:c9:86:b5:2f:28:
                    36:3c:a8:88:ca:de:c5:37:35:8a:35:18:40:4d:1c:
                    0e:d6:07:33:5a:44:39:93:3b:ca:0a:be:55:c3:db:
                    cf:ce:d0:e4:9f:8e:83:39:ee:e4:c5:5c:47:8f:25:
                    9e:83:76:69:63:21:7c:ef:63:05:4d:7b:18:c3:1d:
                    a7:08:28:8b:45:12:c4:1f:91:b8:a5:34:32:20:75:
                    af:7a:0e:16:05:53:7b:52:da:8e:d5:c7:1a:f7:62:
                    67:cf:2d:1e:a2:8d:7f:34:bd:a0:0e:ae:f0:99:bb:
                    c1:ef:4b:06:73:99:1f:04:c6:f1:36:50:87:37:e9:
                    fc:b1:44:20:39:22:f5:8b:33:b1:01:30:7f:2e:49:
                    10:f6:da:87:52:15:b7:57:36:91:41:b7:e9:d4:a3:
                    de:31:86:70:6c:e3:01:c5:60:87:3c:30:56:03:59:
                    f2:f7:d2:84:29:1c:d8:f4:02:24:0d:51:64:af:cb:
                    88:46:a9:dd:4d:fd:b2:bb:9d:e0:16:3c:c7:d8:58:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BA:D9:4B:E5:2E:38:6A:1F:33:B4:E1:6C:35:E9:18:66:F4:C5:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2be482b6-5ee7-3a11-9aa7-1581eecff742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:72:9b:ee:e7:06:80:3d:2d:b1:67:bc:70:02:e6:2f:3f:f3:
         f5:ec:74:70:33:4e:ec:aa:66:95:5d:7f:07:10:ad:fc:e7:a5:
         01:52:90:23:0d:84:16:72:a5:49:54:04:74:33:0c:89:9e:3a:
         23:4f:3e:cd:07:4a:84:a3:7b:0f:6a:3e:46:4d:f2:2c:fd:37:
         56:10:72:56:c9:a9:7e:7c:ce:40:01:ce:b7:1d:d4:9a:15:f0:
         4e:6b:82:83:f4:f8:7b:ec:3a:0a:18:0c:89:bd:13:e5:fa:10:
         04:b5:24:e8:e1:84:6a:ba:01:19:ac:58:23:f2:2f:26:3a:68:
         70:4e:2a:b5:34:83:e3:12:b9:d8:22:93:37:a7:bd:fe:bd:a3:
         6a:af:59:13:0e:f5:c1:c7:5e:19:c0:bc:ba:bd:d7:ea:c3:34:
         f8:1a:19:6d:15:b7:40:f7:7e:fe:48:12:5a:eb:a2:4f:b0:31:
         5d:c5:8a:7a:23:e2:8a:ab:82:f4:bb:b0:87:9f:5e:95:70:68:
         58:84:a8:94:67:04:69:b1:43:51:d4:ed:8f:bb:4b:11:ad:e6:
         a6:b6:e1:bf:fb:81:2f:d0:45:fb:fa:ef:1e:79:dd:b4:af:a1:
         78:a2:40:1c:f6:f8:a4:9d:2e:a0:79:c1:c2:21:04:33:3b:97:
         8d:65:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----